last executing test programs: 4.306967774s ago: executing program 1 (id=11360): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) 4.306484981s ago: executing program 2 (id=11361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) (async) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000580), 0x20, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x101102, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000002c0)={0xff, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000340)={0x9, r5}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') open(0x0, 0x0, 0x0) (async) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file1\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) io_uring_setup(0x177f, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 4.261840071s ago: executing program 1 (id=11362): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f00000003c0)=""/213, 0x2f, 0xd5, 0x8, 0x2, 0x10000, @value}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) 4.185891037s ago: executing program 2 (id=11363): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x24) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$LOOP_SET_STATUS64(r2, 0x401870cb, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004a40)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) capset(&(0x7f00000000c0)={0x20071026}, 0x0) mq_open(&(0x7f0000000080)='_\xa37.0m0.13i\x83\xb5+@\xa5f5\xf5\xba\x7f\x8b\x0fh\x00', 0x40, 0x0, &(0x7f0000000480)={0x20000, 0x4, 0x23cfbd70}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1be4}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) 3.989147838s ago: executing program 1 (id=11364): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x24) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$LOOP_SET_STATUS64(r2, 0x401870cb, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004a40)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) capset(&(0x7f00000000c0)={0x20071026}, 0x0) mq_open(&(0x7f0000000080)='_\xa37.0m0.13i\x83\xb5+@\xa5f5\xf5\xba\x7f\x8b\x0fh\x00', 0x40, 0x0, &(0x7f0000000480)={0x20000, 0x4, 0x23cfbd70}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1be4}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1) 3.738461223s ago: executing program 2 (id=11365): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff0a022ecaa5"], 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x1, 0x8}, {0x4, 0x432a, 0x1, 0xe8d}}}}, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000003c0)={0xc, @sliced={0x5, [0xffff, 0xc4ea, 0x7, 0x4, 0xb, 0xa, 0x1, 0xd, 0x5, 0x40, 0xaa43, 0x8404, 0x5, 0x7, 0x2, 0x1, 0x9, 0x7, 0xae, 0x9, 0x4, 0xd000, 0x1, 0x9, 0x4, 0x5, 0x7, 0x8, 0x3, 0x6, 0x8, 0x8, 0x999a, 0x1, 0x8, 0x26, 0x6, 0x7, 0x99a, 0x3ff, 0x4, 0x0, 0x2000, 0x10, 0x5, 0x9, 0x4, 0x4], 0x2}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x4) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) socket$kcm(0x10, 0x3, 0x10) 3.393941262s ago: executing program 1 (id=11368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_cache\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000200)={0x13, 0x97, 0xfa00, {&(0x7f0000000680), r5}}, 0x18) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xc, 0xa031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) rt_tgsigqueueinfo(0x0, r6, 0x23, &(0x7f0000000240)={0x21, 0x7fffffff}) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000805000/0x3000)=nil, 0x3000, 0x14) 3.242183937s ago: executing program 0 (id=11371): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) preadv(r0, &(0x7f0000000040)=[{}], 0x1, 0x5, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2}}}, 0x50}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2}}}, 0x50}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b"], 0x20}}, 0x4c) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) 3.185298208s ago: executing program 0 (id=11372): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 3.128389444s ago: executing program 0 (id=11373): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x24) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$LOOP_SET_STATUS64(r2, 0x401870cb, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004a40)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) capset(&(0x7f00000000c0)={0x20071026}, 0x0) mq_open(&(0x7f0000000080)='_\xa37.0m0.13i\x83\xb5+@\xa5f5\xf5\xba\x7f\x8b\x0fh\x00', 0x40, 0x0, &(0x7f0000000480)={0x20000, 0x4, 0x23cfbd70}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1be4}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) 2.909805602s ago: executing program 2 (id=11374): ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (fail_nth: 12) 2.671940138s ago: executing program 2 (id=11375): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.592566172s ago: executing program 1 (id=11377): syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x80000800, &(0x7f0000000140)="ff02f8e1b43bde39192c5423b22ce3007fca03bd7eeaaca502abc9a833e0b99489c5872ac6fad4e533c67e7c812b21540a0bc0b50a88525e41e193cc69b7af1a0b4ead6719889e94", 0x48, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)="655943445b9c5bf29acfa416d206b0f514a603c5fbe9aecc004fed89183e238c10b2dd0df95f4a9f1e704ec0007fb718fe52") ptrace(0x4208, r1) r2 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, r0}) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x606) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xc000000000}, 0x0) sched_setaffinity(0x0, 0x3c, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffff7f6e9ee39dfc21aac75eb1ecdc61323f737a1f6f98f60ea77b5a09aa1267fc1d6d6fa1477f85b1a28f187b5a1aa79461e82692b715609f08cd41e8b99dd86c9aebd49e4a7a72e3b1cdafc5e9c761f940128d730a8e7065169a44e943833a19f0248b8c0247882c7ae7119cd3246688cad9cd824896c07109c37d22fcbb6f9d0a990064623214d3e4b87780688191f39493d6248b2f8d34558b2d10bb3e8e70b7a082a297bd4989c0b20154b0e25421e4e6bf1120ec5f0d99ec8e8ac8788423513cd23057c0", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r6, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3e}) ioctl$UI_DEV_CREATE(r7, 0x5501) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 2.3668549s ago: executing program 0 (id=11379): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) 2.309172251s ago: executing program 0 (id=11380): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.252393276s ago: executing program 0 (id=11382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$vicodec1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000500)={0x3, 0x1, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000"], 0x125) lseek(0xffffffffffffffff, 0xffffff22, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x8008550e, &(0x7f0000000040)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x3, 0x10000040, 0x1, 0x9, 0x2, 0x4, 0x0, 0x0, 0xff}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, &(0x7f0000000280)=""/239, 0xef) write$char_usb(r8, &(0x7f0000000240), 0x0) read$char_usb(r8, 0x0, 0x0) syz_usb_disconnect(r7) socket$kcm(0x10, 0x2, 0x10) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000f5000003"], 0xfdef) 2.146862089s ago: executing program 3 (id=11384): syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) poll(&(0x7f0000000a80)=[{r1}, {r0}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="7d93000000000004000b00"], 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0xe, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0xa}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x100c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000010c0)={r9, 0x0, 0x0}, 0x20) 1.776152303s ago: executing program 2 (id=11385): openat$vhost_vsock(0xffffff9c, 0x0, 0x2, 0x0) openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x1, 0x8, 0x100c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="aaaaaaaaaaaa50a245d5cde0080045000028000000000002907800000000ffffffff11009078e000000200000000b74bad93b59a16c3"], 0x0) syz_emit_ethernet(0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000050a245d5cde00805030af714d82ccbfbb2a053f43a5bd1bbc5e309bd81a920d6e10c20837dddcaf898a8c8af5d0bdc84f197e86faa8355bab45c14d98f7fb4da413e5eab864212ec6d1ca38448c7501585c14d07fd1845b27786f1e49cd85653f7593e5092eabc5f0b39b734fb5fed55e1c8b7360ef5427d124885d19c3188ac22eaaf655afff998c07349125a60322d19"], 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @remote}, 0xc) userfaultfd(0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) 986.222781ms ago: executing program 3 (id=11386): mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) chdir(0x0) openat$sndseq(0xffffff9c, 0x0, 0x759100) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00020b, 0x16, 0x0, &(0x7f0000000140)="63ecbedff8b0105bb967ed8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$inet(r0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x24901a, 0x0) open(&(0x7f00000000c0)='./file1/../file0\x00', 0x6a4382, 0x2d) 833.157641ms ago: executing program 3 (id=11387): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x24) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$LOOP_SET_STATUS64(r2, 0x401870cb, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000004a40)={0x77359400}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) capset(&(0x7f00000000c0)={0x20071026}, 0x0) mq_open(&(0x7f0000000080)='_\xa37.0m0.13i\x83\xb5+@\xa5f5\xf5\xba\x7f\x8b\x0fh\x00', 0x40, 0x0, &(0x7f0000000480)={0x20000, 0x4, 0x23cfbd70}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1be4}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) 280.419127ms ago: executing program 3 (id=11388): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 214.19562ms ago: executing program 3 (id=11389): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x14000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x6002, 0x0) 1.937449ms ago: executing program 1 (id=11390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="130000001000"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000001000000ae36133a8831aa60ecb7ad86f794e79378bba5c425552f1c4dea5f460c4b2b315f80fcc4b3c244", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) munmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000007140), 0x0, 0x20000081) (async) recvmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000b000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000005d000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) (async) r5 = dup3(r3, r3, 0x80000) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000006c0)=0x1c, 0x800) (async) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) write$cgroup_type(r7, &(0x7f00000009c0), 0xd4ba0ff) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x82, 0xfffffffb}) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x8, 0x10, 0xfffffffe, 0xb5, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x67, 0x0, 0x13, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000380)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f00000003c0)={r9}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000140)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r11 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r11, 0x1, 0x4b, &(0x7f0000000000), 0x8) (async) connect$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x10, r10, 0x1, 0x5, 0x6, @local}, 0x14) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x8) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) 0s ago: executing program 3 (id=11391): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x570000, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) r1 = openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0xa0) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000100)={r1, 0xfffffffffffffffd, 0x7, 0x6}) lstat64(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) mount$cgroup(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x40040, &(0x7f0000000380)={[{@nofavordynmods}, {@favordynmods}], [{@appraise}, {@permit_directio}, {@obj_type={'obj_type', 0x3d, '!'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '/dev/cdrom\x00'}}]}) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000400)) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000440)={"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"}) chdir(&(0x7f0000000840)='./file1\x00') r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000880)=0x2, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f00000008c0)={{@hyper, 0xc6}, 0x7, 0xfff, 0x0, 0xffa}) syz_open_dev$MSR(&(0x7f0000000900), 0x7, 0x0) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008801) rename(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000ac0), 0xbc, 0x600000) io_setup(0xffff, &(0x7f0000000b00)=0x0) io_cancel(r6, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0xffff, r5, &(0x7f0000000b40)="3186afeed271592dfa9f0899e9e84340121217269ed702e689c6bb393bc1a30bb719f5fc5e907a257f5ce63fbfaa6f0dd41d51844a36593c46412e1ace9717046e78ddbf7804b3db128af383feb42db6ee0ba8a83b98014642a7af65a37dbbe4fc0c04887676f88a647c7027f7b3dd8c5185fdd53fa13401e473e6a810ea19be940c768d2ac8783707e288807699b7b45965deeb02821e5fc5c7a4d2b32ccf2f92d271f73d49c09567", 0xa9, 0x7, 0x0, 0x2, r0}, &(0x7f0000000c40)) sendto$unix(r2, &(0x7f0000000c80)="c68e21ba72810a94ea25ee471e83f19f3035fc67d41fdb9e18ed47a2445a296a2472156659bf7a0c6d7519c5e7914c3cd87a76472cbc59623d1eeafaba9bd1d0cfdff730a31e82a317a49e8e3ef938b3bca4040078937e7f643a8c2306fd6167f26bf5fa748472a363289658b4813763cdb8c2a79176fa726ffd9cddac3b323cd124d18f40a85aafd450bd2497dbed3476ace0e051e944bb16afaaede1e976f70e5048451d7ab1a6b0454d952281e666c6a4d1ee2a97324b6571", 0xba, 0x0, &(0x7f0000000d40)=@file={0x1, './file1\x00'}, 0x6e) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000dc0)={0x80000001, 0x2, 0x7}) r7 = openat$tun(0xffffff9c, &(0x7f0000000e00), 0x6000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000e40)={'veth0_to_hsr\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e80)={'wg0\x00'}) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): [ 2683.414593][T12805] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2683.417208][T12805] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2683.419146][T12805] hwsim_new_radio_nl+0xb42/0x12b0 [ 2683.420885][T12805] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2683.422660][T12805] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2683.424583][T12805] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2683.426582][T12805] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2683.428172][T12805] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2683.430042][T12805] ? bpf_lsm_capable+0x9/0x10 [ 2683.431896][T12805] ? security_capable+0x7e/0x260 [ 2683.433764][T12805] ? ns_capable+0xd7/0x110 [ 2683.435173][T12805] genl_rcv_msg+0x565/0x800 [ 2683.436538][T12805] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2683.438420][T12805] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2683.440332][T12805] netlink_rcv_skb+0x165/0x410 [ 2683.441585][T12805] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2683.442901][T12805] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2683.444295][T12805] ? down_read+0xc9/0x330 [ 2683.445654][T12805] ? __pfx_down_read+0x10/0x10 [ 2683.447440][T12805] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2683.449377][T12805] genl_rcv+0x28/0x40 [ 2683.450530][T12805] netlink_unicast+0x53c/0x7f0 [ 2683.451812][T12805] ? __pfx_netlink_unicast+0x10/0x10 [ 2683.453198][T12805] ? const_folio_flags.constprop.0+0x56/0x150 [ 2683.454769][T12805] ? __phys_addr_symbol+0x30/0x80 [ 2683.456081][T12805] ? __check_object_size+0x497/0x720 [ 2683.457477][T12805] netlink_sendmsg+0x8b8/0xd70 [ 2683.458735][T12805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2683.460153][T12805] ____sys_sendmsg+0x9ae/0xb40 [ 2683.461416][T12805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2683.462790][T12805] ? get_compat_msghdr+0x11b/0x170 [ 2683.464696][T12805] ? __pfx___lock_acquire+0x10/0x10 [ 2683.466624][T12805] ? try_to_wake_up+0x14b/0x13e0 [ 2683.468492][T12805] ___sys_sendmsg+0x135/0x1e0 [ 2683.470225][T12805] ? __pfx____sys_sendmsg+0x10/0x10 [ 2683.472156][T12805] ? find_held_lock+0x2d/0x110 [ 2683.473962][T12805] ? __fget_light+0x173/0x210 [ 2683.475708][T12805] __sys_sendmsg+0x117/0x1f0 [ 2683.477429][T12805] ? __pfx___sys_sendmsg+0x10/0x10 [ 2683.479328][T12805] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2683.480907][T12805] __do_fast_syscall_32+0x73/0x120 [ 2683.482228][T12805] do_fast_syscall_32+0x32/0x80 [ 2683.483480][T12805] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2683.485121][T12805] RIP: 0023:0xf7fc3579 [ 2683.486182][T12805] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2683.491673][T12805] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2683.494549][T12805] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000000 [ 2683.497438][T12805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2683.500059][T12805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2683.502081][T12805] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2683.504127][T12805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2683.506177][T12805] [ 2685.347161][T12839] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11236'. [ 2685.363296][T12839] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2685.377071][T12839] CPU: 0 UID: 0 PID: 12839 Comm: syz.0.11236 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2685.380592][T12839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2685.384276][T12839] Call Trace: [ 2685.385426][T12839] [ 2685.386440][T12839] dump_stack_lvl+0x16c/0x1f0 [ 2685.388106][T12839] sysfs_warn_dup+0x7f/0xa0 [ 2685.389689][T12839] sysfs_do_create_link_sd+0x124/0x140 [ 2685.391650][T12839] sysfs_create_link+0x61/0xc0 [ 2685.393427][T12839] device_add+0x62e/0x1a70 [ 2685.395081][T12839] ? __pfx_device_add+0x10/0x10 [ 2685.396813][T12839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2685.398832][T12839] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2685.400867][T12839] wiphy_register+0x20d7/0x2d30 [ 2685.402541][T12839] ? __pfx_wiphy_register+0x10/0x10 [ 2685.404285][T12839] ieee80211_register_hw+0x2959/0x3fb0 [ 2685.406048][T12839] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2685.407965][T12839] ? lockdep_init_map_type+0x16d/0x7d0 [ 2685.409715][T12839] ? rcu_is_watching+0x12/0xc0 [ 2685.411290][T12839] ? __hrtimer_init+0x106/0x2c0 [ 2685.412863][T12839] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2685.414728][T12839] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2685.416668][T12839] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2685.418788][T12839] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2685.420505][T12839] hwsim_new_radio_nl+0xb42/0x12b0 [ 2685.422175][T12839] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2685.423983][T12839] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2685.426326][T12839] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2685.428688][T12839] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2685.430456][T12839] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2685.432379][T12839] ? bpf_lsm_capable+0x9/0x10 [ 2685.433899][T12839] ? security_capable+0x7e/0x260 [ 2685.435509][T12839] ? ns_capable+0xd7/0x110 [ 2685.436961][T12839] genl_rcv_msg+0x565/0x800 [ 2685.438396][T12839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2685.440008][T12839] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2685.441930][T12839] netlink_rcv_skb+0x165/0x410 [ 2685.443580][T12839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2685.445326][T12839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2685.447183][T12839] ? down_read+0xc9/0x330 [ 2685.448718][T12839] ? __pfx_down_read+0x10/0x10 [ 2685.450383][T12839] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2685.451772][T12839] genl_rcv+0x28/0x40 [ 2685.452770][T12839] netlink_unicast+0x53c/0x7f0 [ 2685.454006][T12839] ? __pfx_netlink_unicast+0x10/0x10 [ 2685.455397][T12839] ? const_folio_flags.constprop.0+0x56/0x150 [ 2685.456995][T12839] ? __phys_addr_symbol+0x30/0x80 [ 2685.458317][T12839] ? __check_object_size+0x497/0x720 [ 2685.459703][T12839] netlink_sendmsg+0x8b8/0xd70 [ 2685.461022][T12839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2685.462401][T12839] ____sys_sendmsg+0x9ae/0xb40 [ 2685.463650][T12839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2685.465043][T12839] ? get_compat_msghdr+0x11b/0x170 [ 2685.466397][T12839] ? __pfx___lock_acquire+0x10/0x10 [ 2685.467768][T12839] ? try_to_wake_up+0x14b/0x13e0 [ 2685.469100][T12839] ___sys_sendmsg+0x135/0x1e0 [ 2685.470346][T12839] ? __pfx____sys_sendmsg+0x10/0x10 [ 2685.471773][T12839] ? find_held_lock+0x2d/0x110 [ 2685.473058][T12839] ? __fget_light+0x173/0x210 [ 2685.474299][T12839] __sys_sendmsg+0x117/0x1f0 [ 2685.475517][T12839] ? __pfx___sys_sendmsg+0x10/0x10 [ 2685.476872][T12839] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2685.478393][T12839] __do_fast_syscall_32+0x73/0x120 [ 2685.479738][T12839] do_fast_syscall_32+0x32/0x80 [ 2685.481075][T12839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2685.482732][T12839] RIP: 0023:0xf7fc3579 [ 2685.483808][T12839] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2685.488856][T12839] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2685.491243][T12839] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2685.493857][T12839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2685.495735][T12839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2685.497952][T12839] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2685.500363][T12839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2685.502266][T12839] [ 2687.299656][T30467] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2687.482931][T30467] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2687.500706][T30467] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2687.503177][T30467] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2687.506085][T30467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.547991][T30467] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2687.555475][T30467] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2687.562221][T30467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.573659][T30467] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2687.579298][T30467] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2687.588026][T30467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.602832][T30467] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2687.608855][T30467] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2687.616841][T30467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.626863][T30467] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2687.634535][T30467] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2687.637448][T30467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.660910][T30467] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2687.665169][T30467] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2687.668159][T30467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.677452][T30467] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2687.687138][T30467] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2687.697172][T30467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.711915][T30467] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2687.714857][T30467] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2687.718605][T30467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.745011][T30467] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2687.747708][T30467] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2687.758521][T30467] usb 6-1: Product: syz [ 2687.759701][T30467] usb 6-1: Manufacturer: syz [ 2687.761070][T30467] usb 6-1: SerialNumber: syz [ 2687.778711][T30467] usb 6-1: config 0 descriptor?? [ 2687.787259][T30467] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 2687.856572][T12864] binder: 12863:12864 ioctl 8933 20000100 returned -22 [ 2687.995906][T30467] usb 6-1: USB disconnect, device number 5 [ 2688.003298][T30467] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 2688.139215][T12877] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11247'. [ 2688.147192][T12877] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2688.151470][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.0.11247 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2688.154929][T12877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2688.158375][T12877] Call Trace: [ 2688.159416][T12877] [ 2688.160516][T12877] dump_stack_lvl+0x16c/0x1f0 [ 2688.162083][T12877] sysfs_warn_dup+0x7f/0xa0 [ 2688.163572][T12877] sysfs_do_create_link_sd+0x124/0x140 [ 2688.165401][T12877] sysfs_create_link+0x61/0xc0 [ 2688.166949][T12877] device_add+0x62e/0x1a70 [ 2688.168626][T12877] ? __pfx_device_add+0x10/0x10 [ 2688.170141][T12877] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2688.172195][T12877] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2688.174153][T12877] wiphy_register+0x20d7/0x2d30 [ 2688.175975][T12877] ? __pfx_wiphy_register+0x10/0x10 [ 2688.177734][T12877] ieee80211_register_hw+0x2959/0x3fb0 [ 2688.179541][T12877] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2688.181646][T12877] ? lockdep_init_map_type+0x16d/0x7d0 [ 2688.183599][T12877] ? rcu_is_watching+0x12/0xc0 [ 2688.185342][T12877] ? __hrtimer_init+0x106/0x2c0 [ 2688.187080][T12877] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2688.189192][T12877] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2688.191410][T12877] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2688.193811][T12877] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2688.195754][T12877] hwsim_new_radio_nl+0xb42/0x12b0 [ 2688.197632][T12877] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2688.199676][T12877] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2688.202329][T12877] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2688.204987][T12877] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2688.206908][T12877] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2688.209127][T12877] ? bpf_lsm_capable+0x9/0x10 [ 2688.210840][T12877] ? security_capable+0x7e/0x260 [ 2688.212296][T12877] ? ns_capable+0xd7/0x110 [ 2688.213932][T12877] genl_rcv_msg+0x565/0x800 [ 2688.215342][T12877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2688.217038][T12877] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2688.218488][T12877] netlink_rcv_skb+0x165/0x410 [ 2688.219956][T12877] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2688.221708][T12877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2688.223321][T12877] ? down_read+0xc9/0x330 [ 2688.224901][T12877] ? __pfx_down_read+0x10/0x10 [ 2688.226349][T12877] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2688.227730][T12877] genl_rcv+0x28/0x40 [ 2688.228811][T12877] netlink_unicast+0x53c/0x7f0 [ 2688.230058][T12877] ? __pfx_netlink_unicast+0x10/0x10 [ 2688.231414][T12877] ? const_folio_flags.constprop.0+0x56/0x150 [ 2688.233424][T12877] ? __phys_addr_symbol+0x30/0x80 [ 2688.234992][T12877] ? __check_object_size+0x497/0x720 [ 2688.236873][T12877] netlink_sendmsg+0x8b8/0xd70 [ 2688.238623][T12877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2688.240534][T12877] ____sys_sendmsg+0x9ae/0xb40 [ 2688.242265][T12877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2688.244194][T12877] ? get_compat_msghdr+0x11b/0x170 [ 2688.246054][T12877] ? __pfx___lock_acquire+0x10/0x10 [ 2688.247942][T12877] ? try_to_wake_up+0x14b/0x13e0 [ 2688.249743][T12877] ___sys_sendmsg+0x135/0x1e0 [ 2688.251428][T12877] ? __pfx____sys_sendmsg+0x10/0x10 [ 2688.253297][T12877] ? find_held_lock+0x2d/0x110 [ 2688.255048][T12877] ? __fget_light+0x173/0x210 [ 2688.256790][T12877] __sys_sendmsg+0x117/0x1f0 [ 2688.258477][T12877] ? __pfx___sys_sendmsg+0x10/0x10 [ 2688.260295][T12877] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2688.261716][T12877] __do_fast_syscall_32+0x73/0x120 [ 2688.263032][T12877] do_fast_syscall_32+0x32/0x80 [ 2688.264325][T12877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2688.265950][T12877] RIP: 0023:0xf7fc3579 [ 2688.267018][T12877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2688.271929][T12877] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2688.274048][T12877] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2688.276117][T12877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2688.278208][T12877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2688.280311][T12877] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2688.282353][T12877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2688.284425][T12877] [ 2689.291730][ T6537] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2689.435120][ T6537] usb 6-1: device descriptor read/64, error -71 [ 2689.720423][ T6537] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2689.874683][ T6537] usb 6-1: device descriptor read/64, error -71 [ 2689.987953][ T6537] usb usb6-port1: attempt power cycle [ 2690.370030][T12906] netlink: 'syz.2.11256': attribute type 10 has an invalid length. [ 2690.377845][ T6537] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2690.388881][T12906] team0: Port device netdevsim0 added [ 2690.417011][ T6537] usb 6-1: device descriptor read/8, error -71 [ 2690.682888][ T6537] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2690.712307][ T6537] usb 6-1: device descriptor read/8, error -71 [ 2690.747416][T12914] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11257'. [ 2690.760472][T12914] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2690.762591][T12914] CPU: 1 UID: 0 PID: 12914 Comm: syz.0.11257 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2690.765309][T12914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2690.768119][T12914] Call Trace: [ 2690.769011][T12914] [ 2690.769780][T12914] dump_stack_lvl+0x16c/0x1f0 [ 2690.771446][T12914] sysfs_warn_dup+0x7f/0xa0 [ 2690.773144][T12914] sysfs_do_create_link_sd+0x124/0x140 [ 2690.775204][T12914] sysfs_create_link+0x61/0xc0 [ 2690.777174][T12914] device_add+0x62e/0x1a70 [ 2690.779161][T12914] ? __pfx_device_add+0x10/0x10 [ 2690.780998][T12914] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2690.782844][T12914] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2690.784505][T12914] wiphy_register+0x20d7/0x2d30 [ 2690.786078][T12914] ? __pfx_wiphy_register+0x10/0x10 [ 2690.787787][T12914] ieee80211_register_hw+0x2959/0x3fb0 [ 2690.789571][T12914] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2690.791546][T12914] ? lockdep_init_map_type+0x16d/0x7d0 [ 2690.793372][T12914] ? rcu_is_watching+0x12/0xc0 [ 2690.794834][T12914] ? __hrtimer_init+0x106/0x2c0 [ 2690.796258][T12914] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2690.797960][T12914] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2690.799756][T12914] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2690.801832][T12914] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2690.803518][T12914] hwsim_new_radio_nl+0xb42/0x12b0 [ 2690.805352][T12914] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2690.807370][T12914] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2690.810195][T12914] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2690.812882][T12914] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2690.814880][T12914] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2690.817018][T12914] ? bpf_lsm_capable+0x9/0x10 [ 2690.818731][T12914] ? security_capable+0x7e/0x260 [ 2690.820536][T12914] ? ns_capable+0xd7/0x110 [ 2690.821751][T12914] genl_rcv_msg+0x565/0x800 [ 2690.823412][T12914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2690.825215][T12914] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2690.825729][ T6537] usb usb6-port1: unable to enumerate USB device [ 2690.827210][T12914] netlink_rcv_skb+0x165/0x410 [ 2690.830651][T12914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2690.832456][T12914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2690.834373][T12914] ? down_read+0xc9/0x330 [ 2690.835768][T12914] ? __pfx_down_read+0x10/0x10 [ 2690.837260][T12914] ? rcu_is_watching+0x12/0xc0 [ 2690.838946][T12914] genl_rcv+0x28/0x40 [ 2690.840400][T12914] netlink_unicast+0x53c/0x7f0 [ 2690.842099][T12914] ? __pfx_netlink_unicast+0x10/0x10 [ 2690.843976][T12914] ? const_folio_flags.constprop.0+0x56/0x150 [ 2690.846432][T12914] ? __phys_addr_symbol+0x30/0x80 [ 2690.848376][T12914] ? __check_object_size+0x497/0x720 [ 2690.850239][T12914] netlink_sendmsg+0x8b8/0xd70 [ 2690.851961][T12914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2690.853861][T12914] ____sys_sendmsg+0x9ae/0xb40 [ 2690.855197][T12914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2690.856567][T12914] ? get_compat_msghdr+0x11b/0x170 [ 2690.857909][T12914] ? __pfx___lock_acquire+0x10/0x10 [ 2690.859280][T12914] ___sys_sendmsg+0x135/0x1e0 [ 2690.860539][T12914] ? __pfx____sys_sendmsg+0x10/0x10 [ 2690.861903][T12914] ? find_held_lock+0x2d/0x110 [ 2690.863342][T12914] ? __fget_light+0x173/0x210 [ 2690.864615][T12914] __sys_sendmsg+0x117/0x1f0 [ 2690.865813][T12914] ? __pfx___sys_sendmsg+0x10/0x10 [ 2690.867143][T12914] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2690.868623][T12914] __do_fast_syscall_32+0x73/0x120 [ 2690.869947][T12914] do_fast_syscall_32+0x32/0x80 [ 2690.871190][T12914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2690.872856][T12914] RIP: 0023:0xf7fc3579 [ 2690.874011][T12914] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2690.878864][T12914] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2690.881005][T12914] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2690.883047][T12914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2690.885105][T12914] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2690.887128][T12914] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2690.889217][T12914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2690.891279][T12914] [ 2691.158997][T26665] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2691.350026][T26665] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 2691.352811][T26665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2691.355139][T26665] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2691.357910][T26665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2691.366762][T26665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2691.369563][T26665] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2691.372405][T26665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2691.383217][T26665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2691.385425][T26665] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2691.390271][T26665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2691.393053][T26665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2691.395558][T26665] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2691.406732][T26665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2691.409723][T26665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2691.412214][T26665] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2691.415083][T26665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2691.417648][T26665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2691.420096][T26665] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2691.423023][T26665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2691.426385][T26665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2691.428803][T26665] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2691.431674][T26665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2691.434167][T26665] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2691.439561][T26665] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2691.442713][T26665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2691.446308][T26665] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2691.448620][T26665] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2691.450681][T26665] usb 