last executing test programs: 6.228154165s ago: executing program 1 (id=1695): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7fffffff, 0x0, 0x0, 0xffffffff, 0x0, "ff3f66fa733f1b33e356d25b90c98fe587b88a"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000000}, 0x4040080) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff50000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.073679857s ago: executing program 1 (id=1696): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)) (async) waitid(0x0, 0x0, 0x0, 0x4, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) (async) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8487938", 0x6}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x314, &(0x7f00000002c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0xb, 0x4) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) (async) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES8=r3], 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5.960583897s ago: executing program 1 (id=1697): socket$inet_udp(0x2, 0x2, 0x0) 5.960191301s ago: executing program 1 (id=1698): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) io_setup(0x2, &(0x7f0000000380)=0x0) r2 = syz_io_uring_setup(0x7934, 0x0, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0)={0x0, 0x800, 0x0, 0x0, 0xcc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6e6a9ace1e35a607}) io_uring_enter(r2, 0xec4, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x8}}, 0x50) 5.802083761s ago: executing program 1 (id=1700): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x103382) r1 = memfd_create(&(0x7f00000014c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\xd8\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0$\xc1\xc7\x14\xf7\xba\xb5\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xe4\x8c\xe7\xae\xcc\xb33\xd6\xae\xddc!M^\x82\x84\a\xb4W\xc3\xab\xc3)\xc5\xb5\xe3Zv\xf9Z\xc2\xcc\x80eT\xde\x12\x94M\v/\x12u\x00z\xd5\xf3\xfd(\xd7\xad\xe0\xc1\xdd\x03\xc53\r\xf9\xe1\xcb\x8d\xc8\xb8\xba\xad\xf0rj\xc9\xe0e\x7f\xdd{\xabS[M\x00\xd8\x85?\xc5\x96\x83}W\x8d\xc8\xa6\x82\xfa\xb9\xee\xfa\r\xdd\x89\xda(;i\f\x91\xec\xfb1\t\xb0\x8c\xeeO\x81\xab3\x19b\v\xea\xd2\xaf,l9\xd4\\\xca\xb6y\x03\xc6_\xc9c\x98\x9d\xd6\xc4\xd7N@\x12\x9d\x17\xf1\x15Y\xdbL]\x96\xd4gjD\xfaP\xe0H\xa6\x889\xee8\xb2|\xad8\xddl\xcb2\xef\xb5N1d\xd8\x10\x92QE$]F\x96\xdb\xc6\xb3\xb9R\xb0\xb9\xf7\xe3\nR\x11\x1aLdA\t\x01\x03\x1d\t5\xaa\x82\x1c\x8c\xc4\x00\x00\x00\x00\x00\x00\x00\x00P;|\xa1\xf7\xae\xaa\x92G\xe8?z\xa4\xdf\x8d\"\xdbN\x00\xf7x\x94\x7f\xb6\xa5\xb0\xc4\xa4S\xe5\xc4\xa3fTm5\x84K\xc2\xedY\xady+\xba\xfeLi\xf2\xbc\x92\'\xc7\x04C\x84D^\xd4\x0fI\xb1\xe9\"]\xf4\xe98\xc9\"\xac\x0e\x8b\xb1\x12\xa6\xf7\xa9u\x9b\xcd\xd8\n\x04\x1a\xf8\r?y6\x8bd*\xed\x88<\xee\xd4*\xa9\x15\xff\x01)\xc9@\xbb\x97?\x1f\x19\x10\x8c\x8aOz\xae@\v\xdf\x01\x1b\xc1O\xe3\x9e\x82\x8f\xa1\xd8\xd1\xee\xf3\xaa)\xc4\xe7\xac\xdd\xb1s\xb8S\xfe\xc9g\x13A\x13s\xd3\x86\x12\x1an\x93\xbe\xee#\xbaL\x9anAh\xbb\x8b\xfePi(\x13\x1f\xd50a\xbd/=\xaf\xc4;\xd7\x92\xf9y \xe3m\xff$\xb5[/\a\xc9\xfcR\xdd\x9b\xf7\x14\xd7\x16\x15{~\xce\xa5\xda\x9d3N\xac\xe4\xe2\"\x00\x00\x00\x00\x00\x00\x00\xcc\x7f\x8d\x9c?[\x12\xe5\x80\xe6\xe9@E\xa5]\xe0\xe6\xfd\x9b\x18v\xb9\xf3@Wl5d5\x13\xb2\x12\xafmx7', 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', '', [], 0xa, "4f262d5e8485dbe5f9f9223927ea390000becf1fdddfc6a44b4382f478a183c8e94a75178929ef2e4000c59abd25d5623dff8dec15091f042b6b47266ab6bddb"}, 0x44) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r3, 0x10e, 0xc, 0x0, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c08, r1) 5.723034867s ago: executing program 1 (id=1702): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002780)=""/102392, 0xffffffffffffff89) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = io_uring_setup(0x181e, &(0x7f0000000080)={0x0, 0x2, 0x200, 0x2, 0x100000d5}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000170000/0x3000)=nil, 0x3000}, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x20000002) umount2(&(0x7f0000000000)='./file0\x00', 0x6) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r1, 0x9, 0x0, &(0x7f0000000380)=""/4096, &(0x7f0000000100)=0x1000) io_setup(0x1, &(0x7f0000000200)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x24}]) 3.584122123s ago: executing program 3 (id=1709): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x100, 0x36, 0x11}, 0x18) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x8a182) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r4, 0x69b8, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x2, {"ef2d64a3d7ed8e742ec0dc332e38c642"}, 0x168c, 0x6, 0x7}, @in={0x2, 0x4e24, @remote}}}, 0x118) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000003c0)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000400)}, 0x80000c0) socket$netlink(0x10, 0x3, 0x12) io_uring_setup(0x4d63, &(0x7f0000000300)={0x0, 0x0, 0x1208, 0x1, 0x2e0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x9f9, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc04c5609, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b248c8ea"}}) syz_init_net_socket$ax25(0x3, 0x3, 0x7) 2.922822994s ago: executing program 0 (id=1716): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @empty}, @ax25={0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @in={0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1f}) getpid() (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f0000000480)=ANY=[@ANYBLOB="7369c3617a652a382c6e725f696e6f6465733ddd58b61f4c091947641e8185fe76cd039adce7b0b76aacc5e4db10b8"]) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180081000000950000400000005d00000000fda800000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5c3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) sendfile(r3, r2, 0x0, 0x4) (async) sendfile(r2, r3, 0x0, 0x3) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000140)) (async) r7 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) (async) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async) rt_sigsuspend(&(0x7f0000000040), 0x8) 2.864174517s ago: executing program 0 (id=1718): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000240)='minix\x00', 0x2808088, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x4004) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1c) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000080)={0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2}) (async, rerun: 64) close_range(r6, 0xffffffffffffffff, 0x0) (async, rerun: 64) write(r5, &(0x7f0000000040)="05000000010000", 0x7) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) pipe(&(0x7f0000000080)) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0x69) 2.764290085s ago: executing program 0 (id=1719): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x9) r6 