last executing test programs: 10.973868467s ago: executing program 2 (id=5012): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000001c0)={0x14, r3, 0x313, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4) close_range$auto(0x2, 0x8000, 0x0) r4 = timerfd_create$auto(0x7, 0x0) timerfd_settime$auto(0x2, 0x1, 0x0, 0xfffffffffffffffc) r5 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r5, 0x0, 0x2) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0xeb1, r5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) write$auto(r1, &(0x7f0000000000)='\x10\x00', 0xbc8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r4) sendmsg$auto_NL80211_CMD_CONNECT(r6, &(0x7f0000001400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000013c0)={&(0x7f0000000340)={0x1068, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_MASK={0x4f, 0xd7, "eabd8d4834af2137d135a628173997abf3d3297dbce1fcfa28882f726429e2379b485ec34e8db7f2cab7327aeaf3da782c06b2b0f54e392a5784372d41a0ad86484a375e07d7350891b3cb"}, @NL80211_ATTR_MAC_HINT={0x1004, 0xc8, "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"}]}, 0x1068}, 0x1, 0x0, 0x0, 0x10000054}, 0x4040801) 10.656232349s ago: executing program 2 (id=5013): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x105, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x40, 0x9d, "f4343f111532d97d8a8d9548014461c7dc632be1782ecbc5e2a9de7a981365e9f3e3d6ff0216949424c650b609d62daf3e1d2e595a08c0f36805b3c1"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040031}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000200), r0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x2}, @L2TP_ATTR_NONE={0x18, 0x0, "d2f2bae32c704f0b4eb7f050c179c79c3dfd12a8"}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x855) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r4, 0x8004500b, &(0x7f0000000140)=0x7) read$auto(0x4, 0x0, 0xfdef) 10.086150426s ago: executing program 2 (id=5014): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x2, 0x88) socket(0xa, 0x5, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r1 = open(0x0, 0x22240, 0x154) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r0, 0x100, @old_prog_fd=r0}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r2, 0xbb8, @value, 0x100000003}, 0xcd) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc9, 0xc8) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) setreuid$auto(0x0, 0x20000000004) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x10, 0x0, 0x0) r3 = socket(0xf, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) 9.920396057s ago: executing program 2 (id=5016): select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xfffffffffffffff7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x800000002, 0xfffffffffffffffd]}, 0x0) 9.783111454s ago: executing program 2 (id=5018): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2cb42, 0x0) 9.499057936s ago: executing program 2 (id=5021): mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) r0 = creat$auto(&(0x7f0000001780)='./file0\x00', 0x3) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000018c0), 0xffffffffffffffff) statx$auto(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', 0x3, 0x8, &(0x7f0000001940)={0x2, 0x6, 0x6, 0x3, 0xffffffffffffffff, 0xee00, 0x400, 0x8, 0x2d38, 0xffffffff, 0x2, 0x2, {0x1, 0x40}, {0xfff, 0xda}, {0x2}, {0x5e, 0x3}, 0x1, 0x6, 0x6, 0xba20, 0xfffffffffffffff9, 0x1, 0x42, 0xfffffffffffffffe, 0x9, 0x1339e000, 0x3, 0x1000, [0xb, 0x1ff, 0xa97, 0x100000001, 0x7, 0x1ff, 0x9, 0x4, 0x1]}) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000001c00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x144, r1, 0x829, 0x70bd26, 0x25dfdbff}, 0x144}, 0x1, 0x0, 0x0, 0x40011}, 0x4) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x30, &(0x7f0000003b00)={&(0x7f0000001580)={0xfffffffffffffe33, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x3d7}]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4004055) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000001840)={{&(0x7f00000016c0)="bb8addc7aebf3091095a1ed47fcd4852852416ac1831b5f8ad1da7c185239cce2bdc299c4e6b1f7755d8a2c25c47ea83a44e08c1a1fccea1e79d5df2dd86ad7de11d64027785cbbf3a37011226b74cd7268b4941dcc1110684ed435b95ae97839c9563965ce3a4ddab4efa5e1e613b5b1c91a53bab5f517d894ff9c682ed2e9fc1046e89d72e6275455c97c7bb08894fc34bce0280e435399b76e60fb3b1b03e5c5a5ddb2f0c28f12687943dc5cb8d0cefdf272a54934b330da7b7ac49c8", 0x8000, &(0x7f00000017c0)={&(0x7f0000001c40)="92573e445849f65ccbef119651558672ab92bdf8d5b53ac2137b4a25b925789f6c0124e7e858a7fb8a562631eda17c7f6c7179a1467b160d29ee6f6b5e97a2dfcdfbd0242a41e40f52cbd2c90b9b876f9356a2ea7e64b3f1c244863e99946bd4cc699e", 0x2}, 0x7fff, &(0x7f0000001800)="2e8e575a099c1444fdbdbacbc789a0c753d589022536a0007cd924e3a2f89ca67694bd15b8acfdea3e98811d1c5f", 0x6, 0x5}, 0x8}, 0x7000, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f0000000100)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0xb, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x121040, 0x0) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x20000040eb1, 0xffffffffffffffff, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="e4f7e1dfa0f60329f905e6cc0eb7a0ab4d0ac5d2668d11279b985ed67c84f9db2366083d9e91ae2dbd0544eb763bff12ca06aa43ad021cb4518973fe277ac86b4e02330000b209e22a5f389279f70636624233f076cd72163f793602261812e878ed314f17726cbd860db8847a5e6cc08f7b2319e2888fa84fba9ab676c9b2bbb639b5626a4f31ebb82333320b1adf6b838dc7fada24da6daf369f062dd44470bb4cd3e2288fb112f035a273ce43b55947eb5e4757d6e403355e1b71f11190c4e0934a0cd913fa4516", @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250100000008000900040000000800020004000000060003002a000000040005000800010007000040"], 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x0, 0x221, 0x70bd2c, 0x25dfdbeb}, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) getpid() 9.055059199s ago: executing program 1 (id=5022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0xffffffff) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/snapshot\x00', 0x8) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x48abc1, 0x0) mmap$auto(0x0, 0x7, 0x8000e0d5, 0xeb1, r2, 0x8000) socketpair$auto(0x1e, 0x1, 0x0, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x6, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x140502, 0x0) ioctl$auto(0xffffffffffffffff, 0xaa59, r3) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r5 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8955, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall$auto(0x2) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r6, 0xc0045103, 0x3) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 7.847298537s ago: executing program 1 (id=5025): select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xfffffffffffffff7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x800000002, 0xfffffffffffffffd]}, 0x0) 7.523062612s ago: executing program 1 (id=5026): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readlink$auto(0x0, 0x0, 0x7) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) socket(0xa, 0x2, 0x3a) (fail_nth: 1) 5.623054498s ago: executing program 1 (id=5031): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x20400, 0x0) mmap$auto(0x0, 0x7, 0x3, 0x1a, r0, 0x8000) execve$auto(0x0, 0x0, 0x0) mknod$auto(0x0, 0x63c1, 0x7fc) setsockopt$auto(0x400000000000003, 0x29, 0xcf, 0x0, 0x567) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x6, 0x100) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto(r2, 0xc0105500, r2) 5.145367894s ago: executing program 1 (id=5034): r0 = getpgid(0x0) pidfd_open$auto(r0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x18, 0xa, 0x1) r2 = accept$auto(0xffffffffffffffff, &(0x7f0000000040)=@nfc={0x27, 0x0, 0x0, 0x6}, &(0x7f0000000080)=0x7) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000100), r1) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x1000}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpgid(0x0) kcmp$auto(r5, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000027c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002780)={&(0x7f0000000080)=ANY=[@ANYBLOB="f02600", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4], 0x26f0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$auto_def_blk_fops_fs(r2, 0x85, &(0x7f00000000c0)="a84f1a420e9ca28606da2b26b477ba9f27b842c190f494dad2c1bba108a2b97d0b3ff1e0a75e95bc4360b908dc7038879620c810496ece02a9822adacd08264139e9022208cab9257d9c0c469c7716dd4627de9616a7bef5859f9f49d1de4036484968acb6b4581a71bae132a6e44240b7ff4522fc8d6119279392a29187d0c1a95712628c4062e7161d06fe8db2553ad2546ef9c7d518e3bdf14062f608cbf70fdfbab902ff9315c72ebbdb56d5e1ad") socket(0x2a, 0x2, 0x6) socket(0x2, 0x2, 0x1) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x0) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto_TCFLSH2(r6, 0x80044704, 0x0) 4.618853614s ago: executing program 3 (id=5037): ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x7}) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x0, 0x1c94, 0x2) r1 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0x4040aea0, 0x0) 4.519838009s ago: executing program 1 (id=5038): unshare$auto(0x40000080) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r0, 0x0) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x4000000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x1, 0xfffffffeffeefffe, 0x1015) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(r2, 0x0, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0xc, 0x20009, 0x8000000000000001, 0xeb2, r1, 0x8) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.198826823s ago: executing program 3 (id=5041): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8006, 0x0) r0 = fcntl$auto(0x3, 0x4, 0xa553) r1 = gettid() shmctl$auto(0x9, 0x7, &(0x7f0000000180)={{0x8, 0x0, 0xee00, 0xa, 0xf2b, 0xa, 0x8}, 0x9, 0x7, 0x40, 0x8, @inferred=r1, @inferred=r1, 0x3, 0x0, &(0x7f0000000000)="db40c8215c5e0b7946fb90098caf539512fe9695af5eafedce1b3714f9ec2d99be9cb5a1695490a00f728d4704c75b87a563ccd675f1fb4642618812822e921f77011761ea7201d2a38dfc0a7306dcd2ec31b33c69a54ce93d0b79b5fd9d8ce1b5fc3ecd8d60d9fa49728654aa7c753b2d9f23ac583b0f6d6e990ea2cabcd61186f02a90ea2dbcd030c8bf0d49d82ccee8894fcb558bf3ebad231e003b7d3dfb32596e1908ce2f9a774ac528331507f2967e1035a0045534258ab448d892310056207f88de", &(0x7f0000000100)="49f596c11a3af1f3fa72baeb286a8147b31c4a72406ab9c4aed0b8a22ba038dfe419eae5d2cf22731e3364635d9e7e2bfe5a7fd60afc65c7b142ea9c0b47d3b8d32b1866483d840e751bba0db527747f1c5785ae8e2dafb7dbba6bc8ca50b0bc50ad60318f1f84f0d707611c6ec6f228d9d704ea77e71b887a"}) setregid$auto(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'pimreg1\x00'}) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000240), r3) r5 = getuid() r6 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$auto_IPVS_CMD_GET_DEST(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)={0x668, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x364, 0x2, 0x0, 0x1, [@generic="7489b20b8c2a4e9a7a137eb724c66789bbc6a5f14c0cd191b329b9ba24d0cc58c96433a5b8a83e022c3b9162e5914edc0f99302cf8c294a241a68e4f2348fe9020ccd8189d10852af334d146a26257cc998ce0851344d4998951e0a4b0f933c95366c5f913c921e32197b99c791900dd8d697478a50e39bff3c9870594c6ee0664266c224ed7a8b86553a5df1cf89c787d30c89a7fc6175c615d4564a19c8fa8bf59d5a045c063d92c6a806b121b6fc973a543399a330c0ba88d8856226d17f6911bab14d41932b80836944c05f22b6883476c6143c01369373c7cc5b839472958936b23854d9eab36", @typed={0x4, 0xd1}, @generic="6c84de5b6501f2dfe3e00972da589a8ce4447b3db6bde57ffcb8e75f17804db77c24040e03730370c4437e2ec1ced081b719941f193fdf1e0eb01bf4d6de25d894cd7253ffe7ebb163ed02094984cdd190bc0bf379c74f2e15b0456bf90f7abe895c398d107aeb9ac75dc20f772d07a259afd34a707e8f7c99da010660a0f35738bdf2ae3f8a92d64107a9a564593f7ba7a67fdebc85c77f615d15484963a38ebe2627d014e7eabe9a825f2e96cfff8cfd7d4386b57a8e9228f71363f3c83c", @nested={0x196, 0x4e, 0x0, 0x1, [@nested={0x4, 0x11c}, @generic="5dd9582f224a34ecc6be5e08cb224ab01712741c191e7b7f32018c2d8109e6a75ae7b3ef145d5400c8a5cf47c8b888", @generic="bad32f37d58ab0e8126751f8495eab80c4383782b2ef9088865d29e830f49d986f28ba52ffbe4db4c0c79c122e82e53ac878238db028ba1bcfc75d148aa4f1bf8075936c18bfd5b9bba9f012bdcd499d27b64f598c737e9f4bfacf3cddee500239a2da94057422f976ad22a117cb41", @typed={0x8, 0x12c, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x32, 0x0, 0x0, @u32=0xf8}, @generic="60897e9dae73ca44aec734c71f20e031ae77774f09e0538c3cc03547155ff626831897ee035714f747b73a0b69c02fba6923fdfcfd56cafca607cb039a406b9e7b01689ac8e1dfadf3e2307bdcdc77662ec911b1a6003087f8af7836816a4810e1633782fcfd21a955073b427e17393f34d569eeda79569499516a3bbb2525d48c505551b43b0afab2e9cebb37faca797901e33b8716505e4dc5c139e73010baae79b1078277a9663d641b20097e413d99045613afad2c7e31282ab227ff63e4c73885f9c36d4dbb2101f214532c9e1d7abc2615", @nested={0x4, 0x20}]}, @nested={0x1c, 0x117, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x101}]}]}, @IPVS_CMD_ATTR_DAEMON={0x2d8, 0x3, 0x0, 0x1, [@nested={0x56, 0x62, 0x0, 0x1, [@typed={0x8, 0xf3, 0x0, 0x0, @u32=0xa547}, @generic="8d4221d53a6c97b31831572281da991ba0ed1c944ae568d63a48df83c47cb72812ef502fa729ff92c54c164f8586", @nested={0x4, 0xa9}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x5}]}, @nested={0xb3, 0xc5, 0x0, 0x1, [@generic="9a0568c7af2714d1644ded3886f7fa82e78b966eca3f72ab19c2018cff5782660209e4f2327c96743aa5d1f290a98f914db4bf2f7164b6b3da1942af86c10eb06879975bdc75767401b06207ed66ba8deaa9fa55047ef997f3541c8d7cd63806283ed142d96706aa5f19f3e72019423e2e1c7113283e005fd08641b5c38a59129c5795c145092a7270dccde772cff3af05653b1bd44f929a5e69b9901ff80fa59c22d8a0a8ccb1cd4baeb1bf26b503"]}, @nested={0x38, 0x32, 0x0, 0x1, [@generic="c5b8b7bcd56314b696ad638ec71cfd601c44e9c4c250cb2a2841e998205c9a886c2103886c93c566e8d1a4b9a06a31f75e3fe1dc"]}, @nested={0x18e, 0x69, 0x0, 0x1, [@nested={0x4, 0x65}, @typed={0x8, 