7-1: Product: syz [ 2691.451726][T26665] usb 7-1: Manufacturer: syz [ 2691.453129][T26665] usb 7-1: SerialNumber: syz [ 2691.455820][T26665] usb 7-1: config 0 descriptor?? [ 2691.459684][T26665] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 2691.631040][ T39] audit: type=1326 audit(1726581987.388:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.654481][ T39] audit: type=1326 audit(1726581987.388:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.664055][ T57] usb 7-1: USB disconnect, device number 3 [ 2691.666988][ T57] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 2691.671319][ T39] audit: type=1326 audit(1726581987.398:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.692272][ T39] audit: type=1326 audit(1726581987.398:7268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.697572][ T39] audit: type=1326 audit(1726581987.398:7269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.702994][ T39] audit: type=1326 audit(1726581987.409:7270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.708231][ T39] audit: type=1326 audit(1726581987.409:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.714109][ T39] audit: type=1326 audit(1726581987.409:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.719682][ T39] audit: type=1326 audit(1726581987.409:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2691.725528][ T39] audit: type=1326 audit(1726581987.409:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.0.11259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x7ffc0000 [ 2692.689764][T12936] bridge0: port 3(team0) entered disabled state [ 2692.691751][T12936] bridge0: port 2(bridge_slave_1) entered disabled state [ 2692.693868][T12936] bridge0: port 1(bridge_slave_0) entered disabled state [ 2692.698902][T12936] bridge0: entered allmulticast mode [ 2692.724439][T12936] bridge0: port 3(team0) entered blocking state [ 2692.726376][T12936] bridge0: port 3(team0) entered forwarding state [ 2692.728363][T12936] bridge0: port 2(bridge_slave_1) entered blocking state [ 2692.730258][T12936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2692.732277][T12936] bridge0: port 1(bridge_slave_0) entered blocking state [ 2692.734134][T12936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2692.751622][T12936] bridge0: entered promiscuous mode [ 2693.480195][T12939] netlink: 'syz.3.11265': attribute type 3 has an invalid length. [ 2693.482393][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11265'. [ 2693.865113][T12953] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11267'. [ 2693.871120][T12953] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2693.873490][T12953] CPU: 0 UID: 0 PID: 12953 Comm: syz.1.11267 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2693.874997][T12954] jfs: Unrecognized mount option "gid=" or missing value [ 2693.876479][T12953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2693.876489][T12953] Call Trace: [ 2693.883459][T12953] [ 2693.884466][T12953] dump_stack_lvl+0x16c/0x1f0 [ 2693.886069][T12953] sysfs_warn_dup+0x7f/0xa0 [ 2693.887620][T12953] sysfs_do_create_link_sd+0x124/0x140 [ 2693.889506][T12953] sysfs_create_link+0x61/0xc0 [ 2693.891238][T12953] device_add+0x62e/0x1a70 [ 2693.892860][T12953] ? __pfx_device_add+0x10/0x10 [ 2693.894765][T12953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2693.896945][T12953] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2693.899109][T12953] wiphy_register+0x20d7/0x2d30 [ 2693.900891][T12953] ? __pfx_wiphy_register+0x10/0x10 [ 2693.902762][T12953] ? ieee80211_register_hw+0x2633/0x3fb0 [ 2693.904755][T12953] ieee80211_register_hw+0x2959/0x3fb0 [ 2693.906706][T12953] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2693.908794][T12953] ? lockdep_init_map_type+0x16d/0x7d0 [ 2693.910800][T12953] ? rcu_is_watching+0x12/0xc0 [ 2693.912553][T12953] ? __hrtimer_init+0x106/0x2c0 [ 2693.914303][T12953] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2693.916353][T12953] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2693.918523][T12953] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2693.920851][T12953] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2693.922740][T12953] hwsim_new_radio_nl+0xb42/0x12b0 [ 2693.924504][T12953] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2693.926353][T12953] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2693.928811][T12953] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2693.931245][T12953] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2693.933136][T12953] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2693.935260][T12953] ? bpf_lsm_capable+0x9/0x10 [ 2693.936874][T12953] ? security_capable+0x7e/0x260 [ 2693.938537][T12953] ? ns_capable+0xd7/0x110 [ 2693.940073][T12953] genl_rcv_msg+0x565/0x800 [ 2693.941593][T12953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2693.943277][T12953] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2693.945135][T12953] netlink_rcv_skb+0x165/0x410 [ 2693.946742][T12953] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2693.948450][T12953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2693.950217][T12953] ? down_read+0xc9/0x330 [ 2693.951676][T12953] ? __pfx_down_read+0x10/0x10 [ 2693.953284][T12953] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2693.955053][T12953] genl_rcv+0x28/0x40 [ 2693.956398][T12953] netlink_unicast+0x53c/0x7f0 [ 2693.958010][T12953] ? __pfx_netlink_unicast+0x10/0x10 [ 2693.959772][T12953] ? const_folio_flags.constprop.0+0x56/0x150 [ 2693.961796][T12953] ? __phys_addr_symbol+0x30/0x80 [ 2693.963481][T12953] ? __check_object_size+0x497/0x720 [ 2693.965257][T12953] netlink_sendmsg+0x8b8/0xd70 [ 2693.966864][T12953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2693.968758][T12953] ____sys_sendmsg+0x9ae/0xb40 [ 2693.970479][T12953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2693.971994][T12953] ? get_compat_msghdr+0x11b/0x170 [ 2693.973355][T12953] ? __pfx___lock_acquire+0x10/0x10 [ 2693.974731][T12953] ? try_to_wake_up+0x14b/0x13e0 [ 2693.976031][T12953] ___sys_sendmsg+0x135/0x1e0 [ 2693.977277][T12953] ? __pfx____sys_sendmsg+0x10/0x10 [ 2693.978651][T12953] ? find_held_lock+0x2d/0x110 [ 2693.979924][T12953] ? __fget_light+0x173/0x210 [ 2693.981225][T12953] __sys_sendmsg+0x117/0x1f0 [ 2693.982444][T12953] ? __pfx___sys_sendmsg+0x10/0x10 [ 2693.983779][T12953] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2693.985271][T12953] __do_fast_syscall_32+0x73/0x120 [ 2693.986617][T12953] do_fast_syscall_32+0x32/0x80 [ 2693.987901][T12953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2693.989548][T12953] RIP: 0023:0xf7f02579 [ 2693.990829][T12953] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2693.995878][T12953] RSP: 002b:00000000f566556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2693.998061][T12953] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2694.000220][T12953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2694.002274][T12953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2694.004325][T12953] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2694.006380][T12953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2694.008473][T12953] [ 2694.060076][T12952] GUP no longer grows the stack in syz.2.11268 (12952): 20004000-2000a000 (20002000) [ 2694.062565][T12952] CPU: 2 UID: 0 PID: 12952 Comm: syz.2.11268 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2694.065303][T12952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2694.068094][T12952] Call Trace: [ 2694.068972][T12952] [ 2694.069747][T12952] dump_stack_lvl+0x16c/0x1f0 [ 2694.070999][T12952] gup_vma_lookup+0x1d2/0x220 [ 2694.072259][T12952] __get_user_pages+0x261/0x15c0 [ 2694.073569][T12952] ? __pfx___get_user_pages+0x10/0x10 [ 2694.074977][T12952] get_user_pages_remote+0x25e/0xb30 [ 2694.076765][T12952] ? __pfx_get_user_pages_remote+0x10/0x10 [ 2694.078794][T12952] __access_remote_vm+0x3f0/0x920 [ 2694.080394][T12952] ? __pfx___access_remote_vm+0x10/0x10 [ 2694.082242][T12952] proc_pid_cmdline_read+0x4f4/0x8d0 [ 2694.083644][T12952] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 2694.085195][T12952] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 2694.087376][T12952] vfs_readv+0x6bf/0x890 [ 2694.088551][T12952] ? __pfx_vfs_readv+0x10/0x10 [ 2694.089815][T12952] ? find_held_lock+0x2d/0x110 [ 2694.091089][T12952] ? __pfx_lock_release+0x10/0x10 [ 2694.092468][T12952] ? __fget_files+0x244/0x3f0 [ 2694.093735][T12952] ? do_preadv+0x1b2/0x260 [ 2694.094930][T12952] do_preadv+0x1b2/0x260 [ 2694.096081][T12952] ? __pfx_do_preadv+0x10/0x10 [ 2694.097362][T12952] __do_fast_syscall_32+0x73/0x120 [ 2694.098715][T12952] do_fast_syscall_32+0x32/0x80 [ 2694.100021][T12952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2694.101683][T12952] RIP: 0023:0xf7f97579 [ 2694.102756][T12952] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2694.107795][T12952] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 2694.109978][T12952] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 000000002001a440 [ 2694.112042][T12952] RDX: 0000000000000001 RSI: 0000000000000100 RDI: 0000000000000000 [ 2694.114112][T12952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2694.116184][T12952] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2694.118333][T12952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2694.120511][T12952] [ 2694.645479][ T9531] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2694.833574][ T9531] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 2694.842313][ T9531] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2694.844978][ T9531] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2694.848243][ T9531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2694.854433][ T9531] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2694.857317][ T9531] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2694.860373][ T9531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2694.864978][ T9531] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2694.867357][ T9531] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2694.870726][ T9531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2694.877289][ T9531] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2694.879981][ T9531] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2694.882814][ T9531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2694.896983][ T9531] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2694.899822][ T9531] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2694.911986][ T9531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2694.915464][ T9531] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2694.917912][ T9531] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2694.920783][ T9531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2694.935139][ T9531] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2694.938199][ T9531] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2694.942373][ T9531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2694.956240][ T9531] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2694.961469][ T9531] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2694.965408][ T9531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2694.970820][ T9531] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2694.973579][ T9531] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2694.976705][ T9531] usb 7-1: Product: syz [ 2694.979246][ T9531] usb 7-1: Manufacturer: syz [ 2694.981329][ T9531] usb 7-1: SerialNumber: syz [ 2694.991069][ T9531] usb 7-1: config 0 descriptor?? [ 2695.108634][ T9531] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 2695.218199][T12975] FAULT_INJECTION: forcing a failure. [ 2695.218199][T12975] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.221583][T12975] CPU: 3 UID: 0 PID: 12975 Comm: syz.3.11274 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2695.224363][T12975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2695.227160][T12975] Call Trace: [ 2695.228062][T12975] [ 2695.228848][T12975] dump_stack_lvl+0x16c/0x1f0 [ 2695.230087][T12975] should_fail_ex+0x497/0x5b0 [ 2695.231324][T12975] ? fs_reclaim_acquire+0xae/0x160 [ 2695.232766][T12975] should_failslab+0xc2/0x120 [ 2695.234092][T12975] __kmalloc_cache_noprof+0x6b/0x310 [ 2695.235471][T12975] ? rdma_resolve_route+0x6e4/0x3200 [ 2695.237059][T12975] ? kasan_save_track+0x14/0x30 [ 2695.238424][T12975] rdma_resolve_route+0x6e4/0x3200 [ 2695.239771][T12975] ? __pfx_lock_release+0x10/0x10 [ 2695.241105][T12975] ? do_raw_spin_lock+0x12d/0x2c0 [ 2695.242456][T12975] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2695.243872][T12975] ? __pfx_rdma_resolve_route+0x10/0x10 [ 2695.245339][T12975] ? lockdep_hardirqs_on+0x7c/0x110 [ 2695.246722][T12975] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2695.248120][T12975] ? __wait_for_common+0x2cf/0x5f0 [ 2695.249470][T12975] ? __pfx_schedule_timeout+0x10/0x10 [ 2695.250877][T12975] ? __pfx___wait_for_common+0x10/0x10 [ 2695.252338][T12975] ? __rdma_create_id+0x4f4/0x630 [ 2695.253811][T12975] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 2695.255282][T12975] ? rdma_create_trans+0xcfb/0x15b0 [ 2695.256662][T12975] ? wait_for_completion_interruptible+0x1f/0x40 [ 2695.258317][T12975] rdma_create_trans+0xcfb/0x15b0 [ 2695.259615][T12975] ? v9fs_mount+0xc6/0xa50 [ 2695.260769][T12975] ? __pfx_rdma_create_trans+0x10/0x10 [ 2695.262191][T12975] ? kfree+0x12a/0x3b0 [ 2695.262720][ T9531] usb 7-1: USB disconnect, device number 4 [ 2695.263278][T12975] ? p9_client_create+0x81a/0x11b0 [ 2695.263296][T12975] p9_client_create+0x81a/0x11b0 [ 2695.263315][T12975] ? __pfx_p9_client_create+0x10/0x10 [ 2695.263333][T12975] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2695.271130][T12975] ? v9fs_session_init+0x1f8/0x1a80 [ 2695.272527][T12975] v9fs_session_init+0x1f8/0x1a80 [ 2695.273874][T12975] ? __pfx_v9fs_session_init+0x10/0x10 [ 2695.275292][T12975] ? kasan_save_track+0x14/0x30 [ 2695.276570][T12975] v9fs_mount+0xc6/0xa50 [ 2695.277679][T12975] ? __pfx_v9fs_mount+0x10/0x10 [ 2695.279209][T12975] ? __pfx_v9fs_mount+0x10/0x10 [ 2695.280861][T12975] legacy_get_tree+0x109/0x220 [ 2695.282076][T12975] vfs_get_tree+0x8f/0x380 [ 2695.283281][T12975] path_mount+0x6e1/0x1f10 [ 2695.284378][T12975] ? __pfx_path_mount+0x10/0x10 [ 2695.285677][T12975] ? putname+0x12e/0x170 [ 2695.286844][T12975] ? putname+0x12e/0x170 [ 2695.287925][T12975] __ia32_sys_mount+0x292/0x310 [ 2695.289213][T12975] ? __pfx___ia32_sys_mount+0x10/0x10 [ 2695.290626][T12975] __do_fast_syscall_32+0x73/0x120 [ 2695.291976][T12975] do_fast_syscall_32+0x32/0x80 [ 2695.293239][T12975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2695.294797][T12975] RIP: 0023:0xf7fdf579 [ 2695.295841][T12975] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2695.300811][T12975] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2695.303016][T12975] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000240 [ 2695.305066][T12975] RDX: 0000000020000280 RSI: 0000000000000000 RDI: 00000000200003c0 [ 2695.307109][T12975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2695.309175][T12975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2695.311212][T12975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2695.313589][T12975] [ 2695.319021][ T9531] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 2696.291023][T12997] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11281'. [ 2696.302436][T12997] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2696.308287][T12997] CPU: 3 UID: 0 PID: 12997 Comm: syz.2.11281 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2696.311050][T12997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2696.313836][T12997] Call Trace: [ 2696.314712][T12997] [ 2696.315496][T12997] dump_stack_lvl+0x16c/0x1f0 [ 2696.316755][T12997] sysfs_warn_dup+0x7f/0xa0 [ 2696.317947][T12997] sysfs_do_create_link_sd+0x124/0x140 [ 2696.319366][T12997] sysfs_create_link+0x61/0xc0 [ 2696.320629][T12997] device_add+0x62e/0x1a70 [ 2696.321799][T12997] ? __pfx_device_add+0x10/0x10 [ 2696.323068][T12997] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2696.324616][T12997] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2696.326180][T12997] wiphy_register+0x20d7/0x2d30 [ 2696.327557][T12997] ? __pfx_wiphy_register+0x10/0x10 [ 2696.329197][T12997] ieee80211_register_hw+0x2959/0x3fb0 [ 2696.330641][T12997] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2696.332217][T12997] ? lockdep_init_map_type+0x16d/0x7d0 [ 2696.333664][T12997] ? rcu_is_watching+0x12/0xc0 [ 2696.334929][T12997] ? __hrtimer_init+0x106/0x2c0 [ 2696.336237][T12997] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2696.337735][T12997] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2696.339337][T12997] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2696.341113][T12997] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2696.342515][T12997] hwsim_new_radio_nl+0xb42/0x12b0 [ 