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) close(r6) add_key$keyring(&(0x7f0000000140), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x8) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) read$watch_queue(r4, &(0x7f0000000200)=""/88, 0x58) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000280), 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x14800a00, 0x0, 0x0, 0x0, 0x0, 0x0) 1.885903541s ago: executing program 0 (id=1723): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) io_setup(0x2, &(0x7f0000000380)=0x0) r2 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0)={0x0, 0x800, 0x0, 0x0, 0xcc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6e6a9ace1e35a607}) io_uring_enter(r2, 0xec4, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x8}}, 0x50) 1.869359136s ago: executing program 3 (id=1724): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440), 0x43) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = accept4(r1, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x5c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x6c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r8) 1.674144133s ago: executing program 0 (id=1725): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="13000000", @ANYRES16=r2, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) syz_usbip_server_init(0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20020680) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000140)=0x9}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601030a0000000000000000000000100003364c2201c453cac81b3697690062697446cc5c82706f72740005000400000000000900020073797a30000000000500050000000000"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306033f0000000000000000000000000500010007000000ff5763711fb70efa453bfd942a6b9de6be75a863e7069b11cfcccd650136ec3a60a8c798b8c9256343ea78ecd52014ebc12fe2d61749491d1a69218955196d602be7a0a03e69a6284afe93f1504aa210c5d49fb3f8d1d0c73e93f823e1f4d2f20bed619ecfc73f8685cd97c6ccf57b2a4b1ee59212"], 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r8) 1.003334245s ago: executing program 3 (id=1726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2000000000000019, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x5, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x3000000}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000000100)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x10}}, 0x8c}}, 0x0) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 845.927054ms ago: executing program 3 (id=1727): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = dup3(r3, r4, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x4, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) 502.457035ms ago: executing program 2 (id=1728): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x600}, 0x90) 444.279224ms ago: executing program 2 (id=1729): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x0, 0x201, 0x1, &(0x7f0000000100)="91"}], 0x1}) 438.627312ms ago: executing program 2 (id=1730): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000440)=0x2) 353.465852ms ago: executing program 2 (id=1731): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x2002, 0x0, 0x9) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="fb41d0bccf751a0046c50e2c9d5552e4e556499e39cacaf9f03a1a9467e9b51ccb457ef7ce9abc7fe03af496ff80bb548428563d69d839869323b9fa1108daea698ceba38a1bd7680ffeee4f104da9dcfdf21f51feecfb505161309ffe71772da089dad4e773734455322d7ee92d3c9b08de4d49dc2db3e0721c4259b9cfde2634b85a447cc0199eb9dad7c70482e1591d2e92f0ce7d522703d29d0244114e4643557bd58b8c7b4db792b0d830fb80677f4938bb722da1624ee444eec7dc100efa7a4f9357346a2945fb56815b27378a4095feb395e45c9c2f6fe7c082ea8e4b7cd66106469bf166c721acb4c1369c2ab3aecdc4fa2e85b382f9350e28bf059c2d8c42982d176c72066a5be9cde486e805cdd19c368a7de425fc347fecbe09ad1aa668158290f0fb406b84ec2d9059954c658bf755be9fa196efdac11b40879f66b4a1a72550657a652c99ed108e39468113cb2ae00d43771aaf99c7c72a2014fe394ae10251d82365f8eb73571bf0c1d443b1cf76b7319e18e2fbcf21e8099d9e47709c580d6e25ec39f9ded643855fb9e16eea85e74263898510248d06fef434fe2890b29e0a68aa2071c4d89b74b5a66fe252824923e4b1eb544e42735f52f0ac1889a1bee6abb0013a89f88096e9a67f1e7491e8af0ccbf930bf9992fac3eb188ce38f57fa995f5b486e25005b1d527400bcbe73fe19ddcd1e48a1e587e81207912a054a0359a19927baf13c49c529f2e06b3a1fa2d7d427e5292d517b647656283384923bcaa8081194252f1aebfeaba627350c61b2802b4c9010f5eb3f7071b2ae51eac7524412c184bfa55b4bf97afe34e32aa9c10aefa0a3fcd9db348752d09b9ffb0e8a3c29dc361d1a0f066a47d883accd4bc95e7f8d525c0d37bc06523a806a333711d80d79fb50dc3c8dc5f485da7592930148a6330be6b02deeeca484f8065c50516278d5217136e3fce6534f277dadef5bc9dbc070354fc9143e8044cac5f68e7917de6a3e7c7f0e68303df6f4b7549e58c8f25af459d6a6caa201c49a34aa8769e7a2c035417aeb18f17e085a61e27efd6bfd5e8d7f74479e73cd4a8b493ac1b6ac8ea54f44214d06324bc30457a7ac523ee688ee97024b433f788538a0a548e7d22aa9405165dbbbfa7509bd18e02e6a398fc8937eb47b97c160b2edc3277229d32de00ec7ac1f9fee3d35adddd69d4a4c7920e943c44288d83b122b4c509db02c66d86e8782c1e10259ee06251cdf338670a8c8f526c729add35d5b149cc88b34e36cbbe3b6a38421924a8f3e09d4ce00b3cf943bd77ca342679cab2adb0df82ee294439a1ff6af02b7cf65064ad36a01fb409c4b924ae1363035527855d15454b54f178b26119d58f04fba81f695a75c12ae8b26851cacb0a1d94e0125798b91c1d03137df3660ac10ec4982770d11eff8c74d3c406e1f17190ebaf96b4a281eddc23629f429ee0e561fccd56c1e72a200dce8c2a3733db34ad564c23e525c53786f816f2debf2c35ded162150b214e103ea42d24b28c7d48658991412798ec682feee94dad1cd0bc11c7060c1404ff6f27581f44e9532a780683bf7e02f3ee4733412268d8a6b7ab9a74c4aee2772d8119006bf03e738382a8d729860e6873b9704cef81011c6d553fa9367764f49b781737cb0cff613f5d4419b7a065b19e0c1378e3a9623751d409c7fd6d49c18e8ce85901d76547d01d2526f6014d41094de325db75a98b5290eb4e120c31e2fd4e208ab25c3e217f09270baedb9076eb4d50efe686313e2a1357b4ee19527c231c5cdb7e165ce22053009f3a5d2c86f8ac41938841f3c557366418c68e8c71404de4df886f209676e5220e4c363e536500d3e5967d00ca47aaa3f8cb960961a4fad6dc95816f88df387f822c1a8b99ab7a2392bbcbe641945dde1b97b9310e58c240f7e62dc79449a554d65ab2178ecdd9b41b9a34155c77d6a84bfe2a3326e256d62cb1471d1c9e400f147f293d6fa9c8152e16b9abfe1ad42e8a552c7cb2017042b838373a7d3268740bebbd99f2276978f3b28d06fe5512b821e711750a79301ab7b537c1efbb12f6be8cf7385c97ec13d0d12de5756d7efd9778b40485a813da628837f844588876ac97ee84f5313409eeb62c84804aa3a22aec3c1870821836a49d6e407554a3de1a529ee8e55a4c50967d7d814d0dad4960f3d793dca6bca6164cbce017286a8b9b9e13a3d1cc953f6d91e978f6158be0ca2db580a4249fe9965df847dbc4554f840b133ec28dc20dfa5a88f76a49ee0d07b99cebaa9927ef0756b2bde7b335498da24c6bb2ec34e5b38738bca879aba2222d2ca941aecba84035d177f081252cf47fd350086e694eed1f8ff639527d1171297a5a8b7fe87c4252d9361936805dcfdb8cc5692a216f2bf5e5440b39543f8a17ffb299515eb188489bd021665b96679fea156341ac713d209dde799b4587cb6d7f6e55ddb0