0x148, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @generic="eeeae29a2c4a9de1babae8fe06059c8783d1b7b9bd0a31c57ef980282e16c30bb620ee953f6884131163011db5a2568f5f442f38ab2c8066679dc971c04ab45244bbd1da852c482a4fe90dabb57aa816cb21cb68973525b91d9852ddc99e9259662b11f886a5998bc3df0c5fc4e27d660b1c87c3086c05ed8b1ac420a242f0de92bffcd016c76b1096a8851f7bc913e6130beb7a1221115326518131a7cff5e216f8a14b3924a286f32efd76c83cb3f220ff58518ae8ed0b4eb63e730cfd79d1e866a2", @generic="eba0815417e10fe7c252a80aa6de25371d4928b66262b7175113d39e79f6cb5cf0289e98cfebe7a63fc268deb28f4a96ffdd4b4657cfea63a981c58245c9ab035b4969409774c7b5ee9220922b55a5a19145d394e00a7aa5d046270004a2eca9a07ff0ec92cddc009c7aef3c77ef0fc39624c2ac696ae464c96a61c4911d7132247be94f295fe08a8927fd5d7dd2678584cb9152f2f29de7f73e8a", @typed={0x8, 0xb, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x138}, @nested={0x4, 0x11c}, @nested={0x4, 0xfc}, @typed={0x8, 0x129, 0x0, 0x0, @u32}, @typed={0x4, 0x126}]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x668}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/ptp/ptp0/n_programmable_pins\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000300)=""/231, 0xe7) prlimit64$auto(r1, 0x0, 0x0, 0x0) 3.872529021s ago: executing program 3 (id=5042): r0 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) r1 = timerfd_create$auto(0x7, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) r5 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x101081, 0x0) sendmmsg$auto(r5, &(0x7f00000007c0)={{&(0x7f0000000580)="ff1ae1d982984eba84685244968665abb7d80a2e8cd62e513c2269d622d7251a07ad7bf3bdad4feefdfce0567b09cfb19a1246a956812ec0af1cf684767524716c02b7ef235e4c9941b1645e72788f6b5197bebc97f831e299d898fa603e9ba013324ae28b29c4", 0x5, &(0x7f0000000700)={&(0x7f0000000600)="4215ae4cb0a227dffc19a945a7bc0b016938ad7ef3450a97f6d1deed7152c26ea75e9bfc0276c16981b5b706634b303aa09f3742a4e44c8d67f822ecd89a8f3b5d71f9098b18fe064f8f77c7fd9ab514b36c4e639a9f0544d4264b36de0f9ec86e8b007a1e28dd69728416f4d0efe32d1451542a422b2bd4cf01b747fc11b3a2d119c52e46688fc3b20c6c54fa06b22b97f244591aa541d4d475d9bbca2590564d94189c9a09e356e3455eebe84f4c997c5efc8714c0668c4eeb95c8c11fb8f12407de9ad781", 0x6f}, 0x8000000000000001, &(0x7f0000000740)="8882cb70367e4e12b27dc6d485913f168d3cc03f2013dbf0c54e0e0354d102e85c961a2fc7b0573e566833955094048159924fe1100851046e2f0e1425806255c4d6472228e7425bf2af90bd2c2a068986ed52b46a534a3e46cd9b8dee06", 0xffffffffffff8000, 0x8}, 0x8}, 0x101, 0xfffffffc) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r4, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvmsg$auto(r3, &(0x7f0000000300)={0x0, 0x7, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x483, 0x8}, 0x4) write$auto(r0, &(0x7f0000000500)='nl80211\x00', 0x247c) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x208, r2, 0x4ce6544b08fd2b71, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TID_CONFIG={0x9c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xfd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x8}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0xe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x6e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}, @NL80211_ATTR_MAC={0x67, 0x6, "a0af3b62c8674c991665f01d265d2da527b90c2167d5a1010eb350eaca73ca8a21daae67322d6c808b802fec893cead4ab30e7fd0ecb63a71e600466b5bab7475e434bcaced4c4a7b655b82674365dd1cd278c4f0437e1c1ab31c8a90d67acc55d8b9e"}, @NL80211_ATTR_MLO_TTLM_DLINK={0xd0, 0x148, "05156aa18e8cb1f9da8c5160eb7a85efad62c3d2f2f41d405c0a98707c159debdf04824c6dda9af414eff2561a28f07a2bdc9ee208d70c158952ba7418c0fb59e50c5f37edcb39fdc0c5e01b5d80c55818f27d7626f5310fa7cee40ddcfa8cb6cc4f3c5bd352457e252b5fa14c5a331a2d9dab8225499076f24001c026fa1fc84763487ce6d282e881835159e31345d8b2861fc2ab0cd27f52f24d95432e8411a2123c2fa36443a90a7edf623d752ac093f5e0ba47eb4e61c47eeed2397cc029b55cb93d0c854b9714aaca1e"}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xd}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x5}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x8001}, 0x4840) r6 = socket(0x10, 0x80002, 0x0) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004140), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x36}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x8c85}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r7, 0x800, 0x70bd2d, 0x6, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000c080) 2.833022113s ago: executing program 0 (id=5044): futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x3000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x58140, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) 2.718213902s ago: executing program 0 (id=5045): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) rmdir$auto(&(0x7f0000000000)='./file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2cb42, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) readahead$auto(r1, 0x7ff, 0x9) close_range$auto(0x2, r0, 0xfffffffd) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r2, 0x0, 0x2) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x8}, 0x6) read$auto(0x3, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)={0x14, r4, 0xf3e97f51700e57cf, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2b, 0x2, 0xfffffffe) 2.359763122s ago: executing program 3 (id=5046): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x702, 0x70bd26, 0x25dfdbfc, {}, [@HSR_A_IF1_SEQ={0x6, 0x6, 0xfff}, @HSR_A_IFINDEX={0x8, 0x2, r1}]}, 0x24}}, 0x20040004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x11, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x3, 0x4, 0xa553) ioctl$auto(0xc8, 0x800454cf, 0x200000000005c8d) 2.151884592s ago: executing program 0 (id=5047): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf25"], 0x14}}, 0x4000000) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) (rerun: 32) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async) madvise$auto(0x108000, 0x800034, 0xa) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) 1.317660237s ago: executing program 3 (id=5048): ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x7}) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) close_range$auto(0x0, 0x1c94, 0x2) r1 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), r1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0x4040aea0, 0x0) 1.066465831s ago: executing program 3 (id=5049): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) socket(0x28, 0x80000, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf2521000000"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xc, 0x0, 0x0, &(0x7f00000002c0)={[0x100000001, 0x400000004000000, 0xa, 0x1, 0x948f, 0x2, 0x15f4da0a, 0x6, 0x2, 0x2fffffffffffffc, 0x80000041, 0x7, 0x5fde, 0x7, 0x4000000000002, 0x8000000]}, 0x0) madvise$auto(0x108000, 0x800034, 0xa) unshare$auto(0x40000080) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="40000100000000000500030000000000002000000000"], 0x42}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x0) r2 = open$auto(&(0x7f0000000200)='./file0\x00', 0x49193, 0xff90) ioctl$auto_PPPIOCGFLAGS(r2, 0x8004745a, 0x0) ioctl$auto_COMEDI_LOCK(0xffffffffffffffff, 0x6405, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x3, 0xa) r3 = socket(0xa, 0x801, 0x84) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r4, 0x5402, r3) 119.072918ms ago: executing program 0 (id=5050): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x200000000000000) 90.248969ms ago: executing program 0 (id=5051): socket(0x2, 0x1, 0x106) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x20682, 0x0) socket(0x25, 0x5, 0x0) r0 = epoll_create$auto(0x400040) mmap$auto(0x8000000000000001, 0x2020009, 0x3, 0xeb1, r0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x22, 0x3, 0x0) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) socket(0x2, 0x1, 0x0) r1 = memfd_create$auto(0x0, 0xe) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket(0xa, 0x5, 0x0) ioctl$auto_RNDCLEARPOOL(r1, 0x5206, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setdomainname$auto(0xfffffffffffffffc, 0x9) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x0) read$auto(r4, 0x0, 0x0) ioctl$auto(r2, 0x541c, r3) 0s ago: executing program 0 (id=5052): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') setns(r0, 0x0) r1 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/11:0/stats\x00', 0x204b03, 0x0) pread64$auto(r1, &(0x7f0000000080)='(![', 0x80, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) fanotify_init$auto(0x1000602, 0x1000006) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xea769c9ebb14b2a8, 0x0) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/phonet\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/reboot/force\x00', 0x20000, 0x0) r2 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci0/force_wakeup\x00', 0x88f42, 0x0) read$auto_force_wakeup_fops_hci_vhci(r2, &(0x7f0000000040)=""/38, 0x26) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x560f, r5) read$auto_usbfs_devices_fops_usb(r5, &(0x7f0000000140)=""/163, 0xa3) socket(0xa, 0x806, 0x0) socketpair$auto(0x21, 0x7, 0x1, 0x0) close_range$auto(r5, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) kernel console output (not intermixed with test programs): M,IO6.GI'} V [ 1498.193872][T28519] [U] ma' Q{\T [ 1498.205052][T28519] [U] 0?чښwhpNcqE*wixPؽ2&2Z+O?yJqNFP;087$ƒѭʙ%rGh֍>GP0Z2gxqKʅ [ 1498.243920][T28519] [U] gZ%׃(vhvfY_2K'xoѿ[1/W]RbJwhmu| !hcwӝX*L`-uc`)fB EuΏ_ήT!M&vaE]-SΙ3- LH [ 1498.746399][T28519] [U]  [ 1498.749345][T28519] [U] :f&N] sL^+ [ 1498.775673][T28519] [U] tS6P4.m=Gp"}I=tKs;@xXmNw) 0' BD[1ww [ 1498.823873][T28519] [U] q>ir/* ?\S_$rw}00d~ [ 1498.863542][T28519] [U] Ze7SHpr~dFmڈ\o A8b͜-5lw6h`t(dtRv5꓉VUFʎ>An%bl=µu)On%ꟑaH3>%dWuj4g,-` ;B٪yYG}< [ 1498.880877][T28519] [U] (4ol̳~<̲;+28fų;Z [ 1498.926680][T28519] [U] ~lk VuƩ=O5HU#{ QQ8@8=7]Oj!ـ3Z9Ȯ,_͙9rݍtJ஫7cBk“$NNuϭ:, )esUO [ 1502.206482][T28572] nbd: must specify at least one socket [ 1502.894973][T28581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1502.969143][T28581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1503.586991][T28584] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1504.723168][T28604] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1505.457928][T28610] Process accounting resumed [ 1506.474871][T28593] [U] a [ 1506.477761][T28593] [U] +-9@sv!br?0s"I෯-NfƞhP?)-UƱJ#xٴvꧾkZ,xYNVIJ4 y Z7#|['H@SY7.3WyZ I$ lոLm歨+DGtr,%͘IKʹ.E0:Zh@1RЬY&iUpڨ ֶfC9prkeX1bXlV֙LVc^D:iwH&˺`! ӜJ [ 1506.523211][T28593] [U] d?NRzf@R25ۜyH;399.YAJPEb [ 1506.547419][T28593] [U] f [ 1506.550499][T28593] [U] %k0n}a'qk_(~g7;$E;\[s>%cdۺuKe,X9;7А@3 [ 1506.561135][T28593] [U] 6UCo|/_}jYF [ 1506.577251][T28593] [U]  ExK'(6 kG&@z [ 1506.626446][T28593] [U] D?{IasH&7rӢ5,˕Fu2FIit 2y&njƶl [ 1506.662358][T28593] [U] Vl ,V,#'Μ+dxFbg2|'FMڏ/OOŗh4rO4RIO< [ 1506.675041][T28593] [U] [ 1506.677859][T28593] [U] =ϖ;ISbeّ8Ch]Lphx)-sHGo+PmG [ 1506.686361][T28593] [U] tĒPU00_~ߙ6+[&,P\=2er? ͛K6 [ 1506.704664][T28593] [U] ~erY [ 1506.711075][T28593] [U] H [ 1506.714511][T28593] [U] jZm^V5e-T-kX$ipf>Ԙ=oaB\Ez:mgTx2 [ 1506.738433][T28593] [U] |JjϷ_e/R3̾ANZ,g  [ 1506.746453][T28593] [U] ʄevcPPQ#ڍA,j7$Wo!:k%f}>?#*>8 eoC0OYTQIBJ0;uc#h{SA}}i]T/%)#_n<ݭ/ʡ5C񁙪<3-Vr\^ 1o),+?{i߈NԿs찊z8ZY>LA2~a@X'6M{-ISX!ME'(wVg!"k*IfD{5GeڏjۼZ: _nnLʱ!4^?Ol.9`R}+ɧX{w;I|` [ 1506.854021][T28593] [U] Ix!;H5ΈbN 圲>VxǛwwzJ.ɃleeBlNJ+U/qOU4 [ 1506.864847][T28593] [U] v|5V3?ܦeo1ȕ~ [ 1506.870271][T28593] [U] Wt [ 1506.874140][T28593] [U] |gKuHb [ 1506.878353][T28593] [U] q&;hmӃ?nmQYV:ST)~2XNLBrL0XUF4iRiVYd16+\#'VsN%JQ;+IHi<`.>,ӌ1ب*fgwƂ{\M-4KwSx{ZKUvm](]-vT_8Bک5XuAYb= ^s|E($$7;/ly@Bdh7lzy!1KE)Ź|߉ìR $ 'Db1/mMFdd09ё_o򷞙V,zهqu Ɩ)jZ``'4T [ 1506.923652][T28593] [U] ^FY~^څj Y/ZI8<&#{%%`lf*hM>3*7x [ 1506.944060][T28593] [U] euON|ܹ+׉ [ 1506.949202][T28593] [U] |Epk#̸pwSjFոVZyDZKo;#\@qHtz\K$]_CA ynޅ(OX\XWԩq'b>s2[jɄex6{/H>& x[]X{.F83'6I!X>S't|Ia >r9>hq' Lӥ}!G NeB(r3[NqK"Ϩ0c|ǎ/2IrmD [ 1507.093862][T28593] [U] 4(0VcMHE*~Z1>CJS=7a~=yy)/qZI7]83UʡoK>QQhIdD}W+_MKBL~??!MjGajs Wp [ 1507.121790][T28593] [U] "p8tz5*5H$q({nbeSTܲi8Ed*B-,'r֡oCXʆTL멮1c{"Gyӑpl;E[,O t3GڮPAD9p63Oߪ%=dy6d2\TϘyV;vxMhoeg5,dRp3#f?cyƆOa)UGKNDgs@kE]3*JU+ON [ 1507.150773][T28593] [U] FQe]7 XimkE9m0J6"K2P"` C Ϳ[%ǿ4nxA*4 *>7p?/*ٿ,'W[.Qna{ǵy.Tp@B앑ec:y,O*]G]w?64]JoO [ 1507.169325][T28593] [U] iA|.pw [ 1507.284010][T28593] [U] `Cf[P9Y [ 1507.288914][T28593] [U] ƨ5x$"?pY1#la7ZZs^+[ [ 1507.303945][T28593] [U] (KKy*+Gqnzc)5E P,ys9# [ 1507.364045][T28593] [U] πpU)eBgmawL ԅf [ 1507.381438][T28593] [U] 6A [ 1507.405616][T28593] [U] !I=/qؚjt w斾s,wKMGP*r'}7V:zD9Ja̩xyQȵ|%ɴ|]z~G~~9˗ΝW"g.Ma [ 1507.503911][T28593] [U] {UOBTpLGW@oH/n=Uij9%B_aG=;ʢ|Q)KѼ^\l>(:] lc1b\Q{% ũ nNP,3zMj+ؐ٦A*߉lEa,.f2~N=RAe [ 1507.570346][T28593] [U] F"!ʅP1Ud6'F?`eK`NS E׏ʠD,>E༢F(> S) [ 1507.581347][T28593] [U] D47qI KL!Z'5XRzbf{LvpƐFSu8#8@.*xfQUJB9<0o [ 1507.597341][T28593] [U] /d\A$6Yܡvc^`{wjH34 [ 1507.603150][T28593] [U]  $/X18IB< ~%<9dhH1Lg SzvH-yԩt [ 1507.627214][T28593] [U] $,X2leDŽt^efi"!k,1'T [ 1507.637558][T28593] [U] ׀mܪRX]e'! !@ɓ`?