2696.343875][T12997] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2696.345345][T12997] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2696.347261][T12997] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2696.349210][T12997] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2696.350667][T12997] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2696.352285][T12997] ? bpf_lsm_capable+0x9/0x10 [ 2696.353528][T12997] ? security_capable+0x7e/0x260 [ 2696.354826][T12997] ? ns_capable+0xd7/0x110 [ 2696.356011][T12997] genl_rcv_msg+0x565/0x800 [ 2696.357206][T12997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2696.358516][T12997] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2696.359970][T12997] netlink_rcv_skb+0x165/0x410 [ 2696.361296][T12997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2696.362670][T12997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2696.364131][T12997] ? down_read+0xc9/0x330 [ 2696.365245][T12997] ? __pfx_down_read+0x10/0x10 [ 2696.366640][T12997] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2696.368010][T12997] genl_rcv+0x28/0x40 [ 2696.369028][T12997] netlink_unicast+0x53c/0x7f0 [ 2696.370548][T12997] ? __pfx_netlink_unicast+0x10/0x10 [ 2696.371904][T12997] ? const_folio_flags.constprop.0+0x56/0x150 [ 2696.373486][T12997] ? __phys_addr_symbol+0x30/0x80 [ 2696.375089][T12997] ? __check_object_size+0x497/0x720 [ 2696.376607][T12997] netlink_sendmsg+0x8b8/0xd70 [ 2696.378121][T12997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2696.379853][T12997] ____sys_sendmsg+0x9ae/0xb40 [ 2696.381162][T12997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2696.382911][T12997] ? get_compat_msghdr+0x11b/0x170 [ 2696.384519][T12997] ? __pfx___lock_acquire+0x10/0x10 [ 2696.385868][T12997] ? try_to_wake_up+0x14b/0x13e0 [ 2696.387161][T12997] ___sys_sendmsg+0x135/0x1e0 [ 2696.388422][T12997] ? __pfx____sys_sendmsg+0x10/0x10 [ 2696.389762][T12997] ? find_held_lock+0x2d/0x110 [ 2696.391010][T12997] ? __fget_light+0x173/0x210 [ 2696.392253][T12997] __sys_sendmsg+0x117/0x1f0 [ 2696.393658][T12997] ? __pfx___sys_sendmsg+0x10/0x10 [ 2696.395383][T12997] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2696.397303][T12997] __do_fast_syscall_32+0x73/0x120 [ 2696.399021][T12997] do_fast_syscall_32+0x32/0x80 [ 2696.400697][T12997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2696.402850][T12997] RIP: 0023:0xf7f97579 [ 2696.404258][T12997] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2696.410753][T12997] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2696.413586][T12997] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2696.416311][T12997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2696.419067][T12997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2696.421817][T12997] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2696.424511][T12997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2696.427194][T12997] [ 2696.688186][T13000] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11283'. [ 2696.709171][T13000] xt_hashlimit: invalid interval [ 2697.767926][T13019] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2697.775372][T13019] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2697.781496][T13019] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2697.792339][T13019] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2697.798313][T13019] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2697.802725][T13019] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2697.836292][T13020] nbd3: detected capacity change from 0 to 12 [ 2697.840157][T13020] block nbd3: NBD_DISCONNECT [ 2697.842753][T13020] block nbd3: Send disconnect failed -89 [ 2697.878527][T13020] block nbd3: Send control failed (result -89) [ 2697.882003][T13020] block nbd3: Request send failed, requeueing [ 2697.895067][T13020] block nbd3: Disconnected due to user request. [ 2697.918097][ T2125] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.929193][ T2125] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.933893][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.937076][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.940061][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.944525][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.950719][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.954201][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.960971][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.963363][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.967919][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.973818][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.975988][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.978263][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.981122][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.983806][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.986114][T13020] ldm_validate_partition_table(): Disk read failed. [ 2697.988069][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.990689][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2697.993746][T13020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2697.996379][T13020] Buffer I/O error on dev nbd3, logical block 0, async page read [ 2698.000123][T13020] Dev nbd3: unable to read RDB block 0 [ 2698.003900][T13020] nbd3: unable to read partition table [ 2698.005461][T13020] nbd3: partition table beyond EOD, truncated [ 2698.076754][T10896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2698.080333][T10896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.215379][T10896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2698.218690][T10896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.322565][T10896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2698.326042][T10896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.335610][T13015] chnl_net:caif_netlink_parms(): no params data found [ 2698.537878][T10896] team0: Port device netdevsim0 removed [ 2698.540997][T10896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2698.547830][T10896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2698.570521][T13015] bridge0: port 1(bridge_slave_0) entered blocking state [ 2698.572613][T13015] bridge0: port 1(bridge_slave_0) entered disabled state [ 2698.574577][T13015] bridge_slave_0: entered allmulticast mode [ 2698.577101][T13015] bridge_slave_0: entered promiscuous mode [ 2698.582424][ T5391] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2698.588909][T13015] bridge0: port 2(bridge_slave_1) entered blocking state [ 2698.591610][T13015] bridge0: port 2(bridge_slave_1) entered disabled state [ 2698.594151][T13015] bridge_slave_1: entered allmulticast mode [ 2698.597414][T13015] bridge_slave_1: entered promiscuous mode [ 2698.685875][T13015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2698.693788][T13015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2698.780261][ T5391] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 2698.785892][ T5391] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2698.798658][ T5391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2698.802256][ T5391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2698.805656][ T5391] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2698.817682][ T5391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2698.821368][ T5391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2698.824645][ T5391] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2698.836712][ T5391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2698.839481][ T5391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2698.842032][ T5391] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2698.844367][ T5391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2698.845261][T13015] team0: Port device team_slave_0 added [ 2698.851725][ T5391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2698.861564][T13015] team0: Port device team_slave_1 added [ 2698.865965][ T5391] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2698.868423][ T5391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2698.871143][ T5391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2698.873732][ T5391] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2698.884346][ T5391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2698.887081][ T5391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2698.894268][ T5391] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2698.896778][ T5391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2698.903464][ T5391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2698.906460][ T5391] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2698.909004][ T5391] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2698.911915][ T5391] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2698.925246][ T5391] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2698.927684][ T5391] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2698.929914][ T5391] usb 6-1: Product: syz [ 2698.931029][ T5391] usb 6-1: Manufacturer: syz [ 2698.941523][ T5391] usb 6-1: SerialNumber: syz [ 2698.944385][ T5391] usb 6-1: config 0 descriptor?? [ 2698.953258][ T5391] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 2699.038086][T13015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2699.040527][T13015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2699.050874][T13015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2699.063730][T13015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2699.083453][T13015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2699.098567][T13015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2699.184593][ T1428] usb 6-1: USB disconnect, device number 10 [ 2699.191340][ T1428] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 2699.197493][T13041] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11292'. [ 2699.204252][T10896] bridge0: port 2(bridge_slave_1) entered disabled state [ 2699.713654][T10896] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2699.789415][ T9428] Bluetooth: hci7: command tx timeout [ 2700.037111][T13044] zonefs (nbd1) ERROR: Not a zoned block device [ 2700.171222][T10896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2700.176839][T10896] bond0 (unregistering): Released all slaves [ 2700.222305][T13015] hsr_slave_0: entered promiscuous mode [ 2700.225333][T13015] hsr_slave_1: entered promiscuous mode [ 2700.229500][T13015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2700.232342][T13015] Cannot create hsr debugfs directory [ 2700.234773][T13041] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2700.240045][T13041] CPU: 1 UID: 0 PID: 13041 Comm: syz.3.11292 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2700.243226][T13041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2700.246839][T13041] Call Trace: [ 2700.248029][T13041] [ 2700.249016][T13041] dump_stack_lvl+0x16c/0x1f0 [ 2700.250633][T13041] sysfs_warn_dup+0x7f/0xa0 [ 2700.252209][T13041] sysfs_do_create_link_sd+0x124/0x140 [ 2700.254017][T13041] sysfs_create_link+0x61/0xc0 [ 2700.255312][T13041] device_add+0x62e/0x1a70 [ 2700.256440][T13041] ? __pfx_device_add+0x10/0x10 [ 2700.257712][T13041] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2700.259239][T13041] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2700.260789][T13041] wiphy_register+0x20d7/0x2d30 [ 2700.262070][T13041] ? __pfx_wiphy_register+0x10/0x10 [ 2700.263459][T13041] ieee80211_register_hw+0x2959/0x3fb0 [ 2700.264890][T13041] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2700.266568][T13041] ? lockdep_init_map_type+0x16d/0x7d0 [ 2700.268622][T13041] ? rcu_is_watching+0x12/0xc0 [ 2700.270171][T13041] ? __hrtimer_init+0x106/0x2c0 [ 2700.271450][T13041] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2700.272961][T13041] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2700.274561][T13041] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2700.276292][T13041] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2700.277671][T13041] hwsim_new_radio_nl+0xb42/0x12b0 [ 2700.279020][T13041] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2700.280831][T13041] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2700.283477][T13041] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2700.286035][T13041] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2700.288020][T13041] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2700.289579][T13041] ? bpf_lsm_capable+0x9/0x10 [ 2700.290816][T13041] ? security_capable+0x7e/0x260 [ 2700.292035][T13041] ? ns_capable+0xd7/0x110 [ 2700.293112][T13041] genl_rcv_msg+0x565/0x800 [ 2700.294286][T13041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2700.295664][T13041] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2700.297147][T13041] netlink_rcv_skb+0x165/0x410 [ 2700.298435][T13041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2700.299837][T13041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2700.301768][T13041] ? down_read+0xc9/0x330 [ 2700.303348][T13041] ? __pfx_down_read+0x10/0x10 [ 2700.305104][T13041] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2700.306922][T13041] genl_rcv+0x28/0x40 [ 2700.308391][T13041] netlink_unicast+0x53c/0x7f0 [ 2700.309712][T13041] ? __pfx_netlink_unicast+0x10/0x10 [ 2700.311091][T13041] ? const_folio_flags.constprop.0+0x56/0x150 [ 2700.312632][T13041] ? __phys_addr_symbol+0x30/0x80 [ 2700.313909][T13041] ? __check_object_size+0x497/0x720 [ 2700.315297][T13041] netlink_sendmsg+0x8b8/0xd70 [ 2700.316588][T13041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2700.317941][T13041] ____sys_sendmsg+0x9ae/0xb40 [ 2700.319175][T13041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2700.320871][T13041] ? get_compat_msghdr+0x11b/0x170 [ 2700.322707][T13041] ? __pfx___lock_acquire+0x10/0x10 [ 2700.324642][T13041] ? try_to_wake_up+0x14b/0x13e0 [ 2700.326494][T13041] ___sys_sendmsg+0x135/0x1e0 [ 2700.328195][T13041] ? __pfx____sys_sendmsg+0x10/0x10 [ 2700.329580][T13041] ? find_held_lock+0x2d/0x110 [ 2700.331135][T13041] ? __fget_light+0x173/0x210 [ 2700.332619][T13041] __sys_sendmsg+0x117/0x1f0 [ 2700.334057][T13041] ? __pfx___sys_sendmsg+0x10/0x10 [ 2700.335635][T13041] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2700.337344][T13041] __do_fast_syscall_32+0x73/0x120 [ 2700.338890][T13041] do_fast_syscall_32+0x32/0x80 [ 2700.340556][T13041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2700.342850][T13041] RIP: 0023:0xf7fdf579 [ 2700.344365][T13041] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2700.350511][T13041] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2700.352657][T13041] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2700.354695][T13041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2700.356751][T13041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2700.358806][T13041] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2700.361366][T13041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2700.364273][T13041] [ 2700.382229][T10896] tipc: Disabling bearer [ 2700.383778][T10896] tipc: Disabling bearer [ 2700.385249][T10896] tipc: Left network mode [ 2700.552776][T13047] FAULT_INJECTION: forcing a failure. [ 2700.552776][T13047] name failslab, interval 1, probability 0, space 0, times 0 [ 2700.556601][T13047] CPU: 3 UID: 0 PID: 13047 Comm: syz.3.11294 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2700.559896][T13047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2700.563251][T13047] Call Trace: [ 2700.564292][T13047] [ 2700.565089][T13047] dump_stack_lvl+0x16c/0x1f0 [ 2700.566340][T13047] should_fail_ex+0x497/0x5b0 [ 2700.567586][T13047] ? fs_reclaim_acquire+0xae/0x160 [ 2700.568954][T13047] should_failslab+0xc2/0x120 [ 2700.570180][T13047] __kmalloc_cache_noprof+0x6b/0x310 [ 2700.572122][T13047] ? nfnl_err_add+0x4e/0x2d0 [ 2700.573335][T13047] nfnl_err_add+0x4e/0x2d0 [ 2700.574532][T13047] nfnetlink_rcv_batch+0xe40/0x24e0 [ 2700.575883][T13047] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 2700.577380][T13047] ? __pfx_lock_release+0x10/0x10 [ 2700.578723][T13047] ? __local_bh_enable_ip+0xa4/0x120 [ 2700.580129][T13047] ? lockdep_hardirqs_on+0x7c/0x110 [ 2700.581521][T13047] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2700.582957][T13047] ? __nla_parse+0x40/0x60 [ 2700.584128][T13047] nfnetlink_rcv+0x3c3/0x430 [ 2700.585356][T13047] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2700.586710][T13047] netlink_unicast+0x53c/0x7f0 [ 2700.588011][T13047] ? __pfx_netlink_unicast+0x10/0x10 [ 2700.589333][T13047] ? __phys_addr_symbol+0x30/0x80 [ 2700.590591][T13047] ? __check_object_size+0x497/0x720 [ 2700.592147][T13047] netlink_sendmsg+0x8b8/0xd70 [ 2700.593546][T13047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2700.595104][T13047] ____sys_sendmsg+0x9ae/0xb40 [ 2700.596407][T13047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2700.597994][T13047] ? get_compat_msghdr+0x11b/0x170 [ 2700.599605][T13047] ? __pfx___lock_acquire+0x10/0x10 [ 2700.601259][T13047] ___sys_sendmsg+0x135/0x1e0 [ 2700.602712][T13047] ? __pfx____sys_sendmsg+0x10/0x10 [ 2700.604203][T13047] ? find_held_lock+0x2d/0x110 [ 2700.605793][T13047] ? ksys_write+0x21c/0x260 [ 2700.607548][T13047] ? __fget_light+0x173/0x210 [ 2700.609368][T13047] __sys_sendmsg+0x117/0x1f0 [ 2700.610961][T13047] ? __pfx___sys_sendmsg+0x10/0x10 [ 2700.612738][T13047] __do_fast_syscall_32+0x73/0x120 [ 2700.614466][T13047] do_fast_syscall_32+0x32/0x80 [ 2700.615968][T13047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2700.618082][T13047] RIP: 0023:0xf7fdf579 [ 