ec7fc10fa179081646271d872c884f1860b9e3895465999831bd13fcd3106d486bc4fba59db3dd9ebd69cb41eda68c95912a4dff95a2496e6bdb77ac60676242a5626dd2b5616a32d43f6241189d1a89d2818bf64842b813b8ad97dff6a11fed2ff1b9d01af7ff4c878fa5be2c6bf1757fd01c8f2661ef2c0a3dad6d8f61deda9d7c00a76b27bd5a8d3764e623e446dabb77495a88151e274e001c3ecdac00d1147e12a7cf339d9ba9fe586b800e4282b14ebd46abbfab251de89a894504f33545d47e7f18d571c20f3d8bb513f5f5937b381e491ada77149bf5790c9b2e3b7b295549bd798db09e2a9a3c3f8e8073156a5bcc6de858080ea79481d310f7ba27c922843daa6cb99a5a06f4aadf082df2ef03397cfdcc4d26909b539a493df881c098e12e0686ce1da41d6abdff0a79e64c1e51f293e2d695b0a47b405c66d6975d46521fef50b5401cf8c2aff9085386137690535822d067ca4cf366c6b0a0e4ec5ab9744aa0cb2eb0509c2cc537d529dbd62e3e50559ba16773cbbe2eae84382a0d3e6d048b05cd366cdc8642e9be3f711ae981f468c506bb810ef8b2caa0fce108243971a08fa9c2ec23b0108a41403ea6579badd4bf7e65d7a3e91fa49e3c190f36f5126014fab9290bc94bd2c7013f906d65d962c37ed9b8da775fad1dd49ad1fadc20de0fb0924e41e4cf7753212ea08df665f33952b057c6e5713d5c2b55a03d345e797d25031777e1eb7f610904e8b28a76fcd9db1b83814f264ef09a3531dc6f96344caae66c2818f3635f67adc67e35293feb0da7bc1d2d5740693b7e84ba32240a3e6d0d408e80b3ae1357d47dd420897a964d1b8a683105c6b94005e48631cc5049168ee7d42fef05d901aedfe41dd9d4390cdbd45d7f4d327040eec78bbbf23de4590b32c5b964ab441552780cc41f4de97198be093cfdb52c53a1defdaee36eab99362dc22785dd54837e7d0e6c7c29b448575abc2a5130776141e8766283ad11370e0b85d045012a0e0c359e5d67019c1f2866869b3b2abd647d3047c88d96bd40b63e9efe6ba687d94bd42c72e14f055dc0ae8d0f90c048779f31585d29f38ee34118c346e3c3b00d6a12e6d8e409ae8b1d9d90bce6eeb4a6ed8357cb5fe8cee9089738a5352bd26bc2437ae74a0d48e8906f78b3473ede88bcf783f7c2d9ce0597e3fb9badca65c3973ae2a29a2c18e6019f23af887dc5ec7a68bb8e9d4314f0540025374933c998433f6173fe0986d9b1d2722d5de797a9aa9ffdeaa4a7f1dd2a36824c79c718cc6f40ca2f9ed8c3a4fd868312104b42a16ba487ec14d49e066a6b5df245413b3fda323245d1b3c665e6298488d836b230de37f1490d47586498e3778152365a43476026d6c82f4e88bac9c9a47ed949441b3a9292d87ccec28bf4ecc974e96a2e8f66c23c31529d78c1c53751c90c9368d1700dae1370f8c849e46e9d89d210871de6dcf621e971f4bae4f1d2fb71ffc91c9117f94908f467a42966ec8fbdefe4374ae9312e23679891d30e985252f07d3dbd1fabc559cddb26d254383a9a500d294aede9eafc3c8e6d5ec96cd909e5bb63d46f412c07511bfd79710f1ee986cac52ce3228b771e2083e55f5b8639cdfeda1faef7a84aa46d45d9fb7580bd5f356028c5272a8fb599993763e99ce2f287411982ee39dd45c0e58c1736b02393272f4fd51166bb21a980d29c63c8fe8131245063fea61ada455dca49739eb1386110c255db2d46443438e652b4c3c277490ac31c2904bc8859cb70733e5fc2ee9bbc180ea1e0b1ee67708531ea8e913d0c0d7d05a59adcfbc39693eccd2f1d8011e5dfec89c7d7b94012f60ecfcdf133527f9459609343107ff030b546e4158ffbfeaafe7efad5181cce3ab492074d225d247f0376c7eb742dd730d16a3eda2c4c516a2000eacaa79e89b3d1e5087301ef4e819817dd79df8d9720a5ad3089175fde4aad534aca926eb99e3657edd380645e1cf8331b4a5026c7bc8a8477689590424506e904f12344dcbe8d32a46f360c2ce4108800e8954d7d94d301b3f2a699b233bc1d1a42b34760192b9fb476101d8fdace62548bbb75b9b619d5978296c47085d462082cf48c27cfe7a76b265ad2f11ebcfa731f237e7acb32dc7bdc8ed689c4f2baf1d85175e04e82938992645a30340413867eb858c2de87772bb9d1173e3fc2d7696142d1fd2b1cc4f3e15e6e59d718f9c1203c42339a8750f618448ab2966b218fe1dbdb49c9e534102d699b36914dc6ebc9a7a401baf4397b616ba1b3e6bb34c9656445e31e929a76d242fdcc5f084371e382e172e8416bb7190a2fd61b87c9f14f6e8a6298f3912f205223e0e643e65c3f323698107ac605cdb7c7bf375e266682e2e209c654dcd777d5d35d61f0cc32d2cc5a2720f6b7dcf46c6f571ace0b743d76f2ac4701ac0b99be1a6e2174e8146b6ea0b0d1184a793b40d54a630d49d972ac3f5b0901901f658160e41f8d8cacbc9a3a5613457854ba6bcafbc635d78a28b8ccb5dea4cfbf7e63dff00ca32c9847994702078542c72cb9839a15557adea828492b6f424075bcfaf577922e68f233a6909c46aebb762c526f20afa2463015547538865f4b236d614f4ddecf7fde084b974bccf845070eb925a335432e88da312829439572dab86d691ec99c5611b528fad9dfdbb1a7f6e428dda8e8d01b2b23a5e781a81f6cfa7b79c42f7c1b0d11cf6ecb27efe7b6af2c50dedf554ecb745c00614ca27203282adc46c2ae1611daa0ba22db3083b703b4274d8d62eb86ea61560df905ff3aeee3bae0ef22ab7553bb0e1351e4323522f98c651b84bfa2a6da184ef739061e09af9ee23296189429a963ebe59d8908b4f5c3b5eb08827ddff176f8d355f9d79ac688af1c4e36c01f76365198e068c266182603bc29cd6f4b8f09502d9739c8d73a496e6877b9f68a1de20f3544d9d30c716b8b5c042695e6cfde5083ee09d1d10f438ddd9a25656383cf406b62db27b243eb044099c1482f8e3bd5de5071d77b68f969b758c9ad412303f6b0bac13cbbcfab98e1a0f5b754972625f694cfa2f6553dfff692a9f0577d67307ee2ae37a1753e003f410c0cd8ed1928b06bf005203a52e21ca6411863185dbb65861de36ed9eeb30207777b761093d8b575b755fa01708645c0e4cf19dbd43e5f64cd18350eb9c668b923fad3ee2da716e313528746da62a901d0fee4ed6228b9bd3ec3d5d"}) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000001640)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000fdff00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 264.172717ms ago: executing program 0 (id=1732): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x80, 0x30, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, {0x10}, {}, {}, {0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) write(0xffffffffffffffff, &(0x7f0000000340)="05000000", 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[]) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4(r2, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 44.334655ms ago: executing program 2 (id=1733): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb8b3c08000000810014000011ab01541a34bfbe88e5c3bd858a4ff1649ec860022026e21f0f8f44e56a06fb4cf12b5915d821a5e7ed4e83ec18f1b2f2840617d3300f142d381c3d5d3d27d854d5a94d883f2c99b7a90268c8"], &(0x7f0000000140)={0x1, 0x3, [0xad9, 0x144, 0x13d, 0x4d7]}) syz_open_dev$I2C(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x0, 0x0, 0xe, 0x0, "d8c43bfee6a1dbc9db8c5ea672620a27db0438400f4557866f4faa3407e1b46bd39238db0e1e19cefceb71d3a0d51f619f5ef7820565e19601d79bd71bf99ce7802b320f7341b8660350c68699025742"}, 0xd8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="7d93000000ecffffff000b000000"], 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0xe, 0x0, &(0x7f0000000040)) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0xa}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x4) write$binfmt_script(r9, &(0x7f0000000580)={'#! ', '', [], 0xa, "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"}, 0x22d) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) syz_emit_ethernet(0xf9, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000080501032369fc932dbd6cb99509ba8132bf117f9e8fa026a3b59ed17e9b39d272c7cb4de0fa851c8d852a50e449029f77ff820c903125037210c30c3f6cef6ed872d2846a1780ddbb7d722d5726b3d436cbc342eda530c6b9c707865a3fd68ecadc9db2d58518f735175265ccc4776e6e2007932139aaccbf8c476fad4e5d48b6de60e60303c2bd53144095f5934df0026fc53f884278b092499c63a4f5174e5d789758210ebe87d27b740e400173d107679db2dbefb2d7bf778741ac08e8c736eca06ea424252113391000cb71be26e963086b37df207636f87a82fc41762ebd951300"/249], 