(LVd{p1\ܓ@ۑ$ [ 1507.674494][T28593] [U] 7^ІSֲϱ6WKwab+2l\̉%(݊T̒S&}0uV"9ɟ\,ӏep&bh(lpB:^ݓq+@~a{Eڱ7ݭMFQ3-o95hnpD7JV [ 1507.723938][T28593] [U] z. [ 1507.727169][T28593] [U] Bj;~jm_+0V@ [ 1507.732144][T28593] [U] 'i+Yo<縙0+o#ȸH̉e.H2 [ 1507.785691][T28593] [U] B]rylbWllȭ e~ HǧX2Tr(.L$4$[+M[0VɱRT^_(wg÷% N^Pm.8Mܩőu:ihrE [ 1508.125593][T28593] [U] 5_3Ē6V^KX{MCضɊG$kZ4# [ 1509.377281][T28648] nbd: must specify at least one socket [ 1511.443524][T28687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4559'. [ 1512.319793][T28702] nbd: must specify at least one socket [ 1515.509484][T28716] Process accounting resumed [ 1516.693876][T28740] nbd: must specify at least one socket [ 1519.169248][T28776] FAULT_INJECTION: forcing a failure. [ 1519.169248][T28776] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.182688][T28776] CPU: 0 UID: 0 PID: 28776 Comm: syz.2.4581 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1519.193496][T28776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1519.203602][T28776] Call Trace: [ 1519.206945][T28776] [ 1519.209921][T28776] dump_stack_lvl+0x16c/0x1f0 [ 1519.214658][T28776] should_fail_ex+0x497/0x5b0 [ 1519.219380][T28776] ? fs_reclaim_acquire+0xae/0x150 [ 1519.224540][T28776] should_failslab+0xc2/0x120 [ 1519.229283][T28776] __kmalloc_cache_noprof+0x68/0x420 [ 1519.234652][T28776] snd_timer_instance_new+0x47/0x2e0 [ 1519.239990][T28776] snd_seq_timer_open+0x1cd/0x5c0 [ 1519.245091][T28776] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1519.250710][T28776] ? mark_held_locks+0x9f/0xe0 [ 1519.255542][T28776] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1519.261393][T28776] ? lockdep_hardirqs_on+0x7c/0x110 [ 1519.266631][T28776] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1519.272483][T28776] queue_use+0xe3/0x250 [ 1519.276694][T28776] snd_seq_queue_alloc+0x2e5/0x550 [ 1519.281855][T28776] snd_seq_ioctl_create_queue+0xa9/0x310 [ 1519.287525][T28776] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 1519.293199][T28776] alloc_seq_queue+0xc2/0x160 [ 1519.297922][T28776] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1519.303262][T28776] ? mark_held_locks+0x9f/0xe0 [ 1519.308107][T28776] ? _raw_spin_unlock_irq+0x23/0x50 [ 1519.313360][T28776] snd_seq_oss_open+0x38c/0xa20 [ 1519.318274][T28776] odev_open+0x6f/0x90 [ 1519.322381][T28776] ? __pfx_odev_open+0x10/0x10 [ 1519.327178][T28776] soundcore_open+0x409/0x580 [ 1519.331899][T28776] ? __pfx_soundcore_open+0x10/0x10 [ 1519.337141][T28776] chrdev_open+0x237/0x6a0 [ 1519.341605][T28776] ? __pfx_apparmor_file_open+0x10/0x10 [ 1519.347200][T28776] ? __pfx_chrdev_open+0x10/0x10 [ 1519.352212][T28776] do_dentry_open+0xf59/0x1ea0 [ 1519.357025][T28776] ? __pfx_chrdev_open+0x10/0x10 [ 1519.362010][T28776] ? inode_permission+0xdd/0x5f0 [ 1519.367012][T28776] vfs_open+0x82/0x3f0 [ 1519.371149][T28776] ? may_open+0x1f2/0x400 [ 1519.375514][T28776] path_openat+0x1e6a/0x2d60 [ 1519.380189][T28776] ? __pfx_path_openat+0x10/0x10 [ 1519.385187][T28776] ? __pfx___lock_acquire+0x10/0x10 [ 1519.390427][T28776] ? lock_acquire.part.0+0x11b/0x380 [ 1519.395761][T28776] ? find_held_lock+0x2d/0x110 [ 1519.400591][T28776] do_filp_open+0x20c/0x470 [ 1519.405150][T28776] ? __pfx_do_filp_open+0x10/0x10 [ 1519.410222][T28776] ? find_held_lock+0x2d/0x110 [ 1519.415073][T28776] ? alloc_fd+0x41f/0x760 [ 1519.419449][T28776] do_sys_openat2+0x17a/0x1e0 [ 1519.424178][T28776] ? __pfx_do_sys_openat2+0x10/0x10 [ 1519.429448][T28776] __x64_sys_openat+0x175/0x210 [ 1519.434391][T28776] ? __pfx___x64_sys_openat+0x10/0x10 [ 1519.439821][T28776] ? ksys_write+0x1ba/0x250 [ 1519.444392][T28776] do_syscall_64+0xcd/0x250 [ 1519.448960][T28776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.454912][T28776] RIP: 0033:0x7ffa79385d29 [ 1519.459358][T28776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.479001][T28776] RSP: 002b:00007ffa7a276038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1519.487454][T28776] RAX: ffffffffffffffda RBX: 00007ffa79575fa0 RCX: 00007ffa79385d29 [ 1519.495469][T28776] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 1519.503472][T28776] RBP: 00007ffa7a276090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.511477][T28776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.519496][T28776] R13: 0000000000000000 R14: 00007ffa79575fa0 R15: 00007ffc82fa92c8 [ 1519.527541][T28776] [ 1519.903582][T28782] nbd: must specify at least one socket [ 1521.557546][T28799] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1521.576649][T28799] [U] ό4j31SM# [ 1521.580915][T28799] [U] [ 1521.583685][T28799] [U] [ 1521.586432][T28799] [U] [ 1521.624033][T28799] [U] [ 1521.626778][T28799] [U] [ 1521.629493][T28799] [U] [ 1521.632210][T28799] [U] [ 1521.663971][T28799] [U] [ 1521.666743][T28799] [U] j0=Hq^pUUԫOhv(kfc*7A3Sc8 [ 1521.723865][T28799] [U] [#rʄ< [ 1521.745968][T28799] [U] )EAg ԃՊ~|#t$xQ@Q|gD [ 1522.013949][T28799] [U] Cɍmڣ۰||kW;o:JRMbcj+-Y"V`ٞQDu=g=ޛ xZBK [ 1522.034004][T28799] [U] L-46a [ 1522.038310][T28799] [U] $5C#l*mD+ؚ0*@.N [ 1522.059232][T28799] [U] 9KG}> ;~ZI(Ì?vӥg]qJrņCu)tvKgt-$ܟ'ƈ)eC; [ 1522.174669][T28799] [U] h9WV0*xlM3@YGR\Hm [ 1523.693289][T28833] nbd: must specify at least one socket [ 1527.500371][T28881] serio: Serial port ptm23 [ 1527.745434][T28886] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1527.804765][T28886] : renamed from gre0 (while UP) [ 1527.975008][T28886] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4604'. [ 1529.787000][T28906] futex_wake_op: syz.1.4612 tries to shift op by 64; fix this program [ 1532.191029][T28923] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1532.306087][T28923] [U] [m+SRۅG>d/f)VʯMYOVl)$}+9;~m~^O۳&EPB/c;4H$А=\NSOΦuAwBɺ%gQKj(esSzCVW [ 1532.325122][T28923] [U] [ 1532.327879][T28923] [U] [ 1532.330641][T28923] [U] [ 1532.468638][T28923] [U] [ 1532.471413][T28923] [U] [ 1532.474156][T28923] [U] [ 1532.476905][T28923] [U] [ 1532.509324][T28923] [U] [ 1532.512143][T28923] [U] [ 1532.514902][T28923] [U] [ 1532.517650][T28923] [U] [ 1532.587242][T28923] [U] [ 1532.590044][T28923] [U] [ 1532.592802][T28923] [U] [ 1532.595545][T28923] [U] [ 1532.664151][T28923] [U] [ 1532.666974][T28923] [U] [ 1532.669765][T28923] [U] [ 1532.672515][T28923] [U] [ 1539.288933][T28970] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1539.465571][T28971] [U] [ 1539.468413][T28971] [U] X(pz&aWj3Hh*l\ [ 1539.473509][T28971] [U] Cm9ع [ 1539.565781][T28971] [U] jBMm 3fi];KL1^1DzgsHf?uHUɓ%Ce>0`_YULÄ`'Jv׻.)"*ΑXsV(yD3U״Zڌ/m3n5)Ic)P)a"7HnڷBˍ.v3A/`JZ }gG3yl LH [ 1539.704118][T28971] [U] kpg$-q(OfW4 [ 1539.755267][T28971] [U] nP-S%O3$\pq):i֫bBi2fŜra7a@AolcqT |sr|ssVL-xB.#|3=M5Ul {{Fq=jӅΘQUu߳ !.$ڳ55,\6eD#`1Èc9a3)jS(;5p }TRmA._r?LQYl+ld>FGoHyfg0w Kq.43#Q|LB<*J [ 1539.958053][T28971] [U] D9rT]<'VZ [ 1539.963252][T28971] [U] 2i0j"aJ=&i,BGmJFwӼ@m07a'g9.I}C-[ǾN [ 1540.014987][T28971] [U] ۊ*?*:_k=KkB`E%vԽܹ62$+Q^S&#U(J-%3t.g["3+K,&ZM [ 1540.066226][T28971] [U] u%k#CQ Mb-݅~rgd _VȊ6]?τʁ -"i' [ 1540.132717][T28971] [U] D<5.:X#+Ww R@aoHoO٬2֡^ [ 1540.192463][T28971] [U]  (W4[6ڜ^=5/Sj V [ 1540.214332][T28971] [U] *+ [ 1540.217346][T28971] [U] GDd!3/һ vnVJ+-q#31"gp;s![xF [ 1540.336691][T28971] [U] +mش?d1V3hbKHïkZOvvWxD(kzsK)_|.wm\@ [ 1540.379871][T28971] [U] lho#abA{ڰSaznu enm :dA!MfWx1LĞ|ATc-vkLD Ilzw’~} [ 1540.423323][T28971] [U] 999U}p 7³!um+gj{b*9{4 [ 1540.476042][T28971] [U] NF#hd*^S8ƗZ'*PMUF',EѾw. [ 1540.528109][T28971] [U] U"ԍa:rtKޕn [ 1540.532800][T28971] [U] Cէ(jTᗢY5JiDکa J?,LS$jə&َ*!w]w΄7CR:' CGv`%fpfةspeBQyXeƺSvSn^.y__|UyA? [ 1540.624407][T28971] [U] ?B]2%45/mXBց0^Stp~\ j8pw#!8( K [ 1540.644789][T28971] [U] d0x݈Sd8%hIVe;Lob.bMwc< =kHr>ʙcҰ(،8%ʗXW^ [ 1540.662662][T28971] [U] a|@\OZXU'1|Kߠ: L-ޮ)q_CYcu%j)ܣc_l hܶHFV-ϣ$)Ҝ@n"3x1#[ ^Sw\5-ɫMSk̀(K9z JV 0aҭ)jp_Fi¨М [ 1540.686868][T28971] [U] J$p]" >$O#/n7m|5c 5"2ɮ e͒9^Vs$uȬsN\ UuD(R,cEri]ʭ7ak]x<#ҾW+e_"'grN`5TLuϫ@$ga6 [ 1540.754325][T28971] [U] v [ 1540.757360][T28971] [U] 1WkpsΌS! [ 1540.785602][T28971] [U] ]a^H!9;, ))V [ 1540.927111][T28971] [U] &h [ 1540.993992][T28971] [U] Ҍ;Iu, #6;Mu9l+j%tqRGE4WiK篐o,IPK,o\RanEKp>\xT?=Qo{x1]9 T/G [ 1541.096085][T28971] [U] RTvrqx3gP~-O[sL"Mmd,Mh*#B Сnra땼ŔdMlt`Fx:Zr?4snh97p q?';7+j [ 1541.145620][T28971] [U] m=͈)v)?.ZI:ƽs!kܘ Eխد1{yEd0Pwo;x.'J65 ,G^dd@t*G" C sxsKcbW;5̟ - Ќ [ 1541.226378][T28971] [U] u\ 1[p(J* [ 1541.230951][T28971] [U] gvy W>Y1}7{_2n"LyC֖Ƴ.-οk<S [ 1541.256303][T28971] [U] Tn{6a=N5mKfGz\;Lh(K'3[[Ʌ~_, (,!QO!oG"ekCDRy,rjQ'4)KM̞2z([;8$˂܅)Lĥ [ 1541.273184][T28971] [U] lC-]z}A)˞WriN2;1wǍ14Phn :WArc| [ 1541.354853][T28971] [U] t55 B1r=L]ŅD [ 1541.374650][T28971] [U] !:_ ÂBOjbW,V.S֤vvS7{"(B2.[bځO`1O4[ '2|vDy7jBm?l4 `"cq(KMkA<CPdNf%3k G0Ix>HI%W(5*D% [ 1541.463901][T28971] [U] qP6ؘiYPR̮ d [ 1541.487420][T28971] [U] &γg߭g_N:3CYW@ BB{!vS-2BP?!r^cYc2H_Kn [ 1541.568051][T28971] [U] }@c)•A]&? nrv"7&M E[8γ9>:BX^[ɍ|qhHr1v7q}cJ.&>=ސ [ 1549.697368][T29060] [U] [ 1549.700126][T29060] [U] [ 1549.702872][T29060] [U] [ 1549.744760][T29060] [U] [ 1549.747545][T29060] [U] [ 1549.750300][T29060] [U] [ 1549.753048][T29060] [U] [ 1549.756886][T29060] [U] [ 1549.759659][T29060] [U] @@'滺qx,qd&Ōs [ 1549.784039][T29060] [U] "`āߨUB( [ 1549.788630][T29060] [U] nkJ#CS!O [ 1549.793429][T29060] [U] eT [ 1549.824294][T29060] [U] g<3;nSuR^ozbz( Wea-w} [ 1549.843656][T29060] [U] 'PLќ.m5S"DJTR ZUb(jI0лtT7gc[lW:Е5E086 Tʴ\87qb3NTJD6{yVou [ 1549.927627][T29060] [U] S$x0Raf ʒ\qݦS\B̤;紑/ [ 1549.943956][T29060] [U] Edbv],OIAsưp|7i[{-}_<;7W>zW[M{ [ 1549.965785][T29060] [U] tF3|naR{P [ 1549.970409][T29060] [U] .p (#<cnS-Xʮ|wcDt U\mFo? zȶ&4׽F_;2Jc$b}93nЂ+&SkNX,I7lTKN qB1p@$UH,*cCnZ&읇%>T;sFB NT#IQLB2 C65xh[߮'1 8~KkSΙyX \pp≜wҖ6>"Bp\&J dkΥOE(%-n-C!^6UO]"L} 2h`<3|ͳJ kX@zk<YMn̽ sI2K#/l]_Az„mm<S}A3tvJ G}G/Oд;w$y&gR@.Kde!9U>RwFΩ&2yIaLiFf?0zT X/..#+fPJTL!iS1qR̔P I-z|} [ 1550.055093][T29060] [U] [cNx [ 1550.059473][T29060] [U] 09*,̴Zfc_2 [ 1550.064980][T29060] [U] cZ!i176NTv [ 1550.069646][T29060] [U] 4Tғ0ߤKb<>0VE+VKWS1?qRekC ;!dCc\[_ D [ 1550.104363][T29060] [U] (^תgg~bz'4w [ 1550.121539][T29060] [U] $ǹoUf-cr)}RxV^)֮{/~{uc3R6+f6cx$p'w^?]O[ɯpbF[/:( urżۗcG`9ߜBq(: HI/V1kkL綍zjWdˋ}!0GyP-P:lueqF0굣z(XԕAH|[D_i3&eR;*'9t\uVԻ9EM:e]U r~V^RbFQu$ m6$KOE+=ػUB;me ZAOBhJ1[droDp6@LrNԊPP#.[e.D,6;z8% [ 1550.195347][T29060] [U] ψ䅤[U-9I{qdZ˜r+Grv5Ҡ [ 1550.202091][T29060] [U] }9U'vՂViJ򾖱k=UNӤ ok&T>MZM$ыb [ 1550.212364][T29060] [U] tH2icbr)MhS9 [ 1550.245984][T29060] [U] ?cz;OB1M<Q9xk 져xS06 DoޒA.e9DSQz9iAѩzbyefA O~s'=ȝX^ Kĸ2 ZB'20ק4Vf2U6r-hҌ3׋h 7A~ࠨ$##q 7R [ 1550.283767][T29060] [U] x1A [ 1550.287018][T29060] [U] 5\)B1tF*oWpݧa14d_k[U wo#j#G)La GT^9 {*> (4]) |Q[9!|.ca[̉RrD6fI¸z^bIsi(K҂J,1C &mKn"R\`. JPIJq/=::dbMCZ ytk?zgAa [ 1550.360600][T29060] [U]  [ 1550.394854][T29060] [U] 47 `9'IR99~3g-wt0Vƃp Ѝ(^<7OM|@/[̩dq|DcOTϏK=Tn Y '˂aCn.ѯEʲؓ93kͱ)k [ 1550.413133][T29060] [U] 3z{Qev [ 1550.417140][T29060] [U] Gb3ۨUnvbfv0nW L`dDײSv,*RK6$uZ9`-$۰R'#vĞ,iGN$33.a4~oސp<У ze2O+ǂ#M:}=3i7`8Ie<3Dl-__KoI#1%:8VH;mc>aX.f IӦms- [ 1550.440362][T29060] [U] ~7:,&d@4oPB 768m1 [ 1550.484456][T29060] [U] ބpa8k7g[{;!1H1mP&ILi:\4`ը ¿[+_A_4Lrh͵*Py:*WRlԳ7@xr{oœBAM(v Dwwb:;Co:7:(*tYvD4 [ 1550.522783][T29060] [U] QG\ [ 1550.532296][T29060] [U] 3H VKGЋLYg&H${2wH [ 1550.546740][T29060] [U] LWU [ 1550.550094][T29060] [U] sRM_/9H])awd~rRG [ 1550.555857][T29060] [U] peX&}lϯ0t' P^D`w;?x_,qHdL,E\[ beZ <qە VO97i&+ hԓj [ 1550.592216][T29060] [U] Ui$ؚP*~ڙ~$☵;Sju$Ʋ'ܒWZO_~_7S0 .,ƺ=cʴ$|b1iP%B3# ewCtƻJiBN!2Վz-; [ 1550.632533][T29066] [U] Y%΂!l8RT 7:ՀshS_HAր,&AƧNX'q`H[4``#7<fX@֔u3r#cƮ˼rq H:1ZT~Y=q3!-XML^8,[د.xoi70kAwF: `5/ {QG [ 1550.714572][T29066] [U] `qa-y/O<.N}L.x#^AQP-S)Y +8ayxqH=bFu [ 1550.739070][T29066] [U] tZ#d*e^wE(,!^;i=Uj108҅>WWKoρj? [ 1550.863885][T29066] [U]  w fͨnwIs6h0su?sc̈́&D_>>mU&`U&hm/jT˞{B$!Gޙ!B׆ [ 1550.875507][T29066] [U] .ƭ.⾗8oD#o]7smv)ԥa*M޷P@dZ.S //i] @%2jx5R(FD7O+0Ll'XBq [ 1550.898188][T29066] [U] }6 $%MtcK)qg!| kGW~HQ)YNXtoXݪE{ 2|v'"=.DSxj{j^3fkagNӮ}%iɎ~o)<10$] ?7s6Mhb3t_Ę?s8 >(iN3NJҲfqXEC7!Ӈ؏{F˿~߅ðcn0qF!捝Qa5 [ 1550.935017][T29066] [U] Qc ֯ [ 1550.938355][T29066] [U] -Ējӫٷ5g]9Ds';ےI3Yv}W"b/r:]; e.pPg~˪t c&;cNn0aOF]==@1MY^+J󷝓uZ;K DY|5=m`Ifu56RtAVSޅ¡'qwquޛ+tdń1#V d䒇o0]Ti8w46pDC6b6"1o7U4>LFuG(s [ 1550.968707][T29066] [U] [ 1550.975195][T29066] [U] < ~g]ȖtER6wڔ{!ftKdp.SgF֍NJۥ5* $eNCW_C$qCfHp-nɬEp [ 1551.080728][T29066] [U] ´G [ 1551.083984][T29066] [U] n| 'tշ^?r&P>hւ@w< I\Wy'%]C8!roGO~_j?mQ°P VHU6W?vY*I<& 8|>|0q6#`> [ 1551.119383][T29066] [U] J=J2Yg=l [ 1551.123508][T29066] [U] ??[c\qZtngK$A;m!\#Lב]c{w [ 1551.156558][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.162885][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.194148][T29066] [U] `AѴ8.)QC1CS5;3ڊ=L^Oasp~A [ 1551.201917][T29066] [U] k30xIX [ 1551.205596][T29066] [U] gGql}NKdk܅J6jx [ 1551.211363][T29066] [U] ݺ2hR5ctQ-w96u [ 1551.263897][T29066] [U] [ 1551.266873][T29066] [U] t4fG!g[/:e6 [ 1551.271955][T29066] [U] F괳 "L<k=zZ-`% 2"sj}G22HfТd=[|: [ 1551.303903][T29066] [U] πv [ 1551.307023][T29066] [U] [vPH;~fqC3Fk [ 1551.316598][T29066] [U] ܸ~GI/ [ 1551.386342][T29066] [U] p&|zD+QCkUWT /%irFc_Yܮ]~^"s *>ٺwgȫ(8t:٦n+V(fH#M.gбg, [ 1551.422938][T29066] [U] eo#plɐo [ 1551.444717][T29066] [U] `orXP34hS5&A#= [ 1554.590612][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1554.635333][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4659'. [ 1555.774880][T29112] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1556.128181][T29112] [U] C0{p kէ(1I\ [ 1556.132885][T29112] [U] [ 1556.135646][T29112] [U] [ 1556.138391][T29112] [U] [ 1556.163963][T29112] [U] [ 1556.166722][T29112] [U] [ 1556.169463][T29112] [U] [ 1556.172303][T29112] [U] [ 1556.196397][T29112] [U] [ 1556.199185][T29112] [U] [ 1556.201950][T29112] [U] [ 1556.204716][T29112] [U] [ 1556.237797][T29112] [U] [ 1556.240573][T29112] [U] [ 1556.243340][T29112] [U] [ 1556.246108][T29112] [U] [ 1556.260810][T29112] [U] [ 1556.263577][T29112] [U] [ 1556.266323][T29112] [U] [ 1560.117970][T29141] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1560.149654][T29141] [U] [ 1560.152419][T29141] [U] [ 1560.155268][T29141] [U] [ 1560.158020][T29141] [U] [ 1560.160769][T29141] [U] [ 1560.194010][T29141] [U] [ 1560.196801][T29141] [U] [ 1560.199560][T29141] [U] [ 1560.202312][T29141] [U] [ 1560.244018][T29141] [U] [ 1560.246794][T29141] [U] yQ҄/A9{MpQp&2X(VsYD*K3j#ѺvO_?g)|'Ipk}[%:G5>NXfrNbZ' rM{l^{LSo@дО=K}&7>Cs6&;Qaei_ZfVEILW [ 1560.344169][T29141] [U] ˔ !2W0ٌdZ( [ 1560.349584][T29141] [U] ,D|(bB49, B:\LS<* XMgv_g$p/:}bȪ!"!1g:/~k?^T"6%VO*/P֘^,Y [ 1560.363082][T29141] [U] 2J-tUm6[1R$}cؕEH.%)0 F(9NBu8(Sl{! [ 1560.453900][T29141] [U]  [ 1560.456845][T29141] [U] V2aa.5 [ 1560.460393][T29141] [U] ø& i񃯖9qcm{:ظ *8bBK^^@fM [ 1560.493915][T29141] [U]  [ 1560.496878][T29141] [U] YZxͬS1'@h#OAH-S3zȅq9us(r/NrQc#k{t V^{o6`tJ`}#rUW-ȳOvf2 "+^.4PDpˋʰZ5vq=j\ 7e p|l1g`O#:!H/A' T&/ȉQ\/U@,tC+g >&i?K9/br`?RȄdkfp{`>8g]-wADzi0(!5sO}?5qW+WjD<#6Q$!;QhIT'h J}*@8>E\FH-8tʷUJOw&JJ$?l6Vκj~[j˼ )Fy)?%AF\ [ 1560.598511][T29148] cgroup: fork rejected by pids controller in /syz0 [ 1560.634491][T29141] [U] x^$"x,⠘Kq2M aX [ 1560.724340][T29156] nbd: must specify at least one socket [ 1560.765254][T29141] [U] .;sˉBId5>Q8kiўi%A.y }Ov [ 1560.772137][T29141] [U] NpbEfJt)Y< i [ 1560.785654][T29141] [U] o*D=̱bi, [ 1560.790409][T29141] [U] F8C‰d+2rlr1rf)Q [ 1560.844879][T29141] [U] JnK&Ў! [ 1560.876387][T29141] [U] buxwc 2.*&N4%k?}.;x\Z?A ӑmE%8*7*h$Y [ 1560.937169][T29141] [U] lDKZY4e1,-$Hp,u HTS [ˁިe) [ 1560.984049][T29141] [U] \{OXSjaCJyWErVQZK܆5Cnc̍3RacJѺ#:{XݱX]&@xO\PyF5)avPn؂ng^a==:'fiPAɾsDl)!>Xʭpagg[Yv7CTC`$-]r'PjdQ1 [ 1561.191223][T29141] [U] d|-\`d~꭬ aKmDxd=LY [ 1561.203779][T29141] [U] nnB,!+=%[_H [ 1561.208207][T29141] [U] (t)+^E?p_I<߇]Ei0 ,nU-pbhEoao]E%t^Y58 [ 1561.263745][T29141] [U] CjL ʺxޅE| [ 1561.268039][T29141] [U] :7À [ 1561.271710][T29141] [U] .