2700.619429][T13047] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2700.625038][T13047] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2700.627831][T13047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 2700.630827][T13047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2700.632993][T13047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2700.635575][T13047] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2700.638025][T13047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2700.640219][T13047] [ 2700.761140][T13051] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2700.829098][T13054] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11295'. [ 2700.837508][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.837508][T13057] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 2700.840802][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.840802][T13057] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 2700.856292][T13057] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 2700.858174][T13054] xt_hashlimit: invalid interval [ 2700.859087][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.859087][T13057] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 2700.863927][T13057] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 2700.875179][T13057] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 2700.877318][T13057] UDF-fs: Scanning with blocksize 512 failed [ 2700.883085][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.883085][T13057] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 2700.901474][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.901474][T13057] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 2700.905576][T13057] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 2700.913899][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.913899][T13057] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 2700.920951][T13057] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 2700.923839][T13057] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 2700.925830][T13057] UDF-fs: Scanning with blocksize 1024 failed [ 2700.928283][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.928283][T13057] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 2700.942069][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.942069][T13057] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 2700.951497][T13057] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 2700.958503][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.958503][T13057] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 2700.963634][T13057] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 2700.973451][T13057] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 2700.975788][T13057] UDF-fs: Scanning with blocksize 2048 failed [ 2700.990190][T13057] syz.0.11297: attempt to access beyond end of device [ 2700.990190][T13057] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2700.994883][T13057] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 2700.998387][T13057] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 2701.001977][T13057] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 2701.008268][T13057] UDF-fs: Scanning with blocksize 4096 failed [ 2701.010463][T13057] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 2701.056014][T13055] nbd1: detected capacity change from 0 to 12 [ 2701.057743][T13062] block nbd1: NBD_DISCONNECT [ 2701.058951][T13062] block nbd1: Send disconnect failed -89 [ 2701.070156][T13055] block nbd1: Send control failed (result -89) [ 2701.075011][T13055] block nbd1: Request send failed, requeueing [ 2701.078371][T13055] block nbd1: Disconnected due to user request. [ 2701.098634][T13055] ldm_validate_partition_table(): Disk read failed. [ 2701.103492][T13055] Dev nbd1: unable to read RDB block 0 [ 2701.107805][T13055] nbd1: unable to read partition table [ 2701.112197][T13055] nbd1: partition table beyond EOD, truncated [ 2701.219680][T10896] hsr_slave_0: left promiscuous mode [ 2701.221963][T10896] hsr_slave_1: left promiscuous mode [ 2701.244295][T10896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2701.246943][T10896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2701.252449][T10896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2701.254995][T10896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2701.364551][T10896] veth1_macvtap: left promiscuous mode [ 2701.366469][T10896] veth0_macvtap: left promiscuous mode [ 2701.368461][T10896] veth1_vlan: left promiscuous mode [ 2701.584926][T13068] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 2701.770359][ T9428] Bluetooth: hci7: command tx timeout [ 2703.752084][ T9428] Bluetooth: hci7: command tx timeout [ 2704.237054][T10896] team0 (unregistering): Port device team_slave_1 removed [ 2704.475022][T10896] team0 (unregistering): Port device team_slave_0 removed [ 2705.410165][T13080] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11301'. [ 2705.734252][ T9428] Bluetooth: hci7: command tx timeout [ 2706.266517][T13075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11300'. [ 2706.281320][T13077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11300'. [ 2706.286880][T13080] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2706.289112][T13080] CPU: 0 UID: 0 PID: 13080 Comm: syz.0.11301 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2706.292199][T13080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2706.295522][T13080] Call Trace: [ 2706.296613][T13080] [ 2706.297469][T13080] dump_stack_lvl+0x16c/0x1f0 [ 2706.298947][T13080] sysfs_warn_dup+0x7f/0xa0 [ 2706.300311][T13080] sysfs_do_create_link_sd+0x124/0x140 [ 2706.301955][T13080] sysfs_create_link+0x61/0xc0 [ 2706.303341][T13080] device_add+0x62e/0x1a70 [ 2706.304550][T13080] ? __pfx_device_add+0x10/0x10 [ 2706.305826][T13080] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2706.307369][T13080] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2706.309147][T13080] wiphy_register+0x20d7/0x2d30 [ 2706.310502][T13080] ? __pfx_wiphy_register+0x10/0x10 [ 2706.311906][T13080] ieee80211_register_hw+0x2959/0x3fb0 [ 2706.313528][T13080] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2706.315808][T13080] ? lockdep_init_map_type+0x16d/0x7d0 [ 2706.317889][T13080] ? rcu_is_watching+0x12/0xc0 [ 2706.319542][T13080] ? __hrtimer_init+0x106/0x2c0 [ 2706.321267][T13080] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2706.323229][T13080] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2706.325353][T13080] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2706.327530][T13080] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2706.329110][T13080] hwsim_new_radio_nl+0xb42/0x12b0 [ 2706.330696][T13080] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2706.332169][T13080] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2706.334205][T13080] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2706.336344][T13080] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2706.337790][T13080] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2706.339385][T13080] ? bpf_lsm_capable+0x9/0x10 [ 2706.340714][T13080] ? security_capable+0x7e/0x260 [ 2706.342013][T13080] ? ns_capable+0xd7/0x110 [ 2706.343184][T13080] genl_rcv_msg+0x565/0x800 [ 2706.344400][T13080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2706.345716][T13080] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2706.347161][T13080] netlink_rcv_skb+0x165/0x410 [ 2706.348448][T13080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2706.349773][T13080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2706.351166][T13080] ? down_read+0xc9/0x330 [ 2706.352262][T13080] ? __pfx_down_read+0x10/0x10 [ 2706.353410][T13080] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2706.354741][T13080] genl_rcv+0x28/0x40 [ 2706.356037][T13080] netlink_unicast+0x53c/0x7f0 [ 2706.357286][T13080] ? __pfx_netlink_unicast+0x10/0x10 [ 2706.358670][T13080] ? const_folio_flags.constprop.0+0x56/0x150 [ 2706.360424][T13080] ? __phys_addr_symbol+0x30/0x80 [ 2706.361816][T13080] ? __check_object_size+0x497/0x720 [ 2706.363261][T13080] netlink_sendmsg+0x8b8/0xd70 [ 2706.364554][T13080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2706.365941][T13080] ____sys_sendmsg+0x9ae/0xb40 [ 2706.367194][T13080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2706.368597][T13080] ? get_compat_msghdr+0x11b/0x170 [ 2706.369970][T13080] ? __pfx___lock_acquire+0x10/0x10 [ 2706.371440][T13080] ? try_to_wake_up+0x14b/0x13e0 [ 2706.372743][T13080] ___sys_sendmsg+0x135/0x1e0 [ 2706.373968][T13080] ? __pfx____sys_sendmsg+0x10/0x10 [ 2706.375307][T13080] ? find_held_lock+0x2d/0x110 [ 2706.376582][T13080] ? __fget_light+0x173/0x210 [ 2706.377814][T13080] __sys_sendmsg+0x117/0x1f0 [ 2706.379034][T13080] ? __pfx___sys_sendmsg+0x10/0x10 [ 2706.380409][T13080] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2706.381881][T13080] __do_fast_syscall_32+0x73/0x120 [ 2706.383219][T13080] do_fast_syscall_32+0x32/0x80 [ 2706.384501][T13080] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2706.386166][T13080] RIP: 0023:0xf7fc3579 [ 2706.387287][T13080] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2706.392654][T13080] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2706.395180][T13080] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2706.397704][T13080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2706.399843][T13080] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2706.402141][T13080] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2706.404461][T13080] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2706.406624][T13080] [ 2706.438466][T13088] FAULT_INJECTION: forcing a failure. [ 2706.438466][T13088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2706.442030][T13088] CPU: 2 UID: 0 PID: 13088 Comm: syz.1.11304 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2706.444816][T13088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2706.448046][T13088] Call Trace: [ 2706.448993][T13088] [ 2706.449831][T13088] dump_stack_lvl+0x16c/0x1f0 [ 2706.451182][T13088] should_fail_ex+0x497/0x5b0 [ 2706.452659][T13088] strncpy_from_user+0x38/0x320 [ 2706.454023][T13088] getname_flags.part.0+0x8f/0x550 [ 2706.455840][T13088] getname+0x8d/0xe0 [ 2706.457356][T13088] do_sys_openat2+0x104/0x1e0 [ 2706.459196][T13088] ? __pfx_do_sys_openat2+0x10/0x10 [ 2706.460962][T13088] __ia32_compat_sys_openat+0x16e/0x210 [ 2706.462386][T13088] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 2706.464146][T13088] ? ksys_write+0x1ab/0x260 [ 2706.465506][T13088] __do_fast_syscall_32+0x73/0x120 [ 2706.467239][T13088] do_fast_syscall_32+0x32/0x80 [ 2706.468549][T13088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2706.470227][T13088] RIP: 0023:0xf7f02579 [ 2706.471321][T13088] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2706.476406][T13088] RSP: 002b:00000000f564456c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 2706.478609][T13088] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 2706.480850][T13088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2706.482884][T13088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2706.484986][T13088] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2706.487528][T13088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2706.489748][T13088] [ 2706.968282][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11308'. [ 2706.996803][T13015] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2707.009856][T13015] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2707.014046][T13015] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2707.039638][T13015] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2707.129270][T13015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2707.148291][T13015] 8021q: adding VLAN 0 to HW filter on device team0 [ 2707.167126][T10896] bridge0: port 1(bridge_slave_0) entered blocking state [ 2707.169547][T10896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2707.182685][T10896] bridge0: port 2(bridge_slave_1) entered blocking state [ 2707.185237][T10896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2707.378266][T13015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2707.446903][T13015] veth0_vlan: entered promiscuous mode [ 2707.462009][T13015] veth1_vlan: entered promiscuous mode [ 2707.488527][T13015] veth0_macvtap: entered promiscuous mode [ 2707.495640][T13015] veth1_macvtap: entered promiscuous mode [ 2707.516243][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2707.519899][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.523327][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2707.527257][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.529872][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2707.532401][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.536305][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2707.539308][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.541734][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2707.544909][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.547400][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2707.550063][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.552669][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2707.555210][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.559087][T13015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2707.568882][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.571931][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.574562][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.577158][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.579562][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.582372][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.585110][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.588098][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.591014][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.593755][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.596334][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.599075][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.601667][T13015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2707.604426][T13015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2707.608262][T13015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2707.617982][T13015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2707.620483][T13015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2707.622826][T13015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2707.625180][T13015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2707.675896][T10888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2707.678016][T10888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2707.693099][T10891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2707.696158][T10891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2707.748290][T13112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11286'. [ 2707.799977][T13113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11286'. [ 2708.877691][T13128] input: syz1 as /devices/virtual/input/input143 [ 2709.032920][T13131] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11315'. [ 2709.048471][T13131] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2709.051103][T13131] CPU: 2 UID: 0 PID: 13131 Comm: syz.0.11315 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2709.054485][T13131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2709.057334][T13131] Call Trace: [ 2709.058217][T13131] [ 2709.058980][T13131] dump_stack_lvl+0x16c/0x1f0 [ 2709.060198][T13131] sysfs_warn_dup+0x7f/0xa0 [ 2709.061427][T13131] sysfs_do_create_link_sd+0x124/0x140 [ 2709.062860][T13131] sysfs_create_link+0x61/0xc0 [ 2709.064105][T13131] device_add+0x62e/0x1a70 [ 2709.065297][T13131] ? __pfx_device_add+0x10/0x10 [ 2709.066935][T13131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2709.068977][T13131] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2709.070998][T13131] wiphy_register+0x20d7/0x2d30 [ 2709.072670][T13131] ? __pfx_wiphy_register+0x10/0x10 [ 2709.074447][T13131] ieee80211_register_hw+0x2959/0x3fb0 [ 2709.076316][T13131] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2709.078275][T13131] ? lockdep_init_map_type+0x16d/0x7d0 [ 2709.080159][T13131] ? rcu_is_watching+0x12/0xc0 [ 2709.081787][T13131] ? __hrtimer_init+0x106/0x2c0 [ 2709.083456][T13131] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2709.085406][T13131] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2709.087456][T13131] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2709.089695][T13131] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2709.091508][T13131] hwsim_new_radio_nl+0xb42/0x12b0 [ 2709.093319][T13131] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2709.095293][T13131] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2709.097612][T13131] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2709.099531][T13131] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2709.100991][T13131] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2709.102555][T13131] ? bpf_lsm_capable+0x9/0x10 [ 2709.103727][T13131] ? security_capable+0x7e/0x260 [ 2709.105131][T13131] ? ns_capable+0xd7/0x110 [ 2709.106301][T13131] genl_rcv_msg+0x565/0x800 [ 2709.107516][T13131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2709.108891][T13131] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2709.110359][T13131] netlink_rcv_skb+0x165/0x410 [ 