0x0) 0s ago: executing program 2 (id=1734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000440)=0x2) kernel console output (not intermixed with test programs): 198.744600][T10631] netlink_unicast+0x53c/0x7f0 [ 198.745847][T10631] ? __pfx_netlink_unicast+0x10/0x10 [ 198.747188][T10631] ? const_folio_flags.constprop.0+0x56/0x150 [ 198.748709][T10631] ? __phys_addr_symbol+0x30/0x80 [ 198.750017][T10631] ? __check_object_size+0x488/0x710 [ 198.751384][T10631] netlink_sendmsg+0x8b8/0xd70 [ 198.752629][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.754016][T10631] ____sys_sendmsg+0x9ae/0xb40 [ 198.755265][T10631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.756634][T10631] ? get_compat_msghdr+0x11b/0x170 [ 198.757978][T10631] ? irqentry_exit+0x3b/0x90 [ 198.759189][T10631] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.760545][T10631] ___sys_sendmsg+0x135/0x1e0 [ 198.761780][T10631] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.763136][T10631] ? lock_release+0x3e5/0x6f0 [ 198.764357][T10631] ? lock_acquire+0x2f/0xb0 [ 198.765544][T10631] ? __fget_files+0x40/0x3f0 [ 198.766744][T10631] ? fdget+0x176/0x210 [ 198.767809][T10631] __sys_sendmsg+0x117/0x1f0 [ 198.769003][T10631] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.770331][T10631] ? kvm_sched_clock_read+0x11/0x20 [ 198.771674][T10631] __do_fast_syscall_32+0x73/0x120 [ 198.773020][T10631] do_fast_syscall_32+0x32/0x80 [ 198.774291][T10631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.775918][T10631] RIP: 0023:0xf7fe2579 [ 198.776970][T10631] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 198.781910][T10631] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 198.784042][T10631] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 198.786083][T10631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.788114][T10631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.790131][T10631] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 198.792130][T10631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.794117][T10631] [ 198.795112][ T35] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 198.822148][ T35] usb 7-1: no configurations [ 198.823446][ T35] usb 7-1: can't read configurations, error -22 [ 198.825453][ T35] usb usb7-port1: unable to enumerate USB device [ 198.861317][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.871252][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.922752][T10634] syzkaller1: entered promiscuous mode [ 198.924299][T10634] syzkaller1: entered allmulticast mode [ 199.203521][ T35] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz1 [ 199.341302][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 199.345139][T10637] loop9: detected capacity change from 0 to 7 [ 199.347639][T10637] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 199.349402][T10637] loop9: partition table partially beyond EOD, truncated [ 199.355298][T10637] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 199.643272][T10652] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 199.800434][T10656] FAULT_INJECTION: forcing a failure. [ 199.800434][T10656] name failslab, interval 1, probability 0, space 0, times 0 [ 199.814410][T10656] CPU: 3 UID: 0 PID: 10656 Comm: syz.0.1469 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 199.817188][T10656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 199.819958][T10656] Call Trace: [ 199.820832][T10656] [ 199.821627][T10656] dump_stack_lvl+0x16c/0x1f0 [ 199.822877][T10656] should_fail_ex+0x497/0x5b0 [ 199.824122][T10656] ? fs_reclaim_acquire+0xae/0x150 [ 199.825472][T10656] should_failslab+0xc2/0x120 [ 199.826707][T10656] __kmalloc_noprof+0xcb/0x410 [ 199.827966][T10656] ? rcu_is_watching+0x12/0xc0 [ 199.829245][T10656] tomoyo_encode2+0x100/0x3e0 [ 199.830488][T10656] tomoyo_realpath_from_path+0x1a7/0x710 [ 199.831962][T10656] ? tomoyo_path_number_perm+0x232/0x5b0 [ 199.833454][T10656] tomoyo_path_number_perm+0x245/0x5b0 [ 199.834886][T10656] ? tomoyo_path_number_perm+0x232/0x5b0 [ 199.836341][T10656] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 199.837919][T10656] ? trace_lock_acquire+0x14a/0x1d0 [ 199.839279][T10656] ? lock_acquire+0x2f/0xb0 [ 199.840472][T10656] ? __fget_files+0x40/0x3f0 [ 199.841691][T10656] ? __fget_files+0x244/0x3f0 [ 199.842923][T10656] security_file_ioctl_compat+0x9b/0x240 [ 199.844401][T10656] __do_compat_sys_ioctl+0x52/0x2b0 [ 199.845780][T10656] __do_fast_syscall_32+0x73/0x120 [ 199.847131][T10656] do_fast_syscall_32+0x32/0x80 [ 199.848412][T10656] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.850067][T10656] RIP: 0023:0xf7ff3579 [ 199.851145][T10656] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 199.856263][T10656] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 199.858449][T10656] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800452d3 [ 199.860498][T10656] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 199.862673][T10656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.864731][T10656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 199.866799][T10656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.868867][T10656] [ 199.891361][T10656] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.901257][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 200.081413][T10662] usb 2-1: USB disconnect, device number 4 [ 200.171864][T10663] hub 2-0:1.0: USB hub found [ 200.173819][T10663] hub 2-0:1.0: 6 ports detected [ 200.371314][ T30] usb 2-1: new high-speed USB device number 5 using ehci-pci [ 200.555221][ T30] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 200.558262][ T30] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 200.561022][ T30] usb 2-1: Product: QEMU USB Tablet [ 200.563080][ T30] usb 2-1: Manufacturer: QEMU [ 200.564788][ T30] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 200.593991][ T30] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0009/input/input21 [ 200.655262][ T30] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 200.663902][T10666] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1471'. [ 200.667757][T10666] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 200.669857][T10666] CPU: 2 UID: 0 PID: 10666 Comm: syz.2.1471 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 200.672648][T10666] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.675501][T10666] Call Trace: [ 200.676378][T10666] [ 200.677175][T10666] dump_stack_lvl+0x16c/0x1f0 [ 200.678408][T10666] sysfs_warn_dup+0x7f/0xa0 [ 200.679585][T10666] sysfs_do_create_link_sd+0x124/0x140 [ 200.680976][T10666] sysfs_create_link+0x61/0xc0 [ 200.682228][T10666] device_add+0x62e/0x1a70 [ 200.683396][T10666] ? __pfx_device_add+0x10/0x10 [ 