|U4hkU8hز3T1ހX`O1ty0'1b]lT8 [ 1561.293826][T29141] [U] 8Tx]aHhs-җvFλx%<&N{ZW| G7BJmd[!:Y6H>Lɵ!xzu }e}; [ 1561.321022][T29141] [U] Y&ÿ9Z 5ծ"G88ȸ*Dӵ [ 1561.335867][T29141] [U] vENܤȶ8>h̛1F7 [ 1561.676528][T29168] nbd: must specify at least one socket [ 1567.194069][T29210] nbd: must specify at least one socket [ 1567.865570][T29228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4688'. [ 1567.943649][T29234] sd 0:0:1:0: PR command failed: 1026 [ 1567.949274][T29234] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1567.974215][T29234] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1568.497910][T28402] syz.3.4495 (28402) used greatest stack depth: 17856 bytes left [ 1568.535299][T29238] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1568.658602][T29238] [U] +mڏ]M [ 1568.662259][T29238] [U] [ 1568.665016][T29238] [U] [ 1568.667777][T29238] [U] [ 1568.684301][T29238] [U] [ 1568.687072][T29238] [U] [ 1568.689838][T29238] [U] [ 1568.692590][T29238] [U] [ 1568.704268][T29238] [U] [ 1568.707031][T29238] [U] [ 1568.709773][T29238] [U] [ 1568.712507][T29238] [U] [ 1568.736183][T29238] [U] [ 1568.746913][T29238] [U] [ 1568.786274][T29238] [U] f"]VByOצBu c Yt|f5ʻgԢ0+r^\iNt) [ 1568.795479][T29238] [U] c6E,& jIa_"߲洁t=cި[K0ͧtU-xt^//7&n90K&5H)[־Q}%_q05Y}뫂OZz8=.&li&4wx]ILHE#nԄ 2Z6?w%p[[}E_:It"lw [ 1568.883787][T29238] [U] TU>!$gK/z+XMS9r$<8Ҥ7 ]w+ 4|bVPXoR)=EQ!2DD#!ȇJ_))Z/10&ݼO [ 1568.954000][T29238] [U] \NOU31aJC9[!^[Ce"X E~rkO-`Pge5cřɀc 78C;9s [ 1569.007049][T29238] [U] ?oG![9yQԳ"7iha3 [ 1569.013183][T29238] [U] Y0_yY$5)v"1$Ən=fӆM0@NXd]Сh:#[\g7 +NX~WMCB}W|y~5T"j\XVGF[ۼ^V;F>:SA5xÌ;=D7N-BQ7k"o/)yYP!}Hm;O܅J\K}JMP[g3$T=c=Q6B/=i4j0]fĵ)A&nvOԇK!kx%E#ήpf .Ҵ5e -ꨕC0 [ 1569.094765][T29238] [U] ͌m24> [ 1569.113737][T29238] [U] _Fk{t*,&'S!QOG~ wXT+U"gu9|(g [ 1569.181675][T29238] [U] ʆhp$]u+kPqh@]"Zۃ11 7WS\w3oͪ5j?mkP&k_=x [ 1569.224373][T29238] [U] 7=/I(D7{AC~iZ"%D)VZǟs<"8 x0wqUhv%Rs} [ 1569.619446][T29242] could not allocate digest TFM handle [ 1569.778449][T29248] could not allocate digest TFM handle [ 1569.892822][T29264] nbd: must specify at least one socket [ 1572.528362][T29299] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1572.628918][T29302] [U] 4 [ 1572.631869][T29302] [U] [ 1572.634617][T29302] [U] [ 1572.637357][T29302] [U] [ 1572.674171][T29302] [U] [ 1572.676938][T29302] [U] [ 1572.679677][T29302] [U] [ 1572.682418][T29302] [U] [ 1572.702815][T29302] [U] [ 1572.705578][T29302] [U] [ 1572.708319][T29302] [U] [ 1572.711061][T29302] [U] [ 1572.750739][T29302] [U] [ 1572.753797][T29302] [U] [ 1572.756542][T29302] [U] [ 1572.759280][T29302] [U] [ 1572.803798][T29302] [U] [ 1572.817462][T29302] [U] sXX:d_zg? [ 1572.821928][T29302] [U] K9͕yE+@h"m ;kܝ [ 1572.827585][T29302] [U] >ؕHmG [ 1572.914258][T29302] [U] bL^9ZbgF [ 1572.919126][T29302] [U] xD 0rf9y8W=T(n [ 1573.003827][T29302] [U] "mVZ~!0NZl5 3ɞ.ʆ} [ 1573.053738][T29302] [U] /}`_I,c< CY[1)<͜' sEua˃4eI.^vܥ7DPlZpgvOU*fю9.-ai{V@5F=Ն4H [ 1573.173831][T29302] [U] 9)K1vm$#8X1pV"=m`;oS 3؅+!Nc!# g; [ 1573.342796][T29302] [U] r9ޖchvPgyVۺ㹋/qϯ@^GoÞ$S2C/0H_O>+|$I*X`Rv|圙MF8J`"L CR!7]\]2r!u [ 1573.378886][T29302] [U] I- [ 1573.381871][T29302] [U] Sl3Òk *ɦ䖖 [ 1573.387371][T29302] [U] pɩdϱgaoPn!%I3DU}4x?{s_gYq:OhSznA#Ie0bUROBSoɧ)! [ 1573.400689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.474287][T29297] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1573.513778][T29302] [U] Ddތ&eXZ;K;a,G'e`Y1dE.^U.},@\ [ 1573.521267][T29302] [U] /J0X/Yc3] aʖZ5ˍʘ5oUO'.鑸XD_"5q+7}##esyu^M gj|w[}ZE^K*\©@_Uo?\6]1:c2z6J(㗐@ZLDy(L>{<A"ޞ$I2g2+-w7^z=߾( Ǒ!̿oY8T [ 1573.713860][T29302] [U] %WJXS lˠEl06-ϱrQOX߾U* 沮t [ 1573.722725][T29302] [U] s?9}- ,^vy/Vџº;#˨76d [ 1573.786086][T29304] [U] gW@3k&O:[xyzWחE+'uOr8L?d eg>f[uOy/2fKd5ӰT [ 1573.796081][T29304] [U] [ 1573.798862][T29304] [U] [ 1573.801609][T29304] [U] [ 1573.995604][T29304] [U] [ 1573.998384][T29304] [U] [ 1574.001118][T29304] [U] [ 1574.003869][T29304] [U] [ 1574.055900][T29304] [U] [ 1574.058669][T29304] [U] [ 1574.061402][T29304] [U] [ 1574.064162][T29304] [U] [ 1574.124120][T29304] [U] [ 1574.126904][T29304] [U] [ 1574.129644][T29304] [U] [ 1574.132377][T29304] [U] [ 1574.210797][T29304] [U] [ 1574.213581][T29304] [U] [ 1574.216324][T29304] [U] [ 1574.219079][T29304] [U] [ 1574.374721][T29317] nbd: must specify at least one socket [ 1575.574740][T29330] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4710'. [ 1575.771313][T29322] cgroup: fork rejected by pids controller in /syz1 [ 1576.350661][T29438] netlink: 350 bytes leftover after parsing attributes in process `syz.1.4713'. [ 1576.615201][T29450] nbd: must specify at least one socket [ 1577.506705][T29462] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1577.607810][T29466] [U] [ 1577.610614][T29466] [U] [ 1577.613368][T29466] [U] [ 1577.616111][T29466] [U] [ 1577.639456][T29466] [U] [ 1577.642218][T29466] [U] [ 1577.644965][T29466] [U] [ 1577.647708][T29466] [U] [ 1577.857633][T29466] [U] [ 1577.860434][T29466] [U] [ 1577.863229][T29466] [U] [ 1577.865988][T29466] [U] [ 1577.895469][T29466] [U] [ 1577.898257][T29466] [U] [ 1577.901092][T29466] [U] [ 1577.903848][T29466] [U] [ 1577.924040][T29466] [U] [ 1577.926839][T29466] [U] [ 1577.929585][T29466] [U] [ 1577.932316][T29466] [U] [ 1578.747915][T29477] Process accounting resumed [ 1579.428359][T29490] nbd: must specify at least one socket [ 1580.065733][T29496] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1580.246252][T29500] [U] [ 1580.249045][T29500] [U] [ 1580.251786][T29500] [U] [ 1580.254550][T29500] [U] [ 1580.276294][T29500] [U] [ 1580.279064][T29500] [U] [ 1580.281811][T29500] [U] [ 1580.284551][T29500] [U] [ 1580.289438][T29500] [U] [ 1580.292213][T29500] [U] [ 1580.294970][T29500] [U] [ 1580.297729][T29500] [U] [ 1580.301263][T29500] [U] [ 1580.304026][T29500] [U] [ 1580.306753][T29500] [U] [ 1580.309468][T29500] [U] [ 1580.314072][T29500] [U] [ 1580.316831][T29500] [U] [ 1580.319576][T29500] [U] [ 1581.155565][T29514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4735'. [ 1581.353837][T29519] sd 0:0:1:0: PR command failed: 1026 [ 1581.359291][T29519] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1581.367029][T29519] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1581.769774][T29516] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1581.998295][T29518] [U] [ 1582.001103][T29518] [U] [ 1582.003862][T29518] [U] [ 1582.006618][T29518] [U] [ 1582.009360][T29518] [U] [ 1582.065379][T29518] [U] [ 1582.068167][T29518] [U] [ 1582.070937][T29518] [U] [ 1582.073684][T29518] [U] [ 1582.100269][T29518] [U] [ 1582.103069][T29518] [U] [ 1582.105817][T29518] [U] [ 1582.108558][T29518] [U] [ 1582.159566][T29518] [U] [ 1582.162336][T29518] [U] [ 1582.165099][T29518] [U] [ 1582.167833][T29518] [U] [ 1582.294270][T29518] [U] [ 1582.297057][T29518] [U] [ 1582.299834][T29518] [U] [ 1582.598113][T29538] nbd: must specify at least one socket [ 1583.405083][T29550] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1583.549367][T29553] [U] [ 1583.552150][T29553] [U] [ 1583.554897][T29553] [U] [ 1583.557656][T29553] [U] [ 1583.571741][T29553] [U] [ 1583.574507][T29553] [U] [ 1583.577270][T29553] [U] [ 1583.580023][T29553] [U] [ 1583.594011][T29553] [U] [ 1583.596782][T29553] [U] [ 1583.599523][T29553] [U] [ 1583.602302][T29553] [U] [ 1583.605054][T29553] [U] [ 1583.638532][T29553] [U] [ 1583.641285][T29553] [U] [ 1583.644019][T29553] [U] [ 1583.646756][T29553] [U] [ 1583.680191][T29553] [U] [ 1583.682990][T29553] [U] r3PmOd=:Ad3ݍ [ 1583.733952][T29553] [U] 0'Ag-Zk@+}GnD_!WY 6dE`FS [)M>0=}8^Tcw [ 1583.773912][T29553] [U] :ל͛&BpyD!!c<X6|=|bZ [ 1583.780421][T29553] [U] ֕A4az-|eeF|W9kLU~nv{馉h0̐0|$>qiVKO:tLC̬ AfI/4=ӫ$&v]*c!7em_@]O׍I 39gsn}+4lBd [ 1583.940536][T29553] [U] CJ_bkhV5asBOkCSo.Hsvۤ`MRh [ 1583.956198][T29553] [U] hLF':3 [ 1583.987462][T29553] [U] '>^y9Ox㩯?H }eO?\(ﴛ/*D1] pE|gN [ 1584.035503][T29553] [U] CI81 _= [ 1584.039549][T29553] [U] a1~ͳ_G6=^&_>XC cM\6N [ 1584.073734][T29553] [U] ړ04LV!lISD:c6GK[7 [ 1584.109220][T29553] [U] MUm֟zi,/(-Q[ɍѻ@K㝗zi At2&|xA>cϖF uWcޭj%|`[uU9T@dS Cri(a#e/_tV [ 1584.150599][T29553] [U] lcK_^͖)eTԡT&%z(M%193NYmhf1ڏWgH8tĿ|ž [ 1584.182141][T29553] [U] vb&?ox̕U/aS/ݎd6_(d[ttMTe}_̖4#RtaGÐ C:ǒE2y"NR??YA'Z}~"礟rYR|Bd|ts]h#|a:Sw<β=FPe ws#._P'k(7>hqX٪*8B/'  |zeb/v5 [ 1584.242211][T29553] [U] t. 9Bj@8;]5_vz$=p-z0GH0:[K38]*v ƌGNHKYIp saup*,+ ?. [ 1587.766494][T29691] [U] ~)ON1uW`N* [ 1587.824225][T29691] [U] ;ɚԏz [ 1587.840359][T29688] [U] VDk/GA_9^(3L)hp_P\@dnj%·H'A]o[:5R7 ސ l/@$^ x)1Vхw"x!C(Y}y֗JD} i! |%8AUḫQF&$ϲP)1#pthread_create failed (errno 11) [ 1588.752178][T28948] syz.0.4620 (28948) used greatest stack depth: 17328 bytes left [ 1588.754711][T29806] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1588.879143][T29810] [U] [ 1588.881920][T29810] [U] [ 1588.884661][T29810] [U] [ 1588.887407][T29810] [U] [ 1588.924040][T29810] [U] [ 1588.926821][T29810] [U] [ 1588.929565][T29810] [U] [ 1588.932304][T29810] [U] [ 1588.954720][T29810] [U] [ 1588.957474][T29810] [U] [ 1588.960232][T29810] [U] [ 1588.962997][T29810] [U] [ 1588.983982][T29810] [U] [ 1588.986758][T29810] [U] pR!{+k [ 1588.990476][T29810] [U] "lx)K˰nANےj+hb:y(*x%zd*eY9t%2aLb%yOcSтx_&5j0?Y16ZSxqaA4*+uvcR9J)LvHi (!3FC^lFv [ 1589.012135][T29810] [U] O<2t [ 1589.015815][T29810] [U] X%€Lf<{}wX@,l޶K%Γþcڜ;*=tA T.Bjx\ԦX5-NO*s [ 1589.097248][T29819] nbd: must specify at least one socket [ 1589.117348][T29810] [U] "%y;nQ"eM gNݩĢfOW+'kG,B{ \{ qԬOP4!-bmv w $}\ռ [ 1589.131823][T29810] [U] 3h4-"ǢV/G/V<٢&lGoYN<8U%+ DX|Gx>xiGnTUaD %.%0#.\A]?L$~4Pu FY r{'nnƷmVۆCL 5}u_'dY}7ΐkx!C~ٔ)6!9H^m -RfQ#cUdz_f$`!}F?m bm m_" 4d%G(3oY~1pB [ 1589.170240][T29810] [U] Tm+Ux kS(y^vZp_LckfR:p|?jY.O'>&Y$c'I4)큱`3#ϟ8+FQpx7i/v+^ [ 1589.185791][T29810] [U] ߼ ?رƾIచ%@gk 4M(k.I:]\9`ɍD.r=\p2O:*Lj.uf\ [ 1589.195931][T29810] [U]  [ 1589.199116][T29810] [U] M.`s1p tl $4A K5T~nfXXTxp]KKNqل.zBѝMmzG}Lfay [ 1589.210755][T29810] [U] >6e)ܛ_wJ [ 1589.215266][T29810] [U] ŋ@/\FFJp^65Q^ELXŌdNgy [ 1589.223808][T29810] [U] +˚D<:f='ھdYv)? ֋b(J,ǩ2Y[||:w"B.UE>YM\6o8Zڟ[xė| V:flp [ 1589.239591][T29810] [U] d= %4(d޾GxZ@7X [ 1589.246097][T29810] [U] w:;&V\sڮ,h9*E cVe24r̚G4 A- [ 1589.255082][T29810] [U] v{U:MQo iyOvVoLvǺgnX 7{n}S1fkNCխEw4@b2Gs S|5 ׇ9~x d^tXg^oԯ3wPqFĸ~$ߌ< [ 1589.272642][T29810] [U] Y KWXIzr8>S>y8 [ 1589.277826][T29810] [U] ؅fdv~ֳT.+p?_)wz|yI̒Kp1 [ 1594.853949][T30212] [U] [ 1594.857173][T30224] dump_stack_lvl+0x16c/0x1f0 [ 1594.860144][T30212] [U] [ 1594.862767][T30224] should_fail_ex+0x497/0x5b0 [ 1594.874921][T30224] _copy_from_user+0x2e/0xd0 [ 1594.879559][T30224] do_semtimedop+0x173/0x310 [ 1594.884182][T30224] ? __pfx_do_semtimedop+0x10/0x10 [ 1594.889331][T30224] ? ksys_write+0x12b/0x250 [ 1594.893925][T30224] ? __fget_files+0x206/0x3a0 [ 1594.898666][T30224] __x64_sys_semtimedop+0x1b8/0x1f0 [ 1594.903931][T30224] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 1594.909712][T30224] do_syscall_64+0xcd/0x250 [ 1594.914326][T30224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.920301][T30224] RIP: 0033:0x7f6e18f85d29 [ 1594.924847][T30224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.944487][T30224] RSP: 002b:00007f6e19dde038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 1594.952936][T30224] RAX: ffffffffffffffda RBX: 00007f6e19175fa0 RCX: 00007f6e18f85d29 [ 1594.960943][T30224] RDX: 0000000000000004 RSI: 0000000020000180 RDI: 0000000000000007 [ 1594.968980][T30224] RBP: 00007f6e19dde090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.976986][T30224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.984991][T30224] R13: 0000000000000000 R14: 00007f6e19175fa0 R15: 00007ffc32735178 [ 1594.988971][T30212] [U] [ 1594.992994][T30224] [ 1595.058306][T30212] [U] ǧ`7=iaٶA#gb=c悧l\3W [ 1595.213007][T30212] [U] 0 SvPтCi].'tBzRp!B Cêxwc֞b}j1*4 [ 1595.223910][T30212] [U] ` [ 1595.226725][T30212] [U] J >֊{6ɰ1s37 [ 1595.298649][T30212] [U] vGh߇ڲe6|mCJ͗[]y#%=y<joVH\rpP,Tp, j٪0]kz2Uh=M:ڳ3Af($n__M_) [ 1595.324079][T30212] [U] -`dxF\c [ 1595.328226][T30212] [U] H [ 1595.331019][T30212] [U] %hjuJ:qbs+~.5p7U! [ 1595.337293][T30212] [U] ޸7< F056ќ7b-f]M#:N19!|V]ض3رKoTCHPx&`ՈĬrn#jʖل[.d^QgEv) [ 1595.358474][T30212] [U] ^L7(\$%ۦLʴ÷'|Iہm@oZѢ*kC6ZZ`z qS{HV QLWʏM [ 1595.371336][T30212] [U] dZ^On~/ܡDO,j0]hd[6dpJO#):EZzSxnLpw=T^뫒|_ŊC`Bd!tLGnհM+ǡrIo\b/\=6~6Ӆh [ 1595.399626][T30212] [U] @jWcs3=y.uE [ 1595.424097][T30212] [U] hZ [ 1595.427310][T30212] [U] "/@U7TxݗP2"9r7PIv`k*^2 m '5x_T]۸(B1a~t=C5u  [ 1595.463778][T30212] [U] ԋ59HUwh>uXF6yaa,5?f$msS# [ 1595.474018][T30212] [U] 5AoG޶ [ 1595.477687][T30212] [U] fm1FCja $}`Y|˼RɈ۴-+<;KSǣ8\:W8Mkdi4P,lF}IrG_wDٝ!/g7آhїoMYGD,?[![ve di^JVgΘH&HJ9TڒC^Yq5"odLqM/|z9[ [ 1595.501797][T30212] [U] CP%(4 [ 1595.628330][T30212] [U] (_v*s}̎=z3$??4lś1yahZ99eOM"?mQn ևl !0Gǡb I [ 1595.660822][T30212] [U] X`Us7>- [ 1595.711997][T30212] [U] '\YF* [ 1595.893935][T30212] [U] Ο{H0I4^ߝO`<xb%i's6bb*p?h죻hq%j(@6ydU2,k9HQM-NXBe~%`1IVYĴ;`@}V4ա [ 1595.910524][T30212] [U] $ 5JU;9,oɸ(pFM3EuAAn3PG0}k.:p<@8Q#yLÄ~\N )6~ Yf|."E]Zq*sOt$03cȚ,\ [ 1596.134484][T30212] [U] tNx^J5rSL٩AWݻ@ [ 1596.153827][T30212] [U] 97&1);]GOb&F3Qw.