2709.111625][T13131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2709.112960][T13131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2709.114328][T13131] ? down_read+0xc9/0x330 [ 2709.115960][T13131] ? __pfx_down_read+0x10/0x10 [ 2709.117720][T13131] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2709.119713][T13131] genl_rcv+0x28/0x40 [ 2709.121212][T13131] netlink_unicast+0x53c/0x7f0 [ 2709.122929][T13131] ? __pfx_netlink_unicast+0x10/0x10 [ 2709.124744][T13131] ? const_folio_flags.constprop.0+0x56/0x150 [ 2709.126408][T13131] ? __phys_addr_symbol+0x30/0x80 [ 2709.127739][T13131] ? __check_object_size+0x497/0x720 [ 2709.129140][T13131] netlink_sendmsg+0x8b8/0xd70 [ 2709.130395][T13131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2709.131777][T13131] ____sys_sendmsg+0x9ae/0xb40 [ 2709.133049][T13131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2709.134427][T13131] ? get_compat_msghdr+0x11b/0x170 [ 2709.135766][T13131] ? __pfx___lock_acquire+0x10/0x10 [ 2709.137145][T13131] ? try_to_wake_up+0x14b/0x13e0 [ 2709.138439][T13131] ___sys_sendmsg+0x135/0x1e0 [ 2709.139674][T13131] ? __pfx____sys_sendmsg+0x10/0x10 [ 2709.141040][T13131] ? find_held_lock+0x2d/0x110 [ 2709.142299][T13131] ? __fget_light+0x173/0x210 [ 2709.143527][T13131] __sys_sendmsg+0x117/0x1f0 [ 2709.144676][T13131] ? __pfx___sys_sendmsg+0x10/0x10 [ 2709.145955][T13131] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2709.147510][T13131] __do_fast_syscall_32+0x73/0x120 [ 2709.149164][T13131] do_fast_syscall_32+0x32/0x80 [ 2709.150515][T13131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2709.152609][T13131] RIP: 0023:0xf7fc3579 [ 2709.153985][T13131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2709.160660][T13131] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2709.163443][T13131] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2709.166232][T13131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2709.168940][T13131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2709.171683][T13131] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2709.173940][T13131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2709.176390][T13131] [ 2710.356066][T13143] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2711.114154][T13164] tipc: Enabling of bearer rejected, already enabled [ 2711.906048][ T5391] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2712.078697][ T5391] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 2712.103638][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2712.134229][ T5391] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2712.157726][ T5391] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2712.161920][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2712.164375][ T5391] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2712.167194][ T5391] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2712.174791][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2712.177210][ T5391] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2712.179996][ T5391] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2712.183300][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2712.185701][ T5391] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2712.188502][ T5391] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2712.190398][T13174] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11328'. [ 2712.191259][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2712.196158][ T5391] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2712.198931][ T5391] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2712.216649][T13174] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2712.220368][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2712.222675][ T5391] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2712.224016][T13174] CPU: 3 UID: 0 PID: 13174 Comm: syz.0.11328 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2712.225469][ T5391] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2712.229255][T13174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2712.232479][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2712.234872][T13174] Call Trace: [ 2712.234886][T13174] [ 2712.237228][ T5391] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2712.238404][T13174] dump_stack_lvl+0x16c/0x1f0 [ 2712.239240][ T5391] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2712.243078][T13174] sysfs_warn_dup+0x7f/0xa0 [ 2712.243117][T13174] sysfs_do_create_link_sd+0x124/0x140 [ 2712.243150][T13174] sysfs_create_link+0x61/0xc0 [ 2712.243180][T13174] device_add+0x62e/0x1a70 [ 2712.243211][T13174] ? __pfx_device_add+0x10/0x10 [ 2712.243236][T13174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2712.243268][T13174] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2712.243302][T13174] wiphy_register+0x20d7/0x2d30 [ 2712.245665][ T5391] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2712.246972][T13174] ? __pfx_wiphy_register+0x10/0x10 [ 2712.248268][ T5391] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2712.250177][T13174] ieee80211_register_hw+0x2959/0x3fb0 [ 2712.251383][ T5391] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2712.253034][T13174] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2712.260280][ T5391] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2712.260385][T13174] ? lockdep_init_map_type+0x16d/0x7d0 [ 2712.262652][ T5391] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2712.264558][T13174] ? rcu_is_watching+0x12/0xc0 [ 2712.267282][ T5391] usb 7-1: Product: syz [ 2712.269270][T13174] ? __hrtimer_init+0x106/0x2c0 [ 2712.269310][T13174] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2712.271030][ T5391] usb 7-1: Manufacturer: syz [ 2712.273121][T13174] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2712.275492][ T5391] usb 7-1: SerialNumber: syz [ 2712.277402][T13174] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2712.277435][T13174] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2712.282331][ T5391] usb 7-1: config 0 descriptor?? [ 2712.282847][T13174] hwsim_new_radio_nl+0xb42/0x12b0 [ 2712.299958][T13174] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2712.302011][T13174] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2712.304717][T13174] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2712.305864][ T5391] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 2712.307388][T13174] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2712.307419][T13174] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2712.313171][T13174] ? bpf_lsm_capable+0x9/0x10 [ 2712.314463][T13174] ? security_capable+0x7e/0x260 [ 2712.315783][T13174] ? ns_capable+0xd7/0x110 [ 2712.317001][T13174] genl_rcv_msg+0x565/0x800 [ 2712.318227][T13174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2712.319594][T13174] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2712.321184][T13174] netlink_rcv_skb+0x165/0x410 [ 2712.322519][T13174] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2712.323920][T13174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2712.325354][T13174] ? down_read+0xc9/0x330 [ 2712.326562][T13174] ? __pfx_down_read+0x10/0x10 [ 2712.327904][T13174] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2712.329378][T13174] genl_rcv+0x28/0x40 [ 2712.330481][T13174] netlink_unicast+0x53c/0x7f0 [ 2712.332039][T13174] ? __pfx_netlink_unicast+0x10/0x10 [ 2712.333399][T13174] ? const_folio_flags.constprop.0+0x56/0x150 [ 2712.334981][T13174] ? __phys_addr_symbol+0x30/0x80 [ 2712.336308][T13174] ? __check_object_size+0x497/0x720 [ 2712.337682][T13174] netlink_sendmsg+0x8b8/0xd70 [ 2712.338941][T13174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2712.340335][T13174] ____sys_sendmsg+0x9ae/0xb40 [ 2712.341588][T13174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2712.342963][T13174] ? get_compat_msghdr+0x11b/0x170 [ 2712.344310][T13174] ? __pfx___lock_acquire+0x10/0x10 [ 2712.345678][T13174] ___sys_sendmsg+0x135/0x1e0 [ 2712.346910][T13174] ? __pfx____sys_sendmsg+0x10/0x10 [ 2712.348249][T13174] ? find_held_lock+0x2d/0x110 [ 2712.349519][T13174] ? __fget_light+0x173/0x210 [ 2712.350730][T13174] __sys_sendmsg+0x117/0x1f0 [ 2712.352096][T13174] ? __pfx___sys_sendmsg+0x10/0x10 [ 2712.353526][T13174] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2712.355040][T13174] __do_fast_syscall_32+0x73/0x120 [ 2712.356401][T13174] do_fast_syscall_32+0x32/0x80 [ 2712.357624][T13174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2712.359262][T13174] RIP: 0023:0xf7fc3579 [ 2712.360353][T13174] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2712.365535][T13174] RSP: 002b:00000000f572556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2712.367658][T13174] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2712.369652][T13174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2712.371722][T13174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2712.373743][T13174] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2712.375745][T13174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2712.377745][T13174] [ 2712.542269][T30467] usb 7-1: USB disconnect, device number 5 [ 2712.545786][T30467] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 2712.918997][T13178] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 2713.138670][T13179] IPVS: stopping backup sync thread 13178 ... [ 2713.426731][T13189] siw: device registration error -23 [ 2713.432435][ T39] kauditd_printk_skb: 66 callbacks suppressed [ 2713.432450][ T39] audit: type=1326 audit(1726582010.284:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.447595][ T39] audit: type=1326 audit(1726582010.295:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.468123][ T39] audit: type=1326 audit(1726582010.305:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=460 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.475425][ T39] audit: type=1326 audit(1726582010.305:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.496965][ T39] audit: type=1326 audit(1726582010.305:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.513907][ T39] audit: type=1326 audit(1726582010.305:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.523990][ T39] audit: type=1326 audit(1726582010.305:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.531435][ T39] audit: type=1326 audit(1726582010.305:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.539573][ T39] audit: type=1326 audit(1726582010.305:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.548141][ T39] audit: type=1326 audit(1726582010.305:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.2.11332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 2713.551337][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2713.569251][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2713.600308][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2713.615393][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2713.642242][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2713.655273][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2713.681142][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2713.689006][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2713.693618][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2713.703118][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2713.706912][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2713.712986][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2713.753523][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2713.762910][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2713.909500][T13196] tipc: Enabling of bearer rejected, already enabled [ 2714.240777][T13207] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11338'. [ 2714.256834][T13207] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2714.262527][T13207] CPU: 1 UID: 0 PID: 13207 Comm: syz.3.11338 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2714.265502][T13207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2714.268629][T13207] Call Trace: [ 2714.269826][T13207] [ 2714.270942][T13207] dump_stack_lvl+0x16c/0x1f0 [ 2714.272743][T13207] sysfs_warn_dup+0x7f/0xa0 [ 2714.274390][T13207] sysfs_do_create_link_sd+0x124/0x140 [ 2714.276435][T13207] sysfs_create_link+0x61/0xc0 [ 2714.278109][T13207] device_add+0x62e/0x1a70 [ 2714.279704][T13207] ? __pfx_device_add+0x10/0x10 [ 2714.281824][T13207] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2714.283889][T13207] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2714.286088][T13207] wiphy_register+0x20d7/0x2d30 [ 2714.287992][T13207] ? __pfx_wiphy_register+0x10/0x10 [ 2714.289935][T13207] ieee80211_register_hw+0x2959/0x3fb0 [ 2714.291904][T13207] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2714.293928][T13207] ? lockdep_init_map_type+0x16d/0x7d0 [ 2714.295789][T13207] ? rcu_is_watching+0x12/0xc0 [ 2714.297437][T13207] ? __hrtimer_init+0x106/0x2c0 [ 2714.299102][T13207] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2714.301108][T13207] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2714.303173][T13207] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2714.305415][T13207] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2714.307343][T13207] hwsim_new_radio_nl+0xb42/0x12b0 [ 2714.309173][T13207] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2714.311168][T13207] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2714.313724][T13207] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2714.316228][T13207] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2714.318104][T13207] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2714.320194][T13207] ? bpf_lsm_capable+0x9/0x10 [ 2714.321819][T13207] ? security_capable+0x7e/0x260 [ 2714.323527][T13207] ? ns_capable+0xd7/0x110 [ 2714.325081][T13207] genl_rcv_msg+0x565/0x800 [ 2714.326630][T13207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2714.328165][T13207] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2714.329664][T13207] netlink_rcv_skb+0x165/0x410 [ 2714.331122][T13207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2714.332658][T13207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2714.334068][T13207] ? down_read+0xc9/0x330 [ 2714.335222][T13207] ? __pfx_down_read+0x10/0x10 [ 2714.337104][T13207] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2714.339145][T13207] genl_rcv+0x28/0x40 [ 2714.340680][T13207] netlink_unicast+0x53c/0x7f0 [ 2714.342497][T13207] ? __pfx_netlink_unicast+0x10/0x10 [ 2714.344775][T13207] ? const_folio_flags.constprop.0+0x56/0x150 [ 2714.347040][T13207] ? __phys_addr_symbol+0x30/0x80 [ 2714.348964][T13207] ? __check_object_size+0x497/0x720 [ 2714.350999][T13207] netlink_sendmsg+0x8b8/0xd70 [ 2714.352813][T13207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2714.354846][T13207] ____sys_sendmsg+0x9ae/0xb40 [ 2714.356736][T13207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2714.358604][T13207] ? get_compat_msghdr+0x11b/0x170 [ 2714.360411][T13207] ? __pfx___lock_acquire+0x10/0x10 [ 2714.362108][T13207] ___sys_sendmsg+0x135/0x1e0 [ 2714.363426][T13207] ? __pfx____sys_sendmsg+0x10/0x10 [ 2714.364902][T13207] ? find_held_lock+0x2d/0x110 [ 2714.366218][T13207] ? __fget_light+0x173/0x210 [ 2714.367449][T13207] __sys_sendmsg+0x117/0x1f0 [ 2714.368770][T13207] ? __pfx___sys_sendmsg+0x10/0x10 [ 2714.370223][T13207] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2714.371921][T13207] __do_fast_syscall_32+0x73/0x120 [ 2714.373304][T13207] do_fast_syscall_32+0x32/0x80 [ 2714.374602][T13207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2714.376417][T13207] RIP: 0023:0xf7fdf579 [ 2714.377672][T13207] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2714.383376][T13207] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2714.385685][T13207] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2714.387792][T13207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2714.389905][T13207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2714.392020][T13207] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2714.394141][T13207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2714.396245][T13207] [ 2714.425619][T13201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11335'. [ 2714.925178][T30467] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2715.139136][T30467] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2715.142677][T30467] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2715.157845][T30467] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2715.160623][T30467] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2715.189125][T30467] usb 7-1: config 0 descriptor?? [ 2715.373996][T13214] tipc: Enabling of bearer rejected, already enabled [ 2715.623526][T30467] hid-led 0003:0FC5:B080.0023: item fetching failed at offset 0/3 [ 2715.627952][T30467] hid-led 0003:0FC5:B080.0023: probe with driver hid-led failed with error -22 [ 2717.443403][ T1428] usb 7-1: USB disconnect, device number 6 [ 2718.555807][T13241] sd 0:0:0:0: PR command failed: 1026 [ 2718.589268][T13241] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 2718.591363][T13241] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 2719.115666][T13249] ADFS-fs (nullb0): unrecognised mount option "'{hYq1o}3Tಡ/Nq<%^v͆N[>Ac6捯.F7" or missing value [ 2719.199462][T13250] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11348'. [ 2719.262741][T13250] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2719.265986][T13250] CPU: 3 UID: 0 PID: 13250 Comm: syz.3.11348 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2719.268674][T13250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2719.271466][T13250] Call Trace: [ 2719.272360][T13250] [ 