200.684661][T10666] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 200.686323][T10666] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 200.687881][T10666] wiphy_register+0x20d7/0x2d30 [ 200.689180][T10666] ? __pfx_wiphy_register+0x10/0x10 [ 200.690737][T10666] ieee80211_register_hw+0x2959/0x3fb0 [ 200.692159][T10666] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 200.693705][T10666] ? rcu_is_watching+0x12/0xc0 [ 200.694949][T10666] ? trace_hrtimer_init+0x19d/0x220 [ 200.696303][T10666] ? __hrtimer_init+0x106/0x2c0 [ 200.697699][T10666] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 200.699188][T10666] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 200.700788][T10666] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 200.702493][T10666] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 200.703862][T10666] hwsim_new_radio_nl+0xb42/0x12b0 [ 200.705175][T10666] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 200.706542][T10666] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 200.708400][T10666] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 200.710942][T10666] genl_family_rcv_msg_doit+0x202/0x2f0 [ 200.712530][T10666] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 200.714113][T10666] ? bpf_lsm_capable+0x9/0x10 [ 200.715345][T10666] ? security_capable+0x7e/0x260 [ 200.716644][T10666] ? ns_capable+0xd7/0x110 [ 200.717829][T10666] genl_rcv_msg+0x565/0x800 [ 200.718992][T10666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.720330][T10666] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 200.721781][T10666] netlink_rcv_skb+0x165/0x410 [ 200.723040][T10666] ? __pfx_genl_rcv_msg+0x10/0x10 [ 200.724359][T10666] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.725822][T10666] ? down_read+0xc9/0x330 [ 200.726936][T10666] ? __pfx_down_read+0x10/0x10 [ 200.728186][T10666] ? rcu_is_watching+0x12/0xc0 [ 200.729525][T10666] genl_rcv+0x28/0x40 [ 200.731008][T10666] netlink_unicast+0x53c/0x7f0 [ 200.732467][T10666] ? __pfx_netlink_unicast+0x10/0x10 [ 200.733859][T10666] ? const_folio_flags.constprop.0+0x56/0x150 [ 200.735433][T10666] ? __phys_addr_symbol+0x30/0x80 [ 200.736682][T10666] ? __check_object_size+0x488/0x710 [ 200.738021][T10666] netlink_sendmsg+0x8b8/0xd70 [ 200.739286][T10666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.740942][T10666] ? lock_acquire+0x2f/0xb0 [ 200.742152][T10666] ____sys_sendmsg+0x9ae/0xb40 [ 200.743403][T10666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.744777][T10666] ? get_compat_msghdr+0x11b/0x170 [ 200.746122][T10666] ? __pfx___lock_acquire+0x10/0x10 [ 200.747480][T10666] ___sys_sendmsg+0x135/0x1e0 [ 200.748714][T10666] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.750437][T10666] ? lock_acquire+0x2f/0xb0 [ 200.752093][T10666] ? __fget_files+0x40/0x3f0 [ 200.753523][T10666] ? fdget+0x176/0x210 [ 200.754592][T10666] __sys_sendmsg+0x117/0x1f0 [ 200.756054][T10666] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.757401][T10666] ? __ia32_sys_futex_time32+0x1da/0x460 [ 200.758865][T10666] __do_fast_syscall_32+0x73/0x120 [ 200.760241][T10666] do_fast_syscall_32+0x32/0x80 [ 200.761523][T10666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.763162][T10666] RIP: 0023:0xf7f92579 [ 200.764227][T10666] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 200.769174][T10666] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 200.771969][T10666] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 200.774278][T10666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.776326][T10666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.778495][T10666] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 200.780591][T10666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.782670][T10666] [ 201.300237][T10672] sp0: Synchronizing with TNC [ 201.312577][ T39] audit: type=1400 audit(1729696326.145:206): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="wlan1" pid=10671 comm="syz.2.1473" [ 201.981391][ C3] net_ratelimit: 4 callbacks suppressed [ 201.981403][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.981616][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.381450][ T6191] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.461336][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 202.531298][ T6191] usb 5-1: Using ep0 maxpacket: 16 [ 202.538466][ T6191] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 202.546667][ T6191] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 202.549304][ T6191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.555372][ T6191] usb 5-1: config 0 descriptor?? [ 202.562358][ T6191] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input22 [ 202.613682][T10685] FAULT_INJECTION: forcing a failure. [ 202.613682][T10685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.617619][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.3.1478 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 202.620454][T10685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.624161][T10685] Call Trace: [ 202.625407][T10685] [ 202.626490][T10685] dump_stack_lvl+0x16c/0x1f0 [ 202.628234][T10685] should_fail_ex+0x497/0x5b0 [ 202.629941][T10685] _copy_from_user+0x30/0xf0 [ 202.631640][T10685] rfcomm_dev_ioctl+0x350/0x1e70 [ 202.633005][T10685] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 202.634401][T10685] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 202.635711][T10685] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.637245][T10685] rfcomm_sock_compat_ioctl+0xb0/0xd0 [ 202.638625][T10685] compat_sock_ioctl+0x17b/0x7e0 [ 202.639945][T10685] ? __pfx_rfcomm_sock_compat_ioctl+0x10/0x10 [ 202.641518][T10685] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 202.642916][T10685] ? __fget_files+0x244/0x3f0 [ 202.644274][T10685] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 202.646104][T10685] __do_compat_sys_ioctl+0x259/0x2b0 [ 202.647463][T10685] __do_fast_syscall_32+0x73/0x120 [ 202.648781][T10685] do_fast_syscall_32+0x32/0x80 [ 202.650205][T10685] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.651825][T10685] RIP: 0023:0xf7fe2579 [ 202.652879][T10685] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.657848][T10685] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 202.660473][T10685] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800452d3 [ 202.662491][T10685] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.664561][T10685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.666605][T10685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 202.668645][T10685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.670898][T10685] [ 202.819131][ T4828] bcm5974 5-1:0.0: could not read from device [ 202.837298][ T6191] usb 5-1: USB disconnect, device number 18 [ 