ܕ✃ӨgI݂sZ*c" Ar$PϤąG^ [ 1596.179273][T30340] nbd: must specify at least one socket [ 1596.960642][T30458] FAULT_INJECTION: forcing a failure. [ 1596.960642][T30458] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.976374][T30458] CPU: 0 UID: 0 PID: 30458 Comm: syz.0.4800 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1596.987276][T30458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1596.997345][T30458] Call Trace: [ 1597.000640][T30458] [ 1597.003583][T30458] dump_stack_lvl+0x16c/0x1f0 [ 1597.008286][T30458] should_fail_ex+0x497/0x5b0 [ 1597.012983][T30458] ? fs_reclaim_acquire+0xae/0x150 [ 1597.018116][T30458] should_failslab+0xc2/0x120 [ 1597.022822][T30458] __kmalloc_node_noprof+0xd1/0x520 [ 1597.028040][T30458] ? file_tty_write.constprop.0+0x281/0x9a0 [ 1597.033958][T30458] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1597.039445][T30458] __kvmalloc_node_noprof+0xad/0x1a0 [ 1597.044768][T30458] file_tty_write.constprop.0+0x6dd/0x9a0 [ 1597.050522][T30458] ? redirected_tty_write+0x1f/0x140 [ 1597.055846][T30458] redirected_tty_write+0xcc/0x140 [ 1597.060997][T30458] vfs_write+0x5ae/0x1150 [ 1597.065346][T30458] ? __pfx_redirected_tty_write+0x10/0x10 [ 1597.071096][T30458] ? __pfx_vfs_write+0x10/0x10 [ 1597.075883][T30458] ? __fget_files+0x40/0x3a0 [ 1597.080520][T30458] ksys_write+0x12b/0x250 [ 1597.084878][T30458] ? __pfx_ksys_write+0x10/0x10 [ 1597.089769][T30458] do_syscall_64+0xcd/0x250 [ 1597.094314][T30458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.100257][T30458] RIP: 0033:0x7f6e18f85d29 [ 1597.104689][T30458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1597.124309][T30458] RSP: 002b:00007f6e19dde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1597.132736][T30458] RAX: ffffffffffffffda RBX: 00007f6e19175fa0 RCX: 00007f6e18f85d29 [ 1597.140724][T30458] RDX: 0000000000000003 RSI: 0000000020000140 RDI: 0000000000000008 [ 1597.148713][T30458] RBP: 00007f6e19dde090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.156706][T30458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1597.164957][T30458] R13: 0000000000000000 R14: 00007f6e19175fa0 R15: 00007ffc32735178 [ 1597.172951][T30458] [ 1598.261255][T30784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4806'. [ 1598.275681][T30783] nbd: must specify at least one socket [ 1598.404362][T30780] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1598.573173][T30788] [U] U/wIO$ FfP%nh1SVu-&#Zyg$f:\ [ 1598.580838][T30788] [U] [ 1598.583597][T30788] [U] [ 1598.586339][T30788] [U] [ 1598.644068][T30788] [U] [ 1598.646837][T30788] [U] [ 1598.649579][T30788] [U] [ 1598.652328][T30788] [U] [ 1598.655724][T30788] [U] [ 1598.658498][T30788] [U] [ 1598.661251][T30788] [U] [ 1598.664004][T30788] [U] [ 1598.667627][T30788] [U] [ 1598.670407][T30788] [U] [ 1598.673159][T30788] [U] [ 1598.675886][T30788] [U] [ 1598.715353][T30788] [U] [ 1598.718125][T30788] [U] [ 1598.720880][T30788] [U] [ 1598.723732][T30788] [U] [ 1598.819828][T30779] [U] [ 1599.284761][T30903] FAULT_INJECTION: forcing a failure. [ 1599.284761][T30903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1599.328642][T30903] CPU: 1 UID: 0 PID: 30903 Comm: syz.1.4811 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1599.339458][T30903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1599.349555][T30903] Call Trace: [ 1599.352980][T30903] [ 1599.355952][T30903] dump_stack_lvl+0x16c/0x1f0 [ 1599.360701][T30903] should_fail_ex+0x497/0x5b0 [ 1599.365449][T30903] _copy_from_user+0x2e/0xd0 [ 1599.370105][T30903] copy_msghdr_from_user+0x99/0x160 [ 1599.375382][T30903] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1599.381261][T30903] ___sys_sendmsg+0xff/0x1e0 [ 1599.385934][T30903] ? __pfx____sys_sendmsg+0x10/0x10 [ 1599.391184][T30903] ? __pfx_lock_release+0x10/0x10 [ 1599.396226][T30903] ? trace_lock_acquire+0x14e/0x1f0 [ 1599.401466][T30903] ? __fget_files+0x206/0x3a0 [ 1599.406178][T30903] __sys_sendmsg+0x16e/0x220 [ 1599.410886][T30903] ? __pfx___sys_sendmsg+0x10/0x10 [ 1599.416071][T30903] do_syscall_64+0xcd/0x250 [ 1599.420605][T30903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.426539][T30903] RIP: 0033:0x7f66ed785d29 [ 1599.430980][T30903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.450623][T30903] RSP: 002b:00007f66ee5ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1599.459059][T30903] RAX: ffffffffffffffda RBX: 00007f66ed976080 RCX: 00007f66ed785d29 [ 1599.467039][T30903] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1599.475017][T30903] RBP: 00007f66ee5ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1599.482996][T30903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1599.490987][T30903] R13: 0000000000000000 R14: 00007f66ed976080 R15: 00007ffc490e4c08 [ 1599.498983][T30903] [ 1599.502032][ C1] vkms_vblank_simulate: vblank timer overrun [ 1600.142540][T30912] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1600.162034][T30912] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1600.229021][T30912] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1600.243933][T30912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1600.616896][T31128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4819'. [ 1601.291250][T31140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4822'. [ 1601.378062][T31137] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1601.399334][T31127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4818'. [ 1601.429218][T31127] lo: entered promiscuous mode [ 1601.456051][T31127] lo: entered allmulticast mode [ 1601.604373][T31141] [U] [ 1601.607161][T31141] [U] [ 1601.609925][T31141] [U] [ 1601.612691][T31141] [U] [ 1601.644068][T31141] [U] [ 1601.646861][T31141] [U] [ 1601.649597][T31141] [U] [ 1601.652335][T31141] [U] [ 1601.710464][T31141] [U] [ 1601.713257][T31141] [U] [ 1601.716010][T31141] [U] [ 1601.718763][T31141] [U] [ 1601.788131][T31141] [U] [ 1601.790977][T31141] [U] a/f/,WuZsw'7Ue4tl4qPZ8 [ 1601.797694][T31141] [U] ֯*;۟iCg7ּs9w1{%@7aXR/NIٯ\ [ 1601.805625][T31141] [U] h3jp6`Zv+T!wg}ygȎ\.‡Zˬe [ 1602.033823][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 1602.043976][T31141] [U] 7T#j`:Y4{*ky [ 1602.184400][T31141] [U] d- [ 1602.187515][T31141] [U] d< [ 1602.190912][T31141] [U] N0[_N9^ju<-STgb(G{)7sA P"M]?KJ~)7M] (}oo [ 1602.200774][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1602.201848][T31141] [U] n#?pccQ [ 1602.234087][T31141] [U] nb7aN%+Wv>٣uÊ@=S_7.B[ʄ*|,ahv-tI1|)sąŝZ-ZN"D,uT2: YuDZ-#Z^_w./XnU [ 1602.391077][T31141] [U] f}=rIf[ A [ 1602.397574][T31141] [U] .b؀xjsH1w.qMwV`V]fu:.ۻ~k^T'{>P'FeGMAtjRW`m0T1R0y9OL08 r)\ͬivw1۹ [ 1602.418945][T31141] [U] -j9%M|tzҦo.t6YԹU2yH:<[pIU)2{Qah@^dNE!( [ 1602.431200][T31141] [U] ⨔QB~KF c\otzZيb;$d [ 1602.438622][T31141] [U] ߀>4+11y-@.1ň7,1ZNXEqu ~v5prm¸4L@ b.8^ L,mƐn-jz[J5mJ߷eGRMjov?;@-!(.>na [ 1602.455860][T31141] [U] @"H4|?JNWf%a|fL>ʕǽY~VC:g$u=7(t)dm"vW9jy `Ԉ7ݹO [ 1602.466358][T31141] [U] xYc"WRVઝ|Q7푚_OMUQL4:H={z2a2b>p;&$S97(E/Eݥ* [ 1602.476275][T31141] [U] Xn{ [ 1602.480097][T31141] [U] 62ͯbl6{|' ykV9-~axNA6ȲhO @LN65KO8]zاK$f>箬a7w݉|O^1j7de /crfxO3ȻCw")%\ZMAmg9h`(cE^ FG&7.olb"XZR䚀#}?ڢp [ 1602.502760][T31141] [U] }*ȑǑ4^7T4A] ?2(d ec|o҄#ꔝQEE_SHgAMs-rvˆ$F^ U[q[=Τ)C?g\P:yp*CŃs%)@ [ 1602.519199][T31141] [U] rA;[%g [ 1602.630537][T31141] [U] .sJ,uTrD[HpS4wﴳ_'*%_XS{>Ԡa75=*D,yhd}Y*P@Kut׊#+7> [ 1602.694098][T31141] [U] ah1vvSb [ 1602.698815][T31141] [U] ku?kFiLxFd#u@#ئdMVriUţh`7;fvv Vi*jy&Oakj]pHJ-jݩeB&ŏ~<SRkw\DV [ 1602.714828][T31141] [U] IQe̡ &!iyyK\fM׹?*K?):!7HoG{#H7 Mt`gs.&‹^JpK[̒w [ 1602.878175][T31141] [U] m>X [ 1602.882188][T31141] [U] &4%(N48UKNsQřli{ĔNQcXEjc S펗M,o [ 1602.980969][T31141] [U]  [ 1602.984050][T31141] [U] 2CI פmݏLU"|qc6F^; [ 1603.047340][T31136] [U] bT,i)M3 <|gd^䠁KBѓYh8X,pVo *S61\o:fC#WDh7k rݤ[ [ 1604.493513][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4833'. [ 1605.013912][T31481] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1605.146738][T31485] [U] [ 1605.149546][T31485] [U] [ 1605.152306][T31485] [U] [ 1605.155100][T31485] [U] [ 1605.178001][T31485] [U] [ 1605.180787][T31485] [U] [ 1605.183560][T31485] [U] [ 1605.186312][T31485] [U] [ 1605.204088][T31485] [U] [ 1605.206851][T31485] [U] [ 1605.209614][T31485] [U] [ 1605.212369][T31485] [U] [ 1605.224001][T31485] [U] [ 1605.226758][T31485] [U] [ 1605.229504][T31485] [U] [ 1605.232246][T31485] [U] [ 1605.244071][T31485] [U] [ 1605.246864][T31485] [U] [ 1605.249615][T31485] [U] [ 1606.293902][T31607] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1606.435366][T31607] [U] [ 1606.438141][T31607] [U] [ 1606.441001][T31607] [U] [ 1606.443748][T31607] [U] [ 1606.447367][T31607] [U] [ 1606.450134][T31607] [U] [ 1606.452883][T31607] [U] [ 1606.455620][T31607] [U] [ 1606.458365][T31607] [U] [ 1606.484107][T31607] [U] [ 1606.486868][T31607] [U] [ 1606.489606][T31607] [U] [ 1606.492372][T31607] [U] [ 1606.513820][T31607] [U] [ 1606.516728][T31607] [U] .1:]Ֆ EFqg*7rjZ$6pZ [ 1606.523227][T31607] [U] >$4ښ[H#Jaճ}I|lx}Wo4%^Qv(G[[{܏`l8ԏuY-:fC,K{ P!!ŠG<]JxZ?V|n]˅ U# 78ĥ [ 1606.557974][T31607] [U] P8TڿǢ6+WL'[ǾDlz 42 [ 1606.565577][T31607] [U] C":$Fŵb^Q h]].'H` ZWwַH]\ +ukpJdn;^b8yQ5bz-M^az [ 1606.584306][T31607] [U] Njev քP*4(; [ 1606.589060][T31607] [U] [*YNo3a޷XbOp^Z [ 1606.595689][T31607] [U] H09nzXtyoĮ 潯g+: 2پr}uN"2>:Pӽg0F [ 1606.608049][T31607] [U] 2x_wOSKS pddjvq' [ 1606.615068][T31607] [U] Wda&}N@ʊ7 [ 1606.620648][T31607] [U] #LFd'ĄIRv_-ȹۼoƞ츪i.PCXj#MOX,U*êlo"B-< =FȉƩ<\-wV"CŽINB7=+4/J{҂s0r"^cMP4=/׸&.bVHZ̎ڸZ7tE*: W#0~%Nۛk((@8 ab**s|*8+D\IJƂ7oi[ac3}ʌ7XEZ=#bww\!S;Z [ 1606.650624][T31607] [U] #ňFETKďrW'gKcVM^ACg掴u_8 [ 1606.659627][T31607] [U] ?( ~JCc>Beut0 8ɹa,H.{rڹ=ZAw0 [ 1606.669243][T31607] [U] 1rwOvuwC6 h%]q=)tr(}qpȡEv ]lzgrz>w'2ԆwXLh'R-nu;h [ 1606.682954][T31607] [U] Kf7Um [ 1606.686890][T31607] [U] flԊցsPU׷,C4+RhB&o$HRyT3w,903BlPPpZfh7$[*K)nf:0OÀ[Kǡ--V#+pLMT&wyD%,ngbᜤ>0Ndz(iMnͣ,MsQgk+XZ}v [ 1606.706837][T31607] [U] _ [ 1606.710585][T31607] [U] { [ 1606.723538][T31607] [U] |f2RR RE䞆IwĂսڷX)^%hV(+6@WsjY ! J6X -A<]Kt2~B%[ 2x75!uW%4yp¢ [ 1606.740288][T31607] [U] џ ytbtԌ9Vs=J3 [ 1606.793765][T31607] [U] Ԃ O,ngeeJU|n]^mX_= [ 1606.848582][T31607] [U] ^l~juC^KP_1 [ 1606.853309][T31607] [U] Yj\n4']:5BldrJj-/҄Lf'fC'V$:T/3HRl…o%vSFx@1 [ 1606.934156][T31607] [U] j*69KΏZlq18ˆN재j" ϯXݫnGuPAʕ,]Y [ 1606.943078][T31607] [U] l`< c HIyWv#8.,BWrHOqD|~0u+m~saНY$Y!?T [ 1607.584086][T31944] nbd: must specify at least one socket [ 1608.580244][T32109] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1608.746356][T32160] [U] GTNˆH%(||aXap|/{6UJ|(7m5N/8`Jrj@L:{M(vO"vDkKF\kXvoT4Ƃ6WV`u||fe4Q9>ӤQ}QܴZ9N8 QB[AWx>^hn HѮ}j;)Iz|EET [ 1612.253022][T32653] dump_stack_lvl+0x16c/0x1f0 [ 1612.257765][T32653] should_fail_ex+0x497/0x5b0 [ 1612.262493][T32653] ? fs_reclaim_acquire+0xae/0x150 [ 1612.267647][T32653] should_failslab+0xc2/0x120 [ 1612.272382][T32653] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 1612.278162][T32653] ? sock_alloc_inode+0x25/0x1c0 [ 1612.283146][T32653] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1612.288566][T32653] sock_alloc_inode+0x25/0x1c0 [ 1612.293381][T32653] alloc_inode+0x5d/0x230 [ 1612.297764][T32653] sock_alloc+0x40/0x280 [ 1612.302048][T32653] __sock_create+0xc1/0x8d0 [ 1612.306598][T32653] __sys_socket+0x14f/0x260 [ 1612.311139][T32653] ? __pfx___sys_socket+0x10/0x10 [ 1612.316207][T32653] ? ksys_write+0x1ba/0x250 [ 1612.320775][T32653] ? __pfx_ksys_write+0x10/0x10 [ 1612.325687][T32653] __x64_sys_socket+0x72/0xb0 [ 1612.330410][T32653] ? lockdep_hardirqs_on+0x7c/0x110 [ 1612.335674][T32653] do_syscall_64+0xcd/0x250 [ 1612.340259][T32653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.346214][T32653] RIP: 0033:0x7f6e18f85d29 [ 1612.350666][T32653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1612.370329][T32653] RSP: 002b:00007f6e19dbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1612.378791][T32653] RAX: ffffffffffffffda RBX: 00007f6e19176080 RCX: 00007f6e18f85d29 [ 1612.386881][T32653] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000002 [ 1612.394880][T32653] RBP: 00007f6e19dbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1612.402888][T32653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.410901][T32653] R13: 0000000000000000 R14: 00007f6e19176080 R15: 00007ffc32735178 [ 1612.418950][T32653] [ 1612.447206][T32653] socket: no more sockets [ 1612.584296][ T383] sd 0:0:1:0: PR command failed: 1026 [ 1612.596246][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.602717][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.611195][ T383] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1612.621615][ T383] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1613.496372][ T418] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1613.607494][ T416] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1613.658331][ T418] [U] [ 1613.661104][ T418] [U] [ 1613.663849][ T418] [U] [ 1613.666577][ T418] [U] [ 1613.669735][ T418] [U] [ 1613.672537][ T418] [U] [ 1613.675309][ T418] [U] [ 1613.678046][ T418] [U] [ 1613.681547][ T418] [U] [ 1613.684308][ T418] [U] [ 1613.687053][ T418] [U] [ 1613.689825][ T418] [U] [ 1613.693175][ T418] [U] [ 1613.695944][ T418] [U] [ 1613.698703][ T418] [U] [ 1613.701438][ T418] [U] [ 1613.707146][ T418] [U] [ 1613.709947][ T418] [U] [ 1613.712696][ T418] [U] [ 1613.715438][ T418] [U] [ 1613.823318][ T416] [U] [ 1613.826194][ T416] [U] [ 1613.828941][ T416] [U] [ 1613.831683][ T416] [U] [ 1613.863948][ T416] [U] [ 1613.866796][ T416] [U] [ 1613.869542][ T416] [U] [ 1613.872290][ T416] [U] [ 1613.914178][ T416] [U] [ 1613.923923][ T416] [U] IKC8OʲB `<)_[FzZs>w©ϝ_'>4X6O}Cނ"0P|K<ֹqxLBjjb%2QzLE=T~漭88y֗.ՁVF [ 1613.946417][ T427] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4891'. [ 1613.959798][ T416] [U] kaU9o&34GRÆ5ox~[R准Sg>ʕ=c׆e96Vo4;mT Aj8'8z eZF\^pm -<4j_ףc9|u:QPǮ\<8p`O&iJp-;Q9#,;oJ7@/o'. [ 1614.006774][ T416] [U] gHF"Z 2[jTV=BV,[ [ 1614.018247][ T416] [U] >E3$k # nGmg^ \h¹;1d)SA܇" [ 1614.027050][ T416] [U] $]5f;щWmgwp{ZA Jd4[ [ 1614.035169][ T416] [U] < [ 1614.038157][ T416] [U] v`x_$־Ot&1M'+H\%$ 5ZvsD [ 1614.046120][ T416] [U] =9qIƬ>1ƹT/09UW#sW [ 1614.052158][ T416] [U] 5wknv#1ĦrEx4z]-!P.(@J  [ 1614.060615][ T416] [U] MoݛoLcCNcT9j8,TkqAvOux [ 1614.106665][ T416] [U] Jq\M&gS b*@żVKlj g!hn#_kEnv^^|ߡ!wF)r[% qcfPTPvxpD ݃]sj[1r*FA ho[} [ 1614.193843][ T416] [U] gKYjNn {-PsH DV '<g5-:17w-. ފm1 < [ 1614.212640][ T416] [U] Ը{Md -e.  [ 1614.282984][ T416] [U] }!Լ*)[R')|>^$3Ta4D!h*C)-(Nҡs,˭ˈ(T:-}%;u3sBHN9>ʑzf.;/RPPᝦ!9ԗa@!!jD$('׼1)\(cŪjNGRRqFF889UtdF9qT|nsa廏QVlW9`SB)ER [ 1614.343962][ T416] [U] ydc{07?q [ 1614.348036][ T416] [U] J zqy&{*?`Zv"nR|dACkQNa7[*Z=Ish̦ yol7_UCྥSN#v6ec9Ȯ9nh{)XmlM8Z~t,,rYj,Z*@"(〴d!vݨ:azt`[5ŷ2A{ n( [ 1614.468226][ T416] [U] Z-BFnC%~WS@UEN 獉 \Ƃ~(+ǖL6vD30En4)uO- !V5m.D=Dsצu|D^~M_kg#x)A8*ǤE!_fc2guk!YˮA`s}3z|M+^缾p0sy [ 1614.504334][ T416] [U] AQ8? [ 1614.534543][ T416] [U] n1/ Nq-35.  MKxMq6dٿ +o\yT@CE 5axyntJHVg [ 1614.568140][ T416] [U] %'6Tg@i=۝ D*P`)SurfVQA?$>;NdAT1$ [ 1614.586004][ T416] [U] D8*3M_2.ȔENi{(-Vte &*5ҾT+7ވ_d/PTꝻ@傗T_eoN)9˦;j)CR5Bob#[6G#/'Dy$|u [ 1614.635940][ T416] [U] 2f-<"%w8a4S:FKmz 2?$D JE->xLSD%"Q^N}R2шz~463+Kqq [ 1614.647539][ T416] [U] ' ."