2719.273153][T13250] dump_stack_lvl+0x16c/0x1f0 [ 2719.274402][T13250] sysfs_warn_dup+0x7f/0xa0 [ 2719.275610][T13250] sysfs_do_create_link_sd+0x124/0x140 [ 2719.277060][T13250] sysfs_create_link+0x61/0xc0 [ 2719.278336][T13250] device_add+0x62e/0x1a70 [ 2719.279527][T13250] ? __pfx_device_add+0x10/0x10 [ 2719.280813][T13250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2719.282369][T13250] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2719.283962][T13250] wiphy_register+0x20d7/0x2d30 [ 2719.285273][T13250] ? __pfx_wiphy_register+0x10/0x10 [ 2719.286664][T13250] ieee80211_register_hw+0x2959/0x3fb0 [ 2719.288153][T13250] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2719.289713][T13250] ? lockdep_init_map_type+0x16d/0x7d0 [ 2719.291169][T13250] ? rcu_is_watching+0x12/0xc0 [ 2719.292697][T13250] ? __hrtimer_init+0x106/0x2c0 [ 2719.294012][T13250] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2719.295519][T13250] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2719.297134][T13250] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2719.298858][T13250] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2719.300267][T13250] hwsim_new_radio_nl+0xb42/0x12b0 [ 2719.301620][T13250] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2719.303092][T13250] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2719.305020][T13250] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2719.306928][T13250] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2719.308398][T13250] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2719.309976][T13250] ? bpf_lsm_capable+0x9/0x10 [ 2719.311208][T13250] ? security_capable+0x7e/0x260 [ 2719.312510][T13250] ? ns_capable+0xd7/0x110 [ 2719.313679][T13250] genl_rcv_msg+0x565/0x800 [ 2719.314871][T13250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2719.316189][T13250] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2719.317665][T13250] netlink_rcv_skb+0x165/0x410 [ 2719.318916][T13250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2719.320263][T13250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2719.321660][T13250] ? down_read+0xc9/0x330 [ 2719.322752][T13250] ? __pfx_down_read+0x10/0x10 [ 2719.324026][T13250] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2719.325409][T13250] genl_rcv+0x28/0x40 [ 2719.326461][T13250] netlink_unicast+0x53c/0x7f0 [ 2719.327722][T13250] ? __pfx_netlink_unicast+0x10/0x10 [ 2719.329103][T13250] ? const_folio_flags.constprop.0+0x56/0x150 [ 2719.330709][T13250] ? __phys_addr_symbol+0x30/0x80 [ 2719.332077][T13250] ? __check_object_size+0x497/0x720 [ 2719.333496][T13250] netlink_sendmsg+0x8b8/0xd70 [ 2719.334796][T13250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2719.336238][T13250] ____sys_sendmsg+0x9ae/0xb40 [ 2719.337533][T13250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2719.338910][T13250] ? get_compat_msghdr+0x11b/0x170 [ 2719.340255][T13250] ? __pfx___lock_acquire+0x10/0x10 [ 2719.341600][T13250] ? try_to_wake_up+0x14b/0x13e0 [ 2719.342894][T13250] ___sys_sendmsg+0x135/0x1e0 [ 2719.344140][T13250] ? __pfx____sys_sendmsg+0x10/0x10 [ 2719.345495][T13250] ? find_held_lock+0x2d/0x110 [ 2719.346764][T13250] ? __fget_light+0x173/0x210 [ 2719.348020][T13250] __sys_sendmsg+0x117/0x1f0 [ 2719.349239][T13250] ? __pfx___sys_sendmsg+0x10/0x10 [ 2719.350610][T13250] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2719.352207][T13250] __do_fast_syscall_32+0x73/0x120 [ 2719.353679][T13250] do_fast_syscall_32+0x32/0x80 [ 2719.355065][T13250] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2719.356782][T13250] RIP: 0023:0xf7fdf579 [ 2719.357847][T13250] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2719.362839][T13250] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2719.365018][T13250] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2719.367184][T13250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2719.369447][T13250] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2719.371555][T13250] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2719.373681][T13250] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2719.375745][T13250] [ 2720.437938][T13269] FAULT_INJECTION: forcing a failure. [ 2720.437938][T13269] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.449669][T13269] CPU: 3 UID: 0 PID: 13269 Comm: syz.3.11353 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2720.452485][T13269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2720.455409][T13269] Call Trace: [ 2720.456350][T13269] [ 2720.457215][T13269] dump_stack_lvl+0x16c/0x1f0 [ 2720.458583][T13269] should_fail_ex+0x497/0x5b0 [ 2720.459959][T13269] ? fs_reclaim_acquire+0xae/0x160 [ 2720.461450][T13269] should_failslab+0xc2/0x120 [ 2720.462677][T13269] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 2720.464050][T13269] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 2720.465662][T13269] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 2720.467235][T13269] mmu_topup_memory_caches+0x22/0xd0 [ 2720.468664][T13269] kvm_mmu_load+0xda/0x20d0 [ 2720.469891][T13269] ? mark_held_locks+0x9f/0xe0 [ 2720.471176][T13269] ? __pfx___lock_acquire+0x10/0x10 [ 2720.472577][T13269] ? irqentry_exit+0x3b/0x90 [ 2720.473838][T13269] ? lockdep_hardirqs_on+0x7c/0x110 [ 2720.475277][T13269] ? __pfx_kvm_mmu_load+0x10/0x10 [ 2720.476726][T13269] kvm_arch_vcpu_pre_fault_memory+0x476/0x590 [ 2720.478492][T13269] ? kvm_arch_vcpu_load+0x4ba/0x980 [ 2720.480024][T13269] ? __pfx_kvm_arch_vcpu_pre_fault_memory+0x10/0x10 [ 2720.481884][T13269] kvm_vcpu_ioctl+0xebb/0x1510 [ 2720.483237][T13269] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2720.484657][T13269] ? tomoyo_path_number_perm+0x190/0x5b0 [ 2720.486165][T13269] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2720.487800][T13269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2720.489413][T13269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2720.491036][T13269] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 2720.492456][T13269] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2720.494026][T13269] ? __fget_files+0x244/0x3f0 [ 2720.495307][T13269] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 2720.496954][T13269] __do_compat_sys_ioctl+0x2bd/0x330 [ 2720.498543][T13269] __do_fast_syscall_32+0x73/0x120 [ 2720.499948][T13269] do_fast_syscall_32+0x32/0x80 [ 2720.501257][T13269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2720.502961][T13269] RIP: 0023:0xf7fdf579 [ 2720.504067][T13269] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2720.509190][T13269] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2720.511409][T13269] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c040aed5 [ 2720.513508][T13269] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 2720.515611][T13269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2720.517714][T13269] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2720.519853][T13269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2720.521957][T13269] [ 2721.646842][T13276] FAULT_INJECTION: forcing a failure. [ 2721.646842][T13276] name failslab, interval 1, probability 0, space 0, times 0 [ 2721.650345][T13276] CPU: 3 UID: 0 PID: 13276 Comm: syz.0.11354 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2721.654435][T13276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2721.658015][T13276] Call Trace: [ 2721.658920][T13276] [ 2721.659706][T13276] dump_stack_lvl+0x16c/0x1f0 [ 2721.660968][T13276] should_fail_ex+0x497/0x5b0 [ 2721.662210][T13276] ? fs_reclaim_acquire+0xae/0x160 [ 2721.663558][T13276] should_failslab+0xc2/0x120 [ 2721.664822][T13276] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 2721.666294][T13276] ? p9_tag_alloc+0x9c/0x870 [ 2721.667620][T13276] p9_tag_alloc+0x9c/0x870 [ 2721.669129][T13276] ? __pfx_p9_tag_alloc+0x10/0x10 [ 2721.671163][T13276] ? lock_acquire+0x1b1/0x560 [ 2721.673050][T13276] ? __pfx_lock_acquire+0x10/0x10 [ 2721.674961][T13276] p9_client_prepare_req+0x19f/0x4d0 [ 2721.676935][T13276] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 2721.678505][T13276] p9_client_rpc+0x1c3/0xc10 [ 2721.679790][T13276] ? __pfx_p9_client_rpc+0x10/0x10 [ 2721.681141][T13276] ? pipe_poll+0x208/0x8a0 [ 2721.682332][T13276] ? __pfx_p9_pollwait+0x10/0x10 [ 2721.683639][T13276] ? __pfx_pipe_poll+0x10/0x10 [ 2721.685583][T13276] ? p9_fd_poll+0x1db/0x2c0 [ 2721.687263][T13276] ? p9_fd_create+0x328/0x490 [ 2721.688726][T13276] ? __pfx_p9_fd_create+0x10/0x10 [ 2721.690346][T13276] ? kfree+0x12a/0x3b0 [ 2721.692130][T13276] ? p9_client_create+0x7ad/0x11b0 [ 2721.694041][T13276] p9_client_create+0xc03/0x11b0 [ 2721.695960][T13276] ? __pfx_p9_client_create+0x10/0x10 [ 2721.697592][T13276] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2721.699314][T13276] ? v9fs_session_init+0x1f8/0x1a80 [ 2721.701135][T13276] v9fs_session_init+0x1f8/0x1a80 [ 2721.702518][T13276] ? __pfx_v9fs_session_init+0x10/0x10 [ 2721.703527][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.704133][T13276] ? kasan_save_track+0x14/0x30 [ 2721.706075][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.707329][T13276] v9fs_mount+0xc6/0xa50 [ 2721.711340][T13276] ? __pfx_v9fs_mount+0x10/0x10 [ 2721.713168][T13276] ? __pfx_v9fs_mount+0x10/0x10 [ 2721.714961][T13276] legacy_get_tree+0x109/0x220 [ 2721.716721][T13276] vfs_get_tree+0x8f/0x380 [ 2721.717146][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.717953][T13276] path_mount+0x6e1/0x1f10 [ 2721.719910][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.721300][T13276] ? __pfx_path_mount+0x10/0x10 [ 2721.721325][T13276] ? putname+0x12e/0x170 [ 2721.721341][T13276] ? putname+0x12e/0x170 [ 2721.723340][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.724769][T13276] __ia32_sys_mount+0x292/0x310 [ 2721.725887][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.726989][T13276] ? __pfx___ia32_sys_mount+0x10/0x10 [ 2721.727015][T13276] __do_fast_syscall_32+0x73/0x120 [ 2721.736069][T13276] do_fast_syscall_32+0x32/0x80 [ 2721.737341][T13276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2721.738396][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.738978][T13276] RIP: 0023:0xf7fc3579 [ 2721.741011][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.742403][T13276] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2721.744337][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.749323][T13276] RSP: 002b:00000000f574656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 2721.749345][T13276] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200004c0 [ 2721.749352][T13276] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000020000700 [ 2721.749359][T13276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2721.749365][T13276] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2721.749371][T13276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2721.749387][T13276] [ 2721.764813][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.774322][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.776654][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.783975][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.786130][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.793340][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.796938][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.799170][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.801343][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.814064][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.818485][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.820353][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.831217][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.833541][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.841041][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.843339][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.848891][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.854596][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.857055][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.859550][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.867846][T13280] input: syz1 as /devices/virtual/input/input144 [ 2721.870408][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.872657][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.882716][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.885362][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.887765][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.898148][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.900730][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.905656][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.908757][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.912529][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.918520][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.920511][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.922549][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.924489][T26665] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2721.927956][T26665] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2721.995388][T13287] input: syz1 as /devices/virtual/input/input145 [ 2723.532781][T13334] FAULT_INJECTION: forcing a failure. [ 2723.532781][T13334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2723.546250][T13334] CPU: 1 UID: 0 PID: 13334 Comm: syz.2.11374 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2723.550360][T13334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2723.554282][T13334] Call Trace: [ 2723.555528][T13334] [ 2723.556653][T13334] dump_stack_lvl+0x16c/0x1f0 [ 2723.558426][T13334] should_fail_ex+0x497/0x5b0 [ 2723.560233][T13334] _copy_to_user+0x30/0xc0 [ 2723.561920][T13334] simple_read_from_buffer+0xd0/0x160 [ 2723.563942][T13334] proc_fail_nth_read+0x198/0x270 [ 2723.566011][T13334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2723.568176][T13334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2723.570272][T13334] vfs_read+0x1ce/0xbd0 [ 2723.571844][T13334] ? __fdget_pos+0xe8/0x170 [ 2723.573574][T13334] ? __pfx_vfs_read+0x10/0x10 [ 2723.575332][T13334] ? __pfx___mutex_lock+0x10/0x10 [ 2723.577190][T13334] ? __fget_files+0x244/0x3f0 [ 2723.578962][T13334] ksys_read+0x12f/0x260 [ 2723.580606][T13334] ? __pfx_ksys_read+0x10/0x10 [ 2723.582471][T13334] __do_fast_syscall_32+0x73/0x120 [ 2723.584653][T13334] do_fast_syscall_32+0x32/0x80 [ 2723.586711][T13334] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2723.589251][T13334] RIP: 0023:0xf745e579 [ 2723.590792][T13334] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2723.597746][T13334] RSP: 002b:00000000f57465a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2723.600751][T13334] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5746620 [ 2723.603576][T13334] RDX: 000000000000000f RSI: 00000000f744bff4 RDI: 0000000000000000 [ 2723.606480][T13334] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2723.609650][T13334] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2723.612544][T13334] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2723.615473][T13334] [ 2723.823206][T13339] input: syz1 as /devices/virtual/input/input147 [ 2723.905949][T13345] FAULT_INJECTION: forcing a failure. [ 2723.905949][T13345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2723.915094][T13345] CPU: 2 UID: 0 PID: 13345 Comm: syz.3.11378 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2723.918211][T13345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2723.921000][T13345] Call Trace: [ 2723.921880][T13345] [ 2723.922660][T13345] dump_stack_lvl+0x16c/0x1f0 [ 2723.923895][T13345] should_fail_ex+0x497/0x5b0 [ 2723.925122][T13345] _copy_to_user+0x30/0xc0 [ 2723.926297][T13345] simple_read_from_buffer+0xd0/0x160 [ 2723.927842][T13345] proc_fail_nth_read+0x198/0x270 [ 2723.929170][T13345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2723.930620][T13345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2723.932081][T13345] vfs_read+0x1ce/0xbd0 [ 2723.933176][T13345] ? __fdget_pos+0xe8/0x170 [ 2723.934383][T13345] ? __pfx_vfs_read+0x10/0x10 [ 2723.935660][T13345] ? __pfx___mutex_lock+0x10/0x10 [ 2723.937086][T13345] ? __fget_files+0x244/0x3f0 [ 2723.938463][T13345] ksys_read+0x12f/0x260 [ 2723.939611][T13345] ? __pfx_ksys_read+0x10/0x10 [ 2723.940923][T13345] __do_fast_syscall_32+0x73/0x120 [ 2723.942272][T13345] do_fast_syscall_32+0x32/0x80 [ 2723.943539][T13345] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2723.945188][T13345] RIP: 0023:0xf7fdf579 [ 2723.946251][T13345] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2723.952999][T13345] RSP: 002b:00000000f57665a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2723.955132][T13345] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5766620 [ 2723.957481][T13345] RDX: 000000000000000f RSI: 00000000f746bff4 RDI: 0000000000000000 [ 2723.959662][T13345] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2723.961759][T13345] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2723.963813][T13345] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2723.965864][T13345] [ 2723.966747][ C2] vkms_vblank_simulate: vblank timer overrun [ 2723.998553][T13346] input: syz1 as /devices/virtual/input/input148 [ 2724.155089][T13354] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11381'. [ 2724.401282][T13368] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11384'. [ 2724.410629][T13368] sysfs: cannot create duplicate filename '/class/ieee80211/ !' [ 2724.413566][T13368] CPU: 0 UID: 0 PID: 13368 Comm: syz.3.11384 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2724.417057][T13368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2724.421209][T13368] Call