֓1X(Şq5=jB?7)@Qdi8XYuLcvO؜kX2Xˀ“)vfG ֒ [ 1614.691686][ T416] [U] މVrQ1HexZޟC>!0Z&\pI*,swlF]4zEH#)Yof;0 [ 1614.702722][ T416] [U] C 'jc^ [ 1614.773555][ T416] [U] {ɶ2"rfg֋o9ӒL) GrQ9v6݀gt1d:kUD̼Ed^ʶhߝbSX5cc4m֋ݡM,AZI_B J׈O8ɛc>wy 9=<DZnux [ 1614.797999][ T416] [U] A),%_% Ň<~[ed -R9›nyybQ6ݩ{> m [ 1614.813849][ T415] [U] }ޔ=dz(f]͟%z+4ݤɵ!l ҖNRT{&~_S۳W" uES9+ވI8G]g-[4r˴'h>\ [ 1616.054454][ T776] dump_stack_lvl+0x16c/0x1f0 [ 1616.059171][ T776] should_fail_ex+0x497/0x5b0 [ 1616.063886][ T776] ? fs_reclaim_acquire+0xae/0x150 [ 1616.069048][ T776] should_failslab+0xc2/0x120 [ 1616.073774][ T776] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1616.079193][ T776] ? alloc_empty_file+0x73/0x1e0 [ 1616.084191][ T776] alloc_empty_file+0x73/0x1e0 [ 1616.089015][ T776] path_openat+0xe1/0x2d60 [ 1616.093478][ T776] ? hlock_class+0x4e/0x130 [ 1616.098033][ T776] ? __lock_acquire+0x15a9/0x3c40 [ 1616.103116][ T776] ? __pfx_path_openat+0x10/0x10 [ 1616.108161][ T776] ? __pfx___lock_acquire+0x10/0x10 [ 1616.113393][ T776] ? lock_acquire.part.0+0x11b/0x380 [ 1616.118708][ T776] ? find_held_lock+0x2d/0x110 [ 1616.123529][ T776] do_filp_open+0x20c/0x470 [ 1616.128076][ T776] ? __pfx_do_filp_open+0x10/0x10 [ 1616.133149][ T776] ? find_held_lock+0x2d/0x110 [ 1616.137978][ T776] ? alloc_fd+0x41f/0x760 [ 1616.142352][ T776] do_sys_openat2+0x17a/0x1e0 [ 1616.147081][ T776] ? __pfx_do_sys_openat2+0x10/0x10 [ 1616.152337][ T776] ? __fget_files+0x206/0x3a0 [ 1616.157058][ T776] __x64_sys_openat+0x175/0x210 [ 1616.161969][ T776] ? __pfx___x64_sys_openat+0x10/0x10 [ 1616.167401][ T776] ? ksys_write+0x1ba/0x250 [ 1616.171963][ T776] do_syscall_64+0xcd/0x250 [ 1616.176517][ T776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.182473][ T776] RIP: 0033:0x7f757ab85d29 [ 1616.186916][ T776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1616.206559][ T776] RSP: 002b:00007f757ba5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1616.215025][ T776] RAX: ffffffffffffffda RBX: 00007f757ad75fa0 RCX: 00007f757ab85d29 [ 1616.223030][ T776] RDX: 0000000000020401 RSI: 0000000020001080 RDI: ffffffffffffff9c [ 1616.231041][ T776] RBP: 00007f757ba5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1616.239043][ T776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1616.247048][ T776] R13: 0000000000000001 R14: 00007f757ad75fa0 R15: 00007ffe03449ae8 [ 1616.255104][ T776] [ 1616.492796][ T779] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1616.615335][ T779] [U] [ 1616.615396][ T779] [U] [ 1616.615449][ T779] [U] [ 1616.615524][ T779] [U] [ 1616.615770][ T779] [U] [ 1616.615827][ T779] [U] [ 1616.615884][ T779] [U] [ 1616.615940][ T779] [U] [ 1616.616301][ T779] [U] [ 1616.616359][ T779] [U] [ 1616.616419][ T779] [U] [ 1616.616474][ T779] [U] [ 1616.616731][ T779] [U] [ 1616.616782][ T779] [U] [ 1616.616833][ T779] [U] [ 1616.616882][ T779] [U] [ 1616.627131][ T779] [U] [ 1616.627179][ T779] [U] [ 1616.627222][ T779] [U] [ 1616.942321][ T778] [U] [ 1616.945053][ T778] [U] ) [ 1616.959791][ T885] nbd: must specify at least one socket [ 1618.139565][ T958] FAULT_INJECTION: forcing a failure. [ 1618.139565][ T958] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.184645][ T958] CPU: 0 UID: 0 PID: 958 Comm: syz.2.4920 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1618.195370][ T958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1618.205460][ T958] Call Trace: [ 1618.208762][ T958] [ 1618.211717][ T958] dump_stack_lvl+0x16c/0x1f0 [ 1618.216479][ T958] should_fail_ex+0x497/0x5b0 [ 1618.221199][ T958] ? fs_reclaim_acquire+0xae/0x150 [ 1618.226352][ T958] should_failslab+0xc2/0x120 [ 1618.231075][ T958] __kmalloc_noprof+0xce/0x4f0 [ 1618.235887][ T958] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1618.241559][ T958] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1618.247322][ T958] tomoyo_realpath_from_path+0xbf/0x710 [ 1618.252905][ T958] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1618.258617][ T958] tomoyo_path_number_perm+0x248/0x5b0 [ 1618.264144][ T958] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1618.269851][ T958] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1618.275930][ T958] ? __pfx_lock_release+0x10/0x10 [ 1618.281004][ T958] ? trace_lock_acquire+0x14e/0x1f0 [ 1618.286253][ T958] ? lock_acquire+0x2f/0xb0 [ 1618.290793][ T958] ? __fget_files+0x40/0x3a0 [ 1618.295450][ T958] ? __fget_files+0x206/0x3a0 [ 1618.300207][ T958] security_file_ioctl+0x9b/0x240 [ 1618.305284][ T958] __x64_sys_ioctl+0xb7/0x200 [ 1618.310011][ T958] do_syscall_64+0xcd/0x250 [ 1618.314576][ T958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.320516][ T958] RIP: 0033:0x7ffa79385d29 [ 1618.324971][ T958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1618.344614][ T958] RSP: 002b:00007ffa7a276038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1618.353058][ T958] RAX: ffffffffffffffda RBX: 00007ffa79575fa0 RCX: 00007ffa79385d29 [ 1618.361067][ T958] RDX: 0000000000000000 RSI: 000000000000541c RDI: 000000000000000b [ 1618.369062][ T958] RBP: 00007ffa7a276090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.377057][ T958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.385060][ T958] R13: 0000000000000000 R14: 00007ffa79575fa0 R15: 00007ffc82fa92c8 [ 1618.393073][ T958] [ 1618.588408][ T958] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1619.072316][ T964] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1619.242326][ T972] [U] [ 1619.245112][ T972] [U] [ 1619.247863][ T972] [U] [ 1619.250620][ T972] [U] [ 1619.284552][ T972] [U] [ 1619.287320][ T972] [U] [ 1619.290082][ T972] [U] [ 1619.292832][ T972] [U] [ 1619.349419][ T972] [U] [ 1619.352165][ T972] [U] y8`c#R<٢E NSV=L;@M"Q4"9 HGWC dLFSm [ 1619.394412][ T972] [U] )M]] [ 1619.397800][ T972] [U] /ün4eVNB+6v,F5RX 7[IUji:i|qQm2If. [ 1619.517289][ T972] [U] `U-M [ 1619.553477][ T972] [U] ~b:U>$RzZ(2h [ 1619.625033][ T972] [U] cӷvxakԪ޶ [ 1619.954097][ T972] [U] Jr!/DAÃEHTy}J9`p0%%AXFq{hG8_ .S[J:HՎʍu mdhe29/ydOAJ/sT9J%?Iɡ)NnQ!ٛ<ã*hj{ooIKAӇ@#KOo(_Py|7z@&4<:ӛ(ؙT_ X0w\c߳ΓQ `[@ƎS%T8·D4a|0@Ēx7#kߞB G\I̗?p\~ "s䎰ЉKR|2l* 233N6vo}d/^[g$x+0NO~No H 1 [ 1622.685810][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1622.713853][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1622.722811][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1622.730923][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1622.743950][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1622.992856][ T1965] program syz.0.4945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1623.988661][ T2084] FAULT_INJECTION: forcing a failure. [ 1623.988661][ T2084] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.001479][ T2084] CPU: 0 UID: 0 PID: 2084 Comm: syz.2.4952 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1624.012200][ T2084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1624.022306][ T2084] Call Trace: [ 1624.025624][ T2084] [ 1624.028604][ T2084] dump_stack_lvl+0x16c/0x1f0 [ 1624.033342][ T2084] should_fail_ex+0x497/0x5b0 [ 1624.038097][ T2084] ? fs_reclaim_acquire+0xae/0x150 [ 1624.043308][ T2084] should_failslab+0xc2/0x120 [ 1624.048044][ T2084] __kmalloc_cache_noprof+0x68/0x420 [ 1624.053395][ T2084] __do_semtimedop+0x13d2/0x4f70 [ 1624.058390][ T2084] ? __pfx___do_semtimedop+0x10/0x10 [ 1624.063714][ T2084] ? __might_fault+0x13b/0x190 [ 1624.068525][ T2084] ? __pfx_lock_release+0x10/0x10 [ 1624.073562][ T2084] ? trace_lock_acquire+0x14e/0x1f0 [ 1624.078809][ T2084] ? __might_fault+0xe3/0x190 [ 1624.083550][ T2084] ? do_semtimedop+0x1a7/0x310 [ 1624.088344][ T2084] do_semtimedop+0x1a7/0x310 [ 1624.092965][ T2084] ? __pfx_do_semtimedop+0x10/0x10 [ 1624.098277][ T2084] ? ksys_write+0x12b/0x250 [ 1624.102877][ T2084] ? __fget_files+0x206/0x3a0 [ 1624.107770][ T2084] __x64_sys_semtimedop+0x1b8/0x1f0 [ 1624.112995][ T2084] ? __pfx___x64_sys_semtimedop+0x10/0x10 [ 1624.118757][ T2084] do_syscall_64+0xcd/0x250 [ 1624.123323][ T2084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.129258][ T2084] RIP: 0033:0x7ffa79385d29 [ 1624.133703][ T2084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1624.153341][ T2084] RSP: 002b:00007ffa7a276038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 1624.161773][ T2084] RAX: ffffffffffffffda RBX: 00007ffa79575fa0 RCX: 00007ffa79385d29 [ 1624.170110][ T2084] RDX: 0000000000000004 RSI: 0000000020000180 RDI: 0000000000000007 [ 1624.178103][ T2084] RBP: 00007ffa7a276090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.186179][ T2084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.194208][ T2084] R13: 0000000000000000 R14: 00007ffa79575fa0 R15: 00007ffc82fa92c8 [ 1624.202220][ T2084] [ 1624.648635][ T2092] nbd: must specify at least one socket [ 1624.833832][T31311] Bluetooth: hci4: command tx timeout [ 1624.977416][ T1959] chnl_net:caif_netlink_parms(): no params data found [ 1625.163360][ T1959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.176738][ T1959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.218104][ T1959] bridge_slave_0: entered allmulticast mode [ 1625.241090][ T1959] bridge_slave_0: entered promiscuous mode [ 1625.288042][ T1959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.333776][ T1959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.346325][ T1959] bridge_slave_1: entered allmulticast mode [ 1625.368799][ T1959] bridge_slave_1: entered promiscuous mode [ 1625.656484][ T2208] lo: entered allmulticast mode [ 1625.686161][ T2208] lo: left allmulticast mode [ 1625.717247][ T1959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.747174][ T1959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.908902][ T1959] team0: Port device team_slave_0 added [ 1625.939910][ T1959] team0: Port device team_slave_1 added [ 1626.018676][ T1959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1626.028679][ T1959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.094809][ T1959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1626.121930][ T1959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1626.140763][ T1959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1626.213856][ T1959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1626.423176][ T1959] hsr_slave_0: entered promiscuous mode [ 1626.475381][ T1959] hsr_slave_1: entered promiscuous mode [ 1626.485421][ T1959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1626.493012][ T1959] Cannot create hsr debugfs directory [ 1626.849071][ T1959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.890262][ T2448] nbd: must specify at least one socket [ 1626.924122][T31311] Bluetooth: hci4: command tx timeout [ 1626.976889][ T1959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.105438][ T1959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.183505][ T1959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.432840][ T1959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1627.447718][ T1959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1627.465756][ T1959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1627.515735][ T1959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1627.666326][ T1959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1627.700344][ T1959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1627.713213][T23847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.720414][T23847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.783250][T23847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.790456][T23847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.917663][ T1959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1628.449732][ T1959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.598558][ T1959] veth0_vlan: entered promiscuous mode [ 1628.622431][ T1959] veth1_vlan: entered promiscuous mode [ 1628.708481][ T1959] veth0_macvtap: entered promiscuous mode [ 1628.745550][ T1959] veth1_macvtap: entered promiscuous mode [ 1628.797960][ T1959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1628.827502][ T1959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1628.856088][ T1959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.874039][ T1959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.882781][ T1959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.924409][ T1959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.993942][T31311] Bluetooth: hci4: command tx timeout [ 1629.152695][T23835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.182403][T23835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.233211][T23846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.259050][T23846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.176297][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1630.185862][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1630.196503][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1630.261555][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1630.303832][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1630.311221][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1630.812177][ T2749] chnl_net:caif_netlink_parms(): no params data found [ 1631.073871][ T5837] Bluetooth: hci4: command tx timeout [ 1631.216541][ T2749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.246370][ T2749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.253603][ T2749] bridge_slave_0: entered allmulticast mode [ 1631.284847][ T2749] bridge_slave_0: entered promiscuous mode [ 1631.305429][ T2749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.312636][ T2749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.334131][ T2749] bridge_slave_1: entered allmulticast mode [ 1631.341359][ T2749] bridge_slave_1: entered promiscuous mode [ 1631.447524][ T2749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.477656][ T2749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.654449][ T2749] team0: Port device team_slave_0 added [ 1631.676781][ T2749] team0: Port device team_slave_1 added [ 1631.944458][ T2749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.951575][ T2749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.978741][ T2749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.003156][ T2749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.016381][ T2749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1632.047570][ T2749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.131600][ T2749] hsr_slave_0: entered promiscuous mode [ 1632.156053][ T2749] hsr_slave_1: entered promiscuous mode [ 1632.164961][ T2749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1632.194253][ T2749] Cannot create hsr debugfs directory [ 1632.353824][ T5837] Bluetooth: hci5: command tx timeout [ 1632.488352][ T2749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.596975][ T2749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.722222][ T2749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.807492][ T2749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.107724][ T2749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1633.121893][ T2749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1633.146782][ T2749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1633.167785][ T2749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1633.327673][ T2749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.398414][ T2749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.419484][T23847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.426649][T23847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.451655][ T3128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.458877][ T3128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.781850][ T2749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1633.892896][ T2749] veth0_vlan: entered promiscuous mode [ 1633.909884][ T2749] veth1_vlan: entered promiscuous mode [ 1633.950469][ T2749] veth0_macvtap: entered promiscuous mode [ 1633.962254][ T2749] veth1_macvtap: entered promiscuous mode [ 1633.987202][ T2749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1634.000650][ T2749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.013752][ T2749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1634.030409][ T2749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.041781][ T2749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.087063][ T2749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.151372][ T2749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.203867][ T2749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.238844][ T2749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.298904][ T2749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.434139][ T5837] Bluetooth: hci5: command tx timeout [ 1634.739693][T23843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.785637][T23843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.850501][T23843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.877621][T23843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.914950][ T3354] nbd: must specify at least one socket [ 1635.075800][ T3358] serio: Serial port ptm0 [ 1635.646091][T31311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1635.673769][T31311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1635.681719][T31311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1635.689764][T31311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1635.698314][T31311] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1635.705936][T31311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1635.886889][ T3373] chnl_net:caif_netlink_parms(): no params data found [ 1636.513886][ T5837] Bluetooth: hci5: command tx timeout [ 1636.797079][ T3373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.814200][ T3373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1636.827890][ T3373] bridge_slave_0: entered allmulticast mode [ 1636.844937][ T3373] bridge_slave_0: entered promiscuous mode [ 1636.858618][ T3373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.875238][ T3373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.886516][ T3373] bridge_slave_1: entered allmulticast mode [ 1636.904183][ T3373] bridge_slave_1: entered promiscuous mode [ 1637.041976][ T3373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.073300][ T3373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.245901][ T3373] team0: Port device team_slave_0 added [ 1637.255175][ T3373] team0: Port device team_slave_1 added [ 1637.296001][ T3373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.305004][ T3373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1637.352511][ T3373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.382204][ T3373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.402389][ T3373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1637.444518][ T3394] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1637.452736][ T3373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.527904][ T3373] hsr_slave_0: entered promiscuous mode [ 1637.539254][ T3373] hsr_slave_1: entered promiscuous mode [ 1637.555404][ T3373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1637.563109][ T3373] Cannot create hsr debugfs directory [ 1637.755324][ T3373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.793859][ T5837] Bluetooth: hci2: command tx timeout [ 1637.800081][ T3394] [U] 6{YD [ 1637.934655][ T3394] [U] ~XWÃ) 2Zr磯{ oIZEͰ `\ůZQ b허kmlX ǀꕉ% ]4ۗJ*=[*e6E;FCKƈ}uY' ArImyܸ-TK/V`,vƕJq^2(ͣ 6(X>7|w!Q [ 1637.976787][ T3394] [U] @%J֝sŲ(Ŀrw? ;̧jU ڵSь=D 0M5Ҽ?C [ 1637.997178][ T3394] [U] jZ{9-=\ImS&bǧ~ `w (Q]x(!$L [ 1638.007871][ T3394] [U] lz~i+"UvWsWnф[ke x? ں+mu^ ܛEZ]Rݰ4msA~z [ 1638.019187][ T3394] [U] kc [ 1638.022540][ T3394] [U] g_N:NQŊyEtxh{$}10/T,}th(  W~|K [ 1638.034712][ T3394] [U] lmEf*Ca6[~ [ 1638.040820][ T3394] [U] X{kUFpKܗZ_?fUl&uD=5o7A_h-BvHxDs(M %[/1ҩ4 x4M2KW%+٬e`m~bQIRMcSe9* |#.+<@wKB 1}ם0@"mZ{¡HXOV=hsvܜ'Qrc0ݦ᪊{}aR9-u yITI-Y'}jy b9KKVђlZ_8D`w5GT5iP&09fPzw=^CH!L 'x6"9Z. [ 1638.076303][ T3394] [U] %(ǐ|.e9| [ 1638.082200][ T3394] [U] ag*YٌȽlҍP)+Q~G%nuxUM&t [ 1638.088969][ T3394] [U] ŅL{NjKez_td!BDZr0@c\#y:"ǡcgeM-N[$b&7ЉNaH1H@-4q[庑CLjvx.s|X:M5^ĜcWZ\*\mgLnoъ [ 1638.106187][ T3394] [U]  = FnN?HՍ`o u!9YO& [ 1638.111871][ T3394] [U] \]\ [ 1638.115960][ T3394] [U] 9tإz8^h#&DjѲLP Α:e& +JEs [ 1638.121112][ T3373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.124043][ T3394] [U] @}5 \1h&mEbbAn9`U^>Y5X++Aom2kjagxfNa [ 1638.333448][ T3394] [U] h$y}dB[thg? ,!:(C~U0Gܮ [ 1638.339858][ T3394] [U] X${hg$5[j [ 1638.374813][ T3373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.396711][ T3394] [U] 9Ckի/ _5AMw7 YKu6tC]j8)2f 2ER~ ܡB [ 1638.441126][ T3394] [U] n^covt(FᓘB,F [ 1638.594161][ T5837] Bluetooth: hci5: command tx timeout [ 1638.822195][ T3373] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1638.868595][ T3373] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1638.896523][ T3373] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1639.007276][ T3373] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1639.197721][ T3373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.245939][ T3373] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.259349][T23835] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.266501][T23835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.304595][T23835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.311753][T23835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.420299][ T3419] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1639.540200][ T3419] [U] #MB"/I(GcmW,=msf:AZf=k--;&tزYU VsʖT>4~v)5X0mUj뤳&(Š >뿾c1n9IWh@ꈕ2#[|TЙvJ:jUq2Α=$܆*À4|PR\"#E|K"@M2hmB㼾Guڠu1ecSSdFz [ 1639.566489][ T3419] [U] [ 1639.569254][ T3419] [U] [ 1639.572005][ T3419] [U] [ 1639.574767][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.606587][ T3419] [U] [ 1639.609369][ T3419] [U] [ 1639.612114][ T3419] [U] [ 1639.614875][ T3419] [U] [ 1639.618161][ T3419] [U] [ 1639.621025][ T3419] [U] [ 1639.623790][ T3419] [U] [ 1639.626537][ T3419] [U] [ 1639.629619][ T3419] [U] [ 1639.632375][ T3419] [U] [ 1639.635122][ T3419] [U] [ 1639.637880][ T3419] [U] [ 1639.641352][ T3419] [U] [ 1639.644119][ T3419] [U] [ 1639.646870][ T3419] [U] [ 1639.649607][ T3419] [U] [ 1639.880035][ T5837] Bluetooth: hci2: command tx timeout [ 1639.952936][ T3373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1639.989560][ T3373] veth0_vlan: entered promiscuous mode [ 1640.002696][ T3373] veth1_vlan: entered promiscuous mode [ 1640.058121][ T3373] veth0_macvtap: entered promiscuous mode [ 1640.185840][ T3373] veth1_macvtap: entered promiscuous mode [ 1640.210126][ T3373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.251114][ T3373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.283703][ T3373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.318589][ T3373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.345160][ T3373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1640.355668][ T3373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.366277][ T3373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.376162][ T3373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.386763][ T3373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.397809][ T3373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1640.408423][ T3373] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.417224][ T3373] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.426020][ T3373] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.434792][ T3373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.652482][T23847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.669395][T23847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.688388][ T3556] FAULT_INJECTION: forcing a failure. [ 1640.688388][ T3556] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.702149][ T3556] CPU: 1 UID: 0 PID: 3556 Comm: syz.1.5019 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1640.712880][ T3556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1640.722971][ T3556] Call Trace: [ 1640.726280][ T3556] [ 1640.729245][ T3556] dump_stack_lvl+0x16c/0x1f0 [ 1640.733978][ T3556] should_fail_ex+0x497/0x5b0 [ 1640.738719][ T3556] ? fs_reclaim_acquire+0xae/0x150 [ 1640.743894][ T3556] should_failslab+0xc2/0x120 [ 1640.748636][ T3556] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1640.754070][ T3556] ? security_file_alloc+0x34/0x2b0 [ 1640.759327][ T3556] security_file_alloc+0x34/0x2b0 [ 1640.764466][ T3556] init_file+0x93/0x480 [ 1640.768664][ T3556] alloc_empty_file+0x91/0x1e0 [ 1640.773482][ T3556] path_openat+0xe1/0x2d60 [ 1640.777949][ T3556] ? hlock_class+0x4e/0x130 [ 1640.782492][ T3556] ? __lock_acquire+0x15a9/0x3c40 [ 1640.787553][ T3556] ? __pfx_path_openat+0x10/0x10 [ 1640.792517][ T3556] ? __pfx___lock_acquire+0x10/0x10 [ 1640.797738][ T3556] ? lock_acquire.part.0+0x11b/0x380 [ 1640.803050][ T3556] ? find_held_lock+0x2d/0x110 [ 1640.807935][ T3556] do_filp_open+0x20c/0x470 [ 1640.812466][ T3556] ? __pfx_do_filp_open+0x10/0x10 [ 1640.817553][ T3556] ? find_held_lock+0x2d/0x110 [ 1640.822367][ T3556] ? alloc_fd+0x41f/0x760 [ 1640.826730][ T3556] do_sys_openat2+0x17a/0x1e0 [ 1640.831453][ T3556] ? __pfx_do_sys_openat2+0x10/0x10 [ 1640.836701][ T3556] ? __fget_files+0x206/0x3a0 [ 1640.841424][ T3556] __x64_sys_openat+0x175/0x210 [ 1640.846321][ T3556] ? __pfx___x64_sys_openat+0x10/0x10 [ 1640.851723][ T3556] ? ksys_write+0x1ba/0x250 [ 1640.856265][ T3556] do_syscall_64+0xcd/0x250 [ 1640.860814][ T3556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.866743][ T3556] RIP: 0033:0x7ffa3d385d29 [ 1640.871169][ T3556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1640.890800][ T3556] RSP: 002b:00007ffa3e175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1640.899245][ T3556] RAX: ffffffffffffffda RBX: 00007ffa3d575fa0 RCX: 00007ffa3d385d29 [ 1640.907242][ T3556] RDX: 0000000000020401 RSI: 0000000020001080 RDI: ffffffffffffff9c [ 1640.915256][ T3556] RBP: 00007ffa3e175090 R08: 0000000000000000 R09: 0000000000000000 [ 1640.923279][ T3556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1640.931275][ T3556] R13: 0000000000000001 R14: 00007ffa3d575fa0 R15: 00007ffed30d87f8 [ 1640.939286][ T3556] [ 1640.967655][ T3128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.980425][ T3128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.731437][ T3558] snd_aloop snd_aloop.0: control 0:1:8:1Յ:-4095 is already present [ 1641.839078][T31311] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1641.850684][T31311] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1641.853497][ T3564] [U] [ 1641.858753][T31311] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1641.860507][ T3564] [U] [ 1641.868879][T31311] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1641.870136][ T3564] [U] [ 1641.877786][T31311] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1641.879733][ T3564] [U] [ 1641.887508][T31311] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1641.953877][T31311] Bluetooth: hci2: command tx timeout [ 1642.104190][ T3564] [U] [ 1642.107062][ T3564] [U] [ 1642.109849][ T3564] [U] [ 1642.112603][ T3564] [U] [ 1642.190097][ T3564] [U] [ 1642.192898][ T3564] [U] [ 1642.195662][ T3564] [U] [ 1642.198424][ T3564] [U] [ 1642.259273][ T3564] [U] [ 1642.262153][ T3564] [U] [ 1642.264907][ T3564] [U] [ 1642.267651][ T3564] [U] [ 1642.512942][ T3564] [U] [ 1642.515689][ T3564] [U] +\Ko> [ 1642.576781][ T3564] [U] Kz8ӓ@|s=| aN9j rb 6fc߳j逾l75! U/G {^ʌuλwM # [ 1642.612598][ T3574] chnl_net:caif_netlink_parms(): no params data found [ 1642.633807][ T3564] [U] ao u_tW*|"wW:dԡԩ,ms([ASFY;)h^T;seOS>i [xrn3XҚSF#÷ [ 1642.711599][ T3564] [U] z[b x`;{D_s~P [ 1642.722128][ T3564] [U] Aѧ߲r [ 1642.726505][ T3564] [U] AT8 [ 1642.729834][ T3564] [U] sZ#U5z&! [ 1642.811243][ T3564] [U] cgki6S^%S ZJ 4_԰"4frf :5~`MfwĊRһM2np>M`2 [ 1642.849497][ T3589] FAULT_INJECTION: forcing a failure. [ 1642.849497][ T3589] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.868294][ T3564] [U] D/M·Fԛ:TESUd@3!xɥ:X:ٟ4.4G96- .lk{a Eخ ,i [ 1642.883869][ T3589] CPU: 0 UID: 0 PID: 3589 Comm: syz.1.5026 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1642.894620][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1642.904727][ T3589] Call Trace: [ 1642.908043][ T3589] [ 1642.911013][ T3589] dump_stack_lvl+0x16c/0x1f0 [ 1642.915741][ T3589] should_fail_ex+0x497/0x5b0 [ 1642.920471][ T3589] ? fs_reclaim_acquire+0xae/0x150 [ 1642.925642][ T3589] should_failslab+0xc2/0x120 [ 1642.930384][ T3589] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 1642.936170][ T3589] ? sock_alloc_inode+0x25/0x1c0 [ 1642.941153][ T3589] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1642.944047][ T3564] [U] Oq 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1643.028744][ T3564] [U] ZhqnD#*l!*4%]vޫjۅⳇJ)Tqꟲ{ak [ 1643.042049][ T3589] RSP: 002b:00007ffa3e154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1643.057367][ T3589] RAX: ffffffffffffffda RBX: 00007ffa3d576080 RCX: 00007ffa3d385d29 [ 1643.065379][ T3589] RDX: 000000000000003a RSI: 0000000000000002 RDI: 000000000000000a [ 1643.073390][ T3589] RBP: 00007ffa3e154090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.081401][ T3589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.089414][ T3589] R13: 0000000000000000 R14: 00007ffa3d576080 R15: 00007ffed30d87f8 [ 1643.097460][ T3589] [ 1643.100530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.163717][ T3589] socket: no more sockets [ 1643.174137][ T3564] [U] O~9 ɭDzC\KA"ޅ5"C[%#%]GOkQúR6hBM!ˀeFqt*$s#wttVG$>viM"XGin#S*E"demH23IƱA\ -6B"=x݁5 XpD/y1$"Ry=\ n`(a ^,g=L4(~W9ݣG\ͼao/ZNT6l 3C@*o-Egݐiȃ8X/W [ 1643.206633][ T3564] [U] / a+⠬8!_)oޯ'>AdpXM~@4.a]23ؔxʀ=g] ;߇L(:쏅x/j4nF0I7#D׮oEgXL#2E$jyb[yY*-{2x ػV=S{uTJȼ#ZNLx5XqMR?˄6D Egy3]C8ΗAvg+ [ 1643.252287][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.303884][ T3564] [U] eb@XvZe6%'*䠴|:w`n!lWTL窘BN(T],$ܝA9_[)w [ 1643.321758][ T3564] [U] TP3 [ 1643.331775][ T3564] [U] tz& [ 1643.802812][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.835223][ T3574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.842429][ T3574] bridge_slave_0: entered allmulticast mode [ 1643.849587][ T3574] bridge_slave_0: entered promiscuous mode [ 1643.954067][T31311] Bluetooth: hci3: command tx timeout [ 1643.983198][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.003803][ T3574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.021758][ T3574] bridge_slave_1: entered allmulticast mode [ 1644.033916][T31311] Bluetooth: hci2: command tx timeout [ 1644.047015][ T3574] bridge_slave_1: entered promiscuous mode [ 1644.154700][ T3574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.172646][ T3574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.238943][ T3574] team0: Port device team_slave_0 added [ 1644.263094][ T3574] team0: Port device team_slave_1 added [ 1644.428704][ T3574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.435876][ T3574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.492598][ T3574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.131744][T23846] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.274510][ T3574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.281499][ T3574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.307667][ T3574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.425114][T23846] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.628057][ T3574] hsr_slave_0: entered promiscuous mode [ 1645.647713][ T3574] hsr_slave_1: entered promiscuous mode [ 1645.662515][ T3574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.670602][ T3574] Cannot create hsr debugfs directory [ 1645.810493][ T3636] Invalid ELF header magic: != ELF [ 1645.832190][T23846] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.855411][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5039'. [ 1645.871118][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5039'. [ 1645.964140][T23846] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.038324][T31311] Bluetooth: hci3: command tx timeout [ 1646.531627][T23846] veth1_to_hsr: left allmulticast mode [ 1646.556647][T23846] veth1_to_hsr: left promiscuous mode [ 1646.579260][T23846] bridge0: port 3(veth1_to_hsr) entered disabled state [ 1646.616032][T23846] bridge_slave_1: left allmulticast mode [ 1646.639137][T23846] bridge_slave_1: left promiscuous mode [ 1646.657650][T23846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.694443][T23846] bridge_slave_0: left allmulticast mode [ 1646.704065][T23846] bridge_slave_0: left promiscuous mode [ 1646.724864][T23846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.689593][T23846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.708962][T23846] bond_slave_0: left allmulticast mode [ 1647.728167][T23846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.738957][T23846] bond_slave_1: left allmulticast mode [ 1647.752198][T23846] bond0 (unregistering): Released all slaves [ 1648.153821][T31311] Bluetooth: hci3: command tx timeout [ 1648.452152][T23846] hsr_slave_0: left promiscuous mode [ 1648.459687][T23846] hsr_slave_1: left promiscuous mode [ 1648.498128][T23846] veth1_macvtap: left promiscuous mode [ 1648.507670][T23846] veth0_macvtap: left promiscuous mode [ 1648.516111][T23846] veth1_vlan: left promiscuous mode [ 1648.521646][T23846] veth0_vlan: left promiscuous mode [ 1649.521662][T23846] team0 (unregistering): Port device team_slave_1 removed [ 1649.682452][T23846] team0 (unregistering): Port device team_slave_0 removed [ 1649.900625][ T3680] kexec: Could not allocate control_code_buffer [ 1650.193969][T31311] Bluetooth: hci3: command tx timeout [ 1650.318382][ T3698] ================================================================== [ 1650.326481][ T3698] BUG: KASAN: slab-use-after-free in force_wakeup_read+0x136/0x150 [ 1650.334390][ T3698] Read of size 1 at addr ffff888143383a31 by task syz.0.5052/3698 [ 1650.342199][ T3698] [ 1650.344523][ T3698] CPU: 1 UID: 0 PID: 3698 Comm: syz.0.5052 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1650.355201][ T3698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1650.365265][ T3698] Call Trace: [ 1650.368558][ T3698] [ 1650.371500][ T3698] dump_stack_lvl+0x116/0x1f0 [ 1650.376208][ T3698] print_report+0xc3/0x620 [ 1650.380653][ T3698] ? __virt_addr_valid+0x5e/0x590 [ 1650.385709][ T3698] ? __phys_addr+0xc6/0x150 [ 1650.390238][ T3698] kasan_report+0xd9/0x110 [ 1650.394689][ T3698] ? force_wakeup_read+0x136/0x150 [ 1650.399836][ T3698] ? force_wakeup_read+0x136/0x150 [ 1650.404976][ T3698] force_wakeup_read+0x136/0x150 [ 1650.409941][ T3698] ? __pfx_force_wakeup_read+0x10/0x10 [ 1650.415428][ T3698] full_proxy_read+0xfd/0x1b0 [ 1650.420133][ T3698] ? __pfx_full_proxy_read+0x10/0x10 [ 1650.425453][ T3698] vfs_read+0x1df/0xbe0 [ 1650.429634][ T3698] ? __fget_files+0x1fc/0x3a0 [ 1650.434336][ T3698] ? __pfx___mutex_lock+0x10/0x10 [ 1650.439406][ T3698] ? __pfx_vfs_read+0x10/0x10 [ 1650.444125][ T3698] ? __fget_files+0x206/0x3a0 [ 1650.448842][ T3698] ksys_read+0x12b/0x250 [ 1650.453114][ T3698] ? __pfx_ksys_read+0x10/0x10 [ 1650.457912][ T3698] do_syscall_64+0xcd/0x250 [ 1650.462455][ T3698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.468394][ T3698] RIP: 0033:0x7f187d585d29 [ 1650.472817][ T3698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.492440][ T3698] RSP: 002b:00007f187e3f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1650.500875][ T3698] RAX: ffffffffffffffda RBX: 00007f187d775fa0 RCX: 00007f187d585d29 [ 1650.508864][ T3698] RDX: 0000000000000026 RSI: 0000000020000040 RDI: 0000000000000008 [ 1650.516854][ T3698] RBP: 00007f187d601b08 R08: 0000000000000000 R09: 0000000000000000 [ 1650.524838][ T3698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1650.532833][ T3698] R13: 0000000000000000 R14: 00007f187d775fa0 R15: 00007ffef890bbe8 [ 1650.540829][ T3698] [ 1650.543863][ T3698] [ 1650.546212][ T3698] Allocated by task 3561: [ 1650.550545][ T3698] kasan_save_stack+0x33/0x60 [ 1650.555255][ T3698] kasan_save_track+0x14/0x30 [ 1650.559955][ T3698] __kasan_kmalloc+0xaa/0xb0 [ 1650.564568][ T3698] __kmalloc_noprof+0x21a/0x4f0 [ 1650.569447][ T3698] ieee802_11_parse_elems_full+0xe6/0x1630 [ 1650.575271][ T3698] ieee80211_ibss_rx_queued_mgmt+0xc54/0x3040 [ 1650.581357][ T3698] ieee80211_iface_work+0xc0b/0xf00 [ 1650.586576][ T3698] cfg80211_wiphy_work+0x3de/0x560 [ 1650.591708][ T3698] process_one_work+0x958/0x1b30 [ 1650.596653][ T3698] worker_thread+0x6c8/0xf00 [ 1650.601259][ T3698] kthread+0x2c1/0x3a0 [ 1650.605347][ T3698] ret_from_fork+0x45/0x80 [ 1650.609774][ T3698] ret_from_fork_asm+0x1a/0x30 [ 1650.614585][ T3698] [ 1650.616916][ T3698] Freed by task 3561: [ 1650.620898][ T3698] kasan_save_stack+0x33/0x60 [ 1650.625613][ T3698] kasan_save_track+0x14/0x30 [ 1650.630323][ T3698] kasan_save_free_info+0x3b/0x60 [ 1650.635377][ T3698] __kasan_slab_free+0x51/0x70 [ 1650.640160][ T3698] kfree+0x14f/0x4b0 [ 1650.644075][ T3698] ieee80211_ibss_rx_queued_mgmt+0x1ae3/0x3040 [ 1650.650256][ T3698] ieee80211_iface_work+0xc0b/0xf00 [ 1650.655495][ T3698] cfg80211_wiphy_work+0x3de/0x560 [ 1650.660628][ T3698] process_one_work+0x958/0x1b30 [ 1650.665578][ T3698] worker_thread+0x6c8/0xf00 [ 1650.670176][ T3698] kthread+0x2c1/0x3a0 [ 1650.674270][ T3698] ret_from_fork+0x45/0x80 [ 1650.678702][ T3698] ret_from_fork_asm+0x1a/0x30 [ 1650.683499][ T3698] [ 1650.685825][ T3698] The buggy address belongs to the object at ffff888143383800 [ 1650.685825][ T3698] which belongs to the cache kmalloc-1k of size 1024 [ 1650.699894][ T3698] The buggy address is located 561 bytes inside of [ 1650.699894][ T3698] freed 1024-byte region [ffff888143383800, ffff888143383c00) [ 1650.713797][ T3698] [ 1650.716122][ T3698] The buggy address belongs to the physical page: [ 1650.722542][ T3698] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143380 [ 1650.731405][ T3698] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1650.739919][ T3698] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 1650.747566][ T3698] page_type: f5(slab) [ 1650.751568][ T3698] raw: 057ff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 1650.760264][ T3698] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1650.768867][ T3698] head: 057ff00000000040 ffff88801ac41dc0 dead000000000100 dead000000000122 [ 1650.777570][ T3698] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 1650.786253][ T3698] head: 057ff00000000003 ffffea00050ce001 ffffffffffffffff 0000000000000000 [ 1650.794937][ T3698] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1650.803612][ T3698] page dumped because: kasan: bad access detected [ 1650.810034][ T3698] page_owner tracks the page as allocated [ 1650.815750][ T3698] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12377026467, free_ts 0 [ 1650.835471][ T3698] post_alloc_hook+0x2d1/0x350 [ 1650.840257][ T3698] get_page_from_freelist+0xfce/0x2f80 [ 1650.845743][ T3698] __alloc_pages_noprof+0x223/0x25b0 [ 1650.851046][ T3698] alloc_pages_mpol_noprof+0x2c8/0x620 [ 1650.856519][ T3698] new_slab+0x2c9/0x410 [ 1650.860707][ T3698] ___slab_alloc+0xce2/0x1650 [ 1650.865407][ T3698] __slab_alloc.constprop.0+0x56/0xb0 [ 1650.870797][ T3698] __kmalloc_cache_noprof+0xf6/0x420 [ 1650.876105][ T3698] loop_add+0xbf/0xb60 [ 1650.880199][ T3698] loop_init+0x164/0x270 [ 1650.884463][ T3698] do_one_initcall+0x128/0x630 [ 1650.889260][ T3698] kernel_init_freeable+0x58f/0x8b0 [ 1650.894494][ T3698] kernel_init+0x1c/0x2b0 [ 1650.898850][ T3698] ret_from_fork+0x45/0x80 [ 1650.903279][ T3698] ret_from_fork_asm+0x1a/0x30 [ 1650.908073][ T3698] page_owner free stack trace missing [ 1650.913446][ T3698] [ 1650.915771][ T3698] Memory state around the buggy address: [ 1650.921407][ T3698] ffff888143383900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.929569][ T3698] ffff888143383980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.937739][ T3698] >ffff888143383a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.945820][ T3698] ^ [ 1650.951462][ T3698] ffff888143383a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1650.959526][ T3698] ffff888143383b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1650.967680][ T3698] ================================================================== [ 1651.045249][ T3698] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1651.052508][ T3698] CPU: 0 UID: 0 PID: 3698 Comm: syz.0.5052 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 1651.063233][ T3698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1651.073321][ T3698] Call Trace: [ 1651.076641][ T3698] [ 1651.079598][ T3698] dump_stack_lvl+0x3d/0x1f0 [ 1651.084225][ T3698] panic+0x71d/0x800 [ 1651.088161][ T3698] ? __pfx_panic+0x10/0x10 [ 1651.092629][ T3698] ? preempt_schedule_thunk+0x1a/0x30 [ 1651.098047][ T3698] ? preempt_schedule_common+0x44/0xc0 [ 1651.103560][ T3698] check_panic_on_warn+0xab/0xb0 [ 1651.108635][ T3698] end_report+0x117/0x180 [ 1651.113014][ T3698] kasan_report+0xe9/0x110 [ 1651.117551][ T3698] ? force_wakeup_read+0x136/0x150 [ 1651.122696][ T3698] ? force_wakeup_read+0x136/0x150 [ 1651.127823][ T3698] force_wakeup_read+0x136/0x150 [ 1651.132775][ T3698] ? __pfx_force_wakeup_read+0x10/0x10 [ 1651.138250][ T3698] full_proxy_read+0xfd/0x1b0 [ 1651.142950][ T3698] ? __pfx_full_proxy_read+0x10/0x10 [ 1651.148253][ T3698] vfs_read+0x1df/0xbe0 [ 1651.152427][ T3698] ? __fget_files+0x1fc/0x3a0 [ 1651.157138][ T3698] ? __pfx___mutex_lock+0x10/0x10 [ 1651.162282][ T3698] ? __pfx_vfs_read+0x10/0x10 [ 1651.166982][ T3698] ? __fget_files+0x206/0x3a0 [ 1651.171684][ T3698] ksys_read+0x12b/0x250 [ 1651.175941][ T3698] ? __pfx_ksys_read+0x10/0x10 [ 1651.180727][ T3698] do_syscall_64+0xcd/0x250 [ 1651.185262][ T3698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1651.191185][ T3698] RIP: 0033:0x7f187d585d29 [ 1651.195615][ T3698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1651.215253][ T3698] RSP: 002b:00007f187e3f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1651.223694][ T3698] RAX: ffffffffffffffda RBX: 00007f187d775fa0 RCX: 00007f187d585d29 [ 1651.231675][ T3698] RDX: 0000000000000026 RSI: 0000000020000040 RDI: 0000000000000008 [ 1651.239656][ T3698] RBP: 00007f187d601b08 R08: 0000000000000000 R09: 0000000000000000 [ 1651.247631][ T3698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1651.255607][ T3698] R13: 0000000000000000 R14: 00007f187d775fa0 R15: 00007ffef890bbe8 [ 1651.263596][ T3698] [ 1651.266927][ T3698] Kernel Offset: disabled [ 1651.271260][ T3698] Rebooting in 86400 seconds..