Trace: [ 2724.422549][T13368] [ 2724.423636][T13368] dump_stack_lvl+0x16c/0x1f0 [ 2724.425231][T13368] sysfs_warn_dup+0x7f/0xa0 [ 2724.426442][T13368] sysfs_do_create_link_sd+0x124/0x140 [ 2724.427964][T13368] sysfs_create_link+0x61/0xc0 [ 2724.429584][T13368] device_add+0x62e/0x1a70 [ 2724.431057][T13368] ? __pfx_device_add+0x10/0x10 [ 2724.432774][T13368] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2724.434599][T13368] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 2724.436870][T13368] wiphy_register+0x20d7/0x2d30 [ 2724.438888][T13368] ? __pfx_wiphy_register+0x10/0x10 [ 2724.440938][T13368] ieee80211_register_hw+0x2959/0x3fb0 [ 2724.442993][T13368] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 2724.445137][T13368] ? lockdep_init_map_type+0x16d/0x7d0 [ 2724.447084][T13368] ? rcu_is_watching+0x12/0xc0 [ 2724.448700][T13368] ? __hrtimer_init+0x106/0x2c0 [ 2724.450354][T13368] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 2724.452150][T13368] ? lockdep_hardirqs_on+0x7c/0x110 [ 2724.454031][T13368] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 2724.455784][T13368] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 2724.457854][T13368] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 2724.459338][T13368] hwsim_new_radio_nl+0xb42/0x12b0 [ 2724.460836][T13368] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2724.462253][T13368] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 2724.464284][T13368] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 2724.466233][T13368] genl_family_rcv_msg_doit+0x202/0x2f0 [ 2724.467884][T13368] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2724.469704][T13368] ? bpf_lsm_capable+0x9/0x10 [ 2724.471406][T13368] ? security_capable+0x7e/0x260 [ 2724.473186][T13368] ? ns_capable+0xd7/0x110 [ 2724.474446][T13368] genl_rcv_msg+0x565/0x800 [ 2724.475747][T13368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2724.477586][T13368] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 2724.479315][T13368] netlink_rcv_skb+0x165/0x410 [ 2724.480844][T13368] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2724.482484][T13368] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2724.484138][T13368] ? down_read+0xc9/0x330 [ 2724.485398][T13368] ? __pfx_down_read+0x10/0x10 [ 2724.486816][T13368] ? netlink_deliver_tap+0x1ae/0xcf0 [ 2724.488844][T13368] genl_rcv+0x28/0x40 [ 2724.490304][T13368] netlink_unicast+0x53c/0x7f0 [ 2724.492115][T13368] ? __pfx_netlink_unicast+0x10/0x10 [ 2724.494116][T13368] ? const_folio_flags.constprop.0+0x56/0x150 [ 2724.496143][T13368] ? __phys_addr_symbol+0x30/0x80 [ 2724.497470][T13368] ? __check_object_size+0x497/0x720 [ 2724.498919][T13368] netlink_sendmsg+0x8b8/0xd70 [ 2724.500501][T13368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2724.502507][T13368] ____sys_sendmsg+0x9ae/0xb40 [ 2724.504209][T13368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2724.505725][T13368] ? get_compat_msghdr+0x11b/0x170 [ 2724.507301][T13368] ? __pfx___lock_acquire+0x10/0x10 [ 2724.508819][T13368] ? try_to_wake_up+0xc08/0x13e0 [ 2724.510616][T13368] ___sys_sendmsg+0x135/0x1e0 [ 2724.512363][T13368] ? __pfx____sys_sendmsg+0x10/0x10 [ 2724.514277][T13368] ? find_held_lock+0x2d/0x110 [ 2724.515988][T13368] ? __pfx_futex_wake+0x10/0x10 [ 2724.517695][T13368] ? __fget_light+0x173/0x210 [ 2724.519339][T13368] __sys_sendmsg+0x117/0x1f0 [ 2724.520999][T13368] ? __pfx___sys_sendmsg+0x10/0x10 [ 2724.522508][T13368] ? __ia32_sys_futex_time32+0x1da/0x460 [ 2724.524519][T13368] __do_fast_syscall_32+0x73/0x120 [ 2724.526186][T13368] do_fast_syscall_32+0x32/0x80 [ 2724.527496][T13368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2724.529589][T13368] RIP: 0023:0xf7fdf579 [ 2724.530764][T13368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2724.537239][T13368] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2724.540219][T13368] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000020000000 [ 2724.543047][T13368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2724.545798][T13368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2724.548673][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2724.551162][T13368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2724.553839][T13368] [ 2726.428505][T13390] ================================================================== [ 2726.430614][T13390] BUG: KASAN: vmalloc-out-of-bounds in acpi_nfit_ctl+0x199a/0x1ca0 [ 2726.432690][T13390] Read of size 4 at addr ffffc9000323d038 by task syz.1.11390/13390 [ 2726.436281][T13390] [ 2726.438046][T13390] CPU: 0 UID: 0 PID: 13390 Comm: syz.1.11390 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2726.440837][T13390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2726.444560][T13390] Call Trace: [ 2726.445826][T13390] [ 2726.446883][T13390] dump_stack_lvl+0x116/0x1f0 [ 2726.448470][T13390] print_report+0xc3/0x620 [ 2726.449668][T13390] ? __virt_addr_valid+0x5e/0x590 [ 2726.451095][T13390] kasan_report+0xd9/0x110 [ 2726.452339][T13390] ? acpi_nfit_ctl+0x199a/0x1ca0 [ 2726.453660][T13390] ? acpi_nfit_ctl+0x199a/0x1ca0 [ 2726.454967][T13390] acpi_nfit_ctl+0x199a/0x1ca0 [ 2726.456264][T13390] ? trace_contention_end+0xea/0x140 [ 2726.457667][T13390] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 2726.459031][T13390] ? __mutex_lock+0x1a6/0x9c0 [ 2726.460320][T13390] ? nd_ioctl+0xf7a/0x18c0 [ 2726.461511][T13390] ? __pfx___mutex_lock+0x10/0x10 [ 2726.462817][T13390] nd_ioctl+0x13bc/0x18c0 [ 2726.463974][T13390] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 2726.465547][T13390] ? __pfx_nd_ioctl+0x10/0x10 [ 2726.466801][T13390] ? __fget_files+0x244/0x3f0 [ 2726.468111][T13390] ? __pfx_bus_ioctl+0x10/0x10 [ 2726.468128][T13390] compat_ptr_ioctl+0x6b/0xa0 [ 2726.468141][T13390] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 2726.468152][T13390] __do_compat_sys_ioctl+0x2bd/0x330 [ 2726.473991][T13390] __do_fast_syscall_32+0x73/0x120 [ 2726.475326][T13390] do_fast_syscall_32+0x32/0x80 [ 2726.476641][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2726.478302][T13390] RIP: 0023:0xf7f02579 [ 2726.479387][T13390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2726.484436][T13390] RSP: 002b:00000000f564456c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2726.486618][T13390] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c008640a [ 2726.488726][T13390] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 2726.490817][T13390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2726.492898][T13390] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2726.494965][T13390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2726.497042][T13390] [ 2726.497863][T13390] [ 2726.498504][T13390] The buggy address belongs to the virtual mapping at [ 2726.498504][T13390] [ffffc9000323d000, ffffc9000323f000) created by: [ 2726.498504][T13390] nd_ioctl+0xf14/0x18c0 [ 2726.502958][T13390] [ 2726.503594][T13390] The buggy address belongs to the physical page: [ 2726.505282][T13390] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x20 pfn:0x5b616 [ 2726.507582][T13390] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 2726.509476][T13390] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 2726.511724][T13390] raw: 0000000000000020 0000000000000000 00000001ffffffff 0000000000000000 [ 2726.513971][T13390] page dumped because: kasan: bad access detected [ 2726.515658][T13390] page_owner tracks the page as allocated [ 2726.517158][T13390] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 13390, tgid 13387 (syz.1.11390), ts 2726428491566, free_ts 2723697987862 [ 2726.522169][T13390] post_alloc_hook+0x2d1/0x350 [ 2726.523515][T13390] get_page_from_freelist+0x1351/0x2e50 [ 2726.524988][T13390] __alloc_pages_noprof+0x22b/0x2460 [ 2726.526369][T13390] alloc_pages_bulk_noprof+0x742/0x14f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2726.527828][T13390] alloc_pages_bulk_array_mempolicy_noprof+0x25b/0x1220 [ 2726.530671][T13390] __vmalloc_node_range_noprof+0x51e/0x14e0 [ 2726.532901][T13390] vmalloc_noprof+0x6b/0x90 [ 2726.534754][T13390] nd_ioctl+0xf14/0x18c0 [ 2726.536498][T13390] compat_ptr_ioctl+0x6b/0xa0 [ 2726.538281][T13390] __do_compat_sys_ioctl+0x2bd/0x330 [ 2726.540218][T13390] __do_fast_syscall_32+0x73/0x120 [ 2726.542074][T13390] do_fast_syscall_32+0x32/0x80 [ 2726.543846][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2726.546096][T13390] page last free pid 22782 tgid 22782 stack trace: [ 2726.548451][T13390] free_unref_page+0x64a/0xe40 [ 2726.550210][T13390] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 2726.552295][T13390] __apply_to_page_range+0x795/0xdd0 [ 2726.554263][T13390] kasan_release_vmalloc+0xac/0xc0 [ 2726.555835][T13390] purge_vmap_node+0x3ec/0x920 [ 2726.557387][T13390] __purge_vmap_area_lazy+0x9ca/0xc10 [ 2726.559319][T13390] drain_vmap_area_work+0x27/0x40 [ 2726.561159][T13390] process_one_work+0x958/0x1ad0 [ 2726.562963][T13390] worker_thread+0x6c8/0xf00 [ 2726.564640][T13390] kthread+0x2c1/0x3a0 [ 2726.566076][T13390] ret_from_fork+0x45/0x80 [ 2726.567724][T13390] ret_from_fork_asm+0x1a/0x30 [ 2726.569594][T13390] [ 2726.570548][T13390] Memory state around the buggy address: [ 2726.572650][T13390] ffffc9000323cf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2726.575475][T13390] ffffc9000323cf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2726.578114][T13390] >ffffc9000323d000: 00 00 00 00 00 00 00 03 f8 f8 f8 f8 f8 f8 f8 f8 [ 2726.581062][T13390] ^ [ 2726.583407][T13390] ffffc9000323d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2726.586440][T13390] ffffc9000323d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2726.589840][T13390] ================================================================== [ 2726.599536][T13390] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2726.602426][T13390] CPU: 2 UID: 0 PID: 13390 Comm: syz.1.11390 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 2726.606630][T13390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2726.611151][T13390] Call Trace: [ 2726.612711][T13390] [ 2726.613978][T13390] dump_stack_lvl+0x3d/0x1f0 [ 2726.615608][T13390] panic+0x6dc/0x7c0 [ 2726.616999][T13390] ? __pfx_panic+0x10/0x10 [ 2726.618565][T13390] ? preempt_schedule_thunk+0x1a/0x30 [ 2726.620442][T13390] ? preempt_schedule_common+0x44/0xc0 [ 2726.622355][T13390] ? check_panic_on_warn+0x1f/0xb0 [ 2726.624189][T13390] check_panic_on_warn+0xab/0xb0 [ 2726.625546][T13390] end_report+0x117/0x180 [ 2726.626669][T13390] kasan_report+0xe9/0x110 [ 2726.628144][T13390] ? acpi_nfit_ctl+0x199a/0x1ca0 [ 2726.629962][T13390] ? acpi_nfit_ctl+0x199a/0x1ca0 [ 2726.631877][T13390] acpi_nfit_ctl+0x199a/0x1ca0 [ 2726.633677][T13390] ? trace_contention_end+0xea/0x140 [ 2726.635601][T13390] ? __pfx_acpi_nfit_ctl+0x10/0x10 [ 2726.637388][T13390] ? __mutex_lock+0x1a6/0x9c0 [ 2726.639029][T13390] ? nd_ioctl+0xf7a/0x18c0 [ 2726.640596][T13390] ? __pfx___mutex_lock+0x10/0x10 [ 2726.642363][T13390] nd_ioctl+0x13bc/0x18c0 [ 2726.643891][T13390] ? __pfx_acpi_nfit_clear_to_send+0x10/0x10 [ 2726.645975][T13390] ? __pfx_nd_ioctl+0x10/0x10 [ 2726.647662][T13390] ? __fget_files+0x244/0x3f0 [ 2726.649024][T13390] ? __pfx_bus_ioctl+0x10/0x10 [ 2726.650290][T13390] compat_ptr_ioctl+0x6b/0xa0 [ 2726.651687][T13390] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 2726.653129][T13390] __do_compat_sys_ioctl+0x2bd/0x330 [ 2726.654981][T13390] __do_fast_syscall_32+0x73/0x120 [ 2726.656555][T13390] do_fast_syscall_32+0x32/0x80 [ 2726.658061][T13390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2726.660037][T13390] RIP: 0023:0xf7f02579 [ 2726.661475][T13390] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2726.668149][T13390] RSP: 002b:00000000f564456c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2726.671029][T13390] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c008640a [ 2726.673883][T13390] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 2726.676639][T13390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2726.679364][T13390] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2726.682081][T13390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2726.684826][T13390] [ 2726.686219][T13390] Kernel Offset: disabled [ 2726.687382][T13390] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:05:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fcd3b5 RDI=ffffffff9a5e9460 RBP=ffffffff9a5e9420 RSP=ffffc900032475d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330303039636652 R12=0000000000000000 R13=0000000000000031 R14=ffffffff84fcd350 R15=0000000000000000 RIP=ffffffff84fcd3df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000582c64c0 CR3=0000000065e30000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000037ec8 RCX=ffffffff81694e29 RDX=1ffffffff1aff371 RSI=ffffffff8bb09d00 RDI=ffffffff8d7f9b88 RBP=0000000000000001 RSP=ffffc9000781f9d8 R8 =0000000000000000 R9 =fffffbfff2036673 R10=ffffffff901b339f R11=0000000000000000 R12=ffff8880612500a8 R13=ffff888023018000 R14=000000000003d8cc R15=ffffc9000781fb40 RIP=ffffffff8171ac2d RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002002e000 CR3=0000000049e5e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=fffff5200458af32 RBX=0000000000000001 RCX=1ffffffff2d32f78 RDX=dffffc0000000000 RSI=ffff88801e53af48 RDI=ffff88801e53a440 RBP=ffffc90022c57aa0 RSP=ffffc90022c57960 R8 =0000000000000000 R9 =fffffbfff2d278fd R10=ffffffff9693c7ef R11=0000000000000000 R12=ffff88801e53a440 R13=dffffc0000000000 R14=0000000000000006 R15=1ffff9200458af32 RIP=ffffffff8168fabc RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055908ddaf280 CR3=000000004a702000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008220202 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ff5e233a0fbd2ce 3e40057140152df2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00967b7a401e7740 1952e8377e643b22 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff1041c0d1b3d3a1 ae186eed1f55c20e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 abb15766fd767eb4 443b92684b7785db ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002b80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000673a9 7c1c3e0000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000673a9000673a9 f4f94a00000673a9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000795bca00 0777ad005ee16400 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e597740080010000 00000000325ce000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 603ea5a2f4afd3f1 d9c891540dd5f189 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6ea58587be8639d 5d9d4ecdd8c336d2 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4154414600544549 55510029646c253d 646970282064253a 29287338342e253a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4154414600544549 5551000c41490018 414c550d0541001f 0c0d561d110b001f ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=ac2d215bac2d215b ac2d215bac2d215b ac2d215bac2d215b ac2d215bac2d215b ac2d215bac2d215b ac2d215bac2d215b ac2d215bac2d215b ac2d215bac2d215b ZMM22=df55a510df55a510 df55a510df55a510 df55a510df55a510 df55a510df55a510 df55a510df55a510 df55a510df55a510 df55a510df55a510 df55a510df55a510 ZMM23=aab59a72aab59a72 aab59a72aab59a72 aab59a72aab59a72 aab59a72aab59a72 aab59a72aab59a72 aab59a72aab59a72 aab59a72aab59a72 aab59a72aab59a72 ZMM24=e62ce014e62ce014 e62ce014e62ce014 e62ce014e62ce014 e62ce014e62ce014 e62ce014e62ce014 e62ce014e62ce014 e62ce014e62ce014 e62ce014e62ce014 ZMM25=ae0d07e2ae0d07e2 ae0d07e2ae0d07e2 ae0d07e2ae0d07e2 ae0d07e2ae0d07e2 ae0d07e2ae0d07e2 ae0d07e2ae0d07e2 ae0d07e2ae0d07e2 ae0d07e2ae0d07e2 ZMM26=cdfcc3f6cdfcc3f6 cdfcc3f6cdfcc3f6 cdfcc3f6cdfcc3f6 cdfcc3f6cdfcc3f6 cdfcc3f6cdfcc3f6 cdfcc3f6cdfcc3f6 cdfcc3f6cdfcc3f6 cdfcc3f6cdfcc3f6 ZMM27=d5a010c6d5a010c6 d5a010c6d5a010c6 d5a010c6d5a010c6 d5a010c6d5a010c6 d5a010c6d5a010c6 d5a010c6d5a010c6 d5a010c6d5a010c6 d5a010c6d5a010c6 ZMM28=000001300000012f 0000012e0000012d 0000012c0000012b 0000012a00000129 0000012800000127 0000012600000125 0000012400000123 0000012200000121 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9b4f00009b4f0000 9b4f00009b4f0000 9b4f00009b4f0000 9b4f00009b4f0000 9b4f00009b4f0000 9b4f00009b4f0000 9b4f00009b4f0000 9b4f00009b4f0000 info registers vcpu 3 CPU#3 RAX=ffff8880246fa020 RBX=ffff8880246fa000 RCX=ffffffff818278d4 RDX=ffff888020a08000 RSI=ffffffff81827992 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc90000e37a50 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88801e906000 R13=ffff88801e906030 R14=ffff88801ced6000 R15=ffff88801e906000 RIP=ffffffff818278aa RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000065e30000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 603ea5a2f4afd3f1 d9c891540dd5f189 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6ea58587be8639d 5d9d4ecdd8c336d2 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc7dcfdcb91c3326 bec54b7f28fad983 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc8ed6143038cfeb 336f9809371b348e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002b40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000673a7000673a8 919a8600a5e93c00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000673a7000673a8 000673a8000673a8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000042ca6e00 f1ae0800be872800 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e73ab400f4544200 000673a80668ea00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d92073126799e291 a15e9fb7c4338438 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02d550b1582d57c0 da78ee18e1228217 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000