202.840534][T10683] bcm5974 5-1:0.0: could not read from device [ 202.961199][ T5384] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 203.021215][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.021230][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.142507][ T5384] usb 8-1: no configurations [ 203.143823][ T5384] usb 8-1: can't read configurations, error -22 [ 203.281289][ T5384] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 203.451728][ T5384] usb 8-1: no configurations [ 203.453107][ T5384] usb 8-1: can't read configurations, error -22 [ 203.455673][ T5384] usb usb8-port1: attempt power cycle [ 203.501215][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 203.811204][ T5384] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 203.832403][ T5384] usb 8-1: no configurations [ 203.833667][ T5384] usb 8-1: can't read configurations, error -22 [ 203.971245][ T5384] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 203.981685][T10678] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 204.001369][ T5384] usb 8-1: no configurations [ 204.002650][ T5384] usb 8-1: can't read configurations, error -22 [ 204.004427][ T5384] usb usb8-port1: unable to enumerate USB device [ 204.061182][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.061188][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.541459][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.714597][T10697] syz.2.1480: attempt to access beyond end of device [ 204.714597][T10697] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 204.718060][T10697] EXT4-fs (loop2): unable to read superblock [ 204.742191][T10697] usb 2-1: USB disconnect, device number 5 [ 204.780927][T10697] hub 2-0:1.0: USB hub found [ 204.793416][T10697] hub 2-0:1.0: 6 ports detected [ 204.931156][ T5386] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 204.981193][ T6190] usb 2-1: new high-speed USB device number 6 using ehci-pci [ 205.091184][ T5386] usb 5-1: Using ep0 maxpacket: 32 [ 205.093876][ T5386] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 205.096007][ T5386] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 205.098899][ T5386] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 205.101174][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.102141][ T5386] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 205.107165][ T5386] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.110993][ T5386] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 205.113557][ T5386] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 205.115727][ T5386] usb 5-1: Product: syz [ 205.116819][ T5386] usb 5-1: Manufacturer: syz [ 205.118044][ T5386] usb 5-1: SerialNumber: syz [ 205.120408][ T5386] usb 5-1: config 0 descriptor?? [ 205.123324][ T5386] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 205.127371][ T5386] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 205.175793][ T6190] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 205.178368][ T6190] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 205.180875][ T6190] usb 2-1: Product: QEMU USB Tablet [ 205.184395][ T6190] usb 2-1: Manufacturer: QEMU [ 205.186163][ T6190] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 205.205207][ T6190] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000A/input/input23 [ 205.264280][ T6190] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 205.330439][ T5386] usb 5-1: USB disconnect, device number 19 [ 205.334716][ T5386] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 205.662887][T10704] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1481'. [ 205.670052][T10704] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 205.672583][T10704] CPU: 0 UID: 0 PID: 10704 Comm: syz.2.1481 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 205.675449][T10704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 205.678274][T10704] Call Trace: [ 205.679154][T10704] [ 205.679938][T10704] dump_stack_lvl+0x16c/0x1f0 [ 205.681204][T10704] sysfs_warn_dup+0x7f/0xa0 [ 205.682406][T10704] sysfs_do_create_link_sd+0x124/0x140 [ 205.683844][T10704] sysfs_create_link+0x61/0xc0 [ 205.685117][T10704] device_add+0x62e/0x1a70 [ 205.686302][T10704] ? __pfx_device_add+0x10/0x10 [ 205.687591][T10704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.689203][T10704] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 205.690786][T10704] wiphy_register+0x20d7/0x2d30 [ 205.692075][T10704] ? __pfx_wiphy_register+0x10/0x10 [ 205.693493][T10704] ieee80211_register_hw+0x2959/0x3fb0 [ 205.694933][T10704] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 205.696467][T10704] ? rcu_is_watching+0x12/0xc0 [ 205.697743][T10704] ? trace_hrtimer_init+0x19d/0x220 [ 205.699140][T10704] ? __hrtimer_init+0x106/0x2c0 [ 205.700430][T10704] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 205.701954][T10704] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 205.703550][T10704] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 205.705289][T10704] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 205.706688][T10704] hwsim_new_radio_nl+0xb42/0x12b0 [ 205.708044][T10704] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 205.709552][T10704] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 205.711426][T10704] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 205.713264][T10704] genl_family_rcv_msg_doit+0x202/0x2f0 [ 205.714679][T10704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 205.716225][T10704] ? bpf_lsm_capable+0x9/0x10 [ 205.717443][T10704] ? security_capable+0x7e/0x260 [ 205.718885][T10704] ? ns_capable+0xd7/0x110 [ 205.720022][T10704] genl_rcv_msg+0x565/0x800 [ 205.721180][T10704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.722472][T10704] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 205.723869][T10704] netlink_rcv_skb+0x165/0x410 [ 205.725077][T10704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.726371][T10704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.727709][T10704] ? down_read+0xc9/0x330 [ 205.728849][T10704] ? __pfx_down_read+0x10/0x10 [ 205.730069][T10704] ? netlink_deliver_tap+0x1ae/0xcf0 [ 205.731393][T10704] genl_rcv+0x28/0x40 [ 205.732413][T10704] netlink_unicast+0x53c/0x7f0 [ 205.733663][T10704] ? __pfx_netlink_unicast+0x10/0x10 [ 205.735017][T10704] ? const_folio_flags.constprop.0+0x56/0x150 [ 205.736497][T10704] ? __phys_addr_symbol+0x30/0x80 [ 205.737792][T10704] ? __check_object_size+0x488/0x710 [ 205.739193][T10704] netlink_sendmsg+0x8b8/0xd70 [ 205.740405][T10704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.741763][T10704] ? lock_acquire+0x2f/0xb0 [ 205.742946][T10704] ____sys_sendmsg+0x9ae/0xb40 [ 205.744184][T10704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.745572][T10704] ? get_compat_msghdr+0x11b/0x170 [ 205.746874][T10704] ? __pfx___lock_acquire+0x10/0x10 [ 205.748192][T10704] ___sys_sendmsg+0x135/0x1e0 [ 205.749402][T10704] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.750730][T10704] ? lock_acquire+0x2f/0xb0 [ 205.751898][T10704] ? __fget_files+0x40/0x3f0 [ 205.753114][T10704] ? fdget+0x176/0x210 [ 205.754171][T10704] __sys_sendmsg+0x117/0x1f0 [ 205.755368][T10704] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.756643][T10704] ? __ia32_sys_futex_time32+0x1da/0x460 [ 205.758087][T10704] __do_fast_syscall_32+0x73/0x120 [ 205.759514][T10704] do_fast_syscall_32+0x32/0x80 [ 205.760763][T10704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.762394][T10704] RIP: 0023:0xf7f92579 [ 205.763452][T10704] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 205.768231][T10704] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 205.770330][T10704] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 205.771160][ T5386] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 205.772297][T10704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.776191][T10704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.778185][T10704] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 205.780157][T10704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.782135][T10704] [ 205.953129][ T5386] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 205.955334][ T5386] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 205.958174][ T5386] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 205.971153][ T5386] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 205.975741][ T5386] usb 5-1: config 0 interface 0 has no altsetting 0 [ 205.981351][ T5386] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 205.983923][ T5386] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 205.986156][ T5386] usb 5-1: Product: syz [ 205.987260][ T5386] usb 5-1: Manufacturer: syz [ 205.988479][ T5386] usb 5-1: SerialNumber: syz [ 205.996087][ T5386] usb 5-1: config 0 descriptor?? [ 206.002183][ T5386] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 206.005247][ T5386] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 206.035567][T10711] devtmpfs: Cannot enable quota on remount [ 206.160541][T10722] input: syz1 as /devices/virtual/input/input24 [ 206.206829][ T830] usb 5-1: USB disconnect, device number 20 [ 206.214904][ T830] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 206.273306][ T39] audit: type=1800 audit(1729696331.105:207): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1487" name="/" dev="9p" ino=2 res=0 errno=0 [ 207.181136][ C2] net_ratelimit: 5 callbacks suppressed [ 207.181149][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.181199][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.511454][ T5384] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 207.661165][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 207.684585][ T5384] usb 7-1: no configurations [ 207.685828][ T5384] usb 7-1: can't read configurations, error -22 [ 207.821364][ T5384] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 207.866199][ T65] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.872578][ T65] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.875662][ T65] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.880239][ T65] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.884389][ T65] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.886403][ T65] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.991667][ T5384] usb 7-1: no configurations [ 207.993039][ T5384] usb 7-1: can't read configurations, error -22 [ 207.994827][ T5384] usb usb7-port1: attempt power cycle [ 208.010607][T10748] chnl_net:caif_netlink_parms(): no params data found [ 208.120983][T10757] fuse: Bad value for 'group_id' [ 208.124627][T10757] fuse: Bad value for 'group_id' [ 208.221092][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.305842][T10748] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.307927][T10748] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.313628][T10748] bridge_slave_0: entered allmulticast mode [ 208.323156][T10748] bridge_slave_0: entered promiscuous mode [ 208.327157][T10748] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.329216][T10748] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.335802][T10748] bridge_slave_1: entered allmulticast mode [ 208.340941][T10748] bridge_slave_1: entered promiscuous mode [ 208.377757][T10765] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1497'. [ 208.401106][ T5384] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 208.404815][T10748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.416426][T10748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.419738][T10765] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 208.424640][T10765] CPU: 2 UID: 0 PID: 10765 Comm: syz.3.1497 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 208.427470][T10765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.430289][T10765] Call Trace: [ 208.431184][T10765] [ 208.431980][T10765] dump_stack_lvl+0x16c/0x1f0 [ 208.433247][ T5384] usb 7-1: no configurations [ 208.433267][T10765] sysfs_warn_dup+0x7f/0xa0 [ 208.434520][ T5384] usb 7-1: can't read configurations, error -22 [ 208.435704][T10765] sysfs_do_create_link_sd+0x124/0x140 [ 208.438800][T10765] sysfs_create_link+0x61/0xc0 [ 208.440073][T10765] device_add+0x62e/0x1a70 [ 208.441270][T10765] ? __pfx_device_add+0x10/0x10 [ 208.442550][T10765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.444099][T10765] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 208.445682][T10765] wiphy_register+0x20d7/0x2d30 [ 208.446978][T10765] ? __pfx_wiphy_register+0x10/0x10 [ 208.448354][T10765] ieee80211_register_hw+0x2959/0x3fb0 [ 208.449802][T10765] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 208.451341][T10765] ? rcu_is_watching+0x12/0xc0 [ 208.452602][T10765] ? trace_hrtimer_init+0x19d/0x220 [ 208.453997][T10765] ? __hrtimer_init+0x106/0x2c0 [ 208.455285][T10765] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 208.456790][T10765] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 208.458386][T10765] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 208.460100][T10765] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 208.461493][T10765] hwsim_new_radio_nl+0xb42/0x12b0 [ 208.462835][T10765] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.464306][T10765] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 208.466218][T10765] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 208.468129][T10765] genl_family_rcv_msg_doit+0x202/0x2f0 [ 208.469586][T10765] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 208.471174][T10765] ? bpf_lsm_capable+0x9/0x10 [ 208.472415][T10765] ? security_capable+0x7e/0x260 [ 208.473738][T10765] ? ns_capable+0xd7/0x110 [ 208.474922][T10765] genl_rcv_msg+0x565/0x800 [ 208.476122][T10765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.477453][T10765] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 208.478907][T10765] netlink_rcv_skb+0x165/0x410 [ 208.480166][T10765] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.481491][T10765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.482885][T10765] ? down_read+0xc9/0x330 [ 208.484023][T10765] ? __pfx_down_read+0x10/0x10 [ 208.485289][T10765] ? netlink_deliver_tap+0x1ae/0xcf0 [ 208.486674][T10765] genl_rcv+0x28/0x40 [ 208.487730][T10765] netlink_unicast+0x53c/0x7f0 [ 208.488990][T10765] ? __pfx_netlink_unicast+0x10/0x10 [ 208.490386][T10765] ? const_folio_flags.constprop.0+0x56/0x150 [ 208.491976][T10765] ? __phys_addr_symbol+0x30/0x80 [ 208.493310][T10765] ? __check_object_size+0x488/0x710 [ 208.494694][T10765] netlink_sendmsg+0x8b8/0xd70 [ 208.495955][T10765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.497350][T10765] ? lock_acquire+0x2f/0xb0 [ 208.498552][T10765] ____sys_sendmsg+0x9ae/0xb40 [ 208.499814][T10765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.501206][T10765] ? get_compat_msghdr+0x11b/0x170 [ 208.502547][T10765] ? __pfx___lock_acquire+0x10/0x10 [ 208.503910][T10765] ___sys_sendmsg+0x135/0x1e0 [ 208.505159][T10765] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.506526][T10765] ? lock_acquire+0x2f/0xb0 [ 208.507721][T10765] ? __fget_files+0x40/0x3f0 [ 208.508939][T10765] ? fdget+0x176/0x210 [ 208.510023][T10765] __sys_sendmsg+0x117/0x1f0 [ 208.511239][T10765] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.512579][T10765] ? __ia32_sys_futex_time32+0x1da/0x460 [ 208.514069][T10765] __do_fast_syscall_32+0x73/0x120 [ 208.515416][T10765] do_fast_syscall_32+0x32/0x80 [ 208.516699][T10765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.518358][T10765] RIP: 0023:0xf7fe2579 [ 208.519436][T10765] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 208.524405][T10765] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 208.526575][T10765] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 208.528621][T10765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.530674][T10765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.532722][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.534783][T10765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.536841][T10765] [ 208.602711][ T5384] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 208.605229][T10748] team0: Port device team_slave_0 added [ 208.612466][T10748] team0: Port device team_slave_1 added [ 208.623724][ T5384] usb 7-1: no configurations [ 208.624971][ T5384] usb 7-1: can't read configurations, error -22 [ 208.626734][ T5384] usb usb7-port1: unable to enumerate USB device [ 208.670430][T10748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.674042][T10748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.682360][T10748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.701125][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 208.712589][T10748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.715665][T10748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.722510][T10748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.823827][T10748] hsr_slave_0: entered promiscuous mode [ 208.830898][T10748] hsr_slave_1: entered promiscuous mode [ 208.835074][T10748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.839298][T10748] Cannot create hsr debugfs directory [ 208.972594][T10748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.055289][T10748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.145529][T10748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.230348][T10748] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.261107][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 209.358619][T10748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.365318][T10748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.370304][T10748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.382433][T10748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.424887][T10748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.437905][T10748] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.444067][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.445949][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.463081][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.465024][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.614642][T10748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.641633][T10748] veth0_vlan: entered promiscuous mode [ 209.649389][T10748] veth1_vlan: entered promiscuous mode [ 209.670402][T10748] veth0_macvtap: entered promiscuous mode [ 209.677683][T10748] veth1_macvtap: entered promiscuous mode [ 209.688512][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.693418][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.696799][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.699724][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.702703][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.705363][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.708910][T10748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.720875][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.724960][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.727503][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.730427][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.733193][T10748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.735988][T10748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.740132][T10748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.741133][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 209.776963][T10748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.789225][T10748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.791718][T10748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.794044][T10748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.799971][T10775] tipc: Enabling of bearer rejected, failed to enable media [ 209.828061][ T9324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.830159][ T9324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.846338][ T9324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.848377][ T9324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.901161][ T65] Bluetooth: hci5: command tx timeout [ 210.301076][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.301084][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.791119][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 210.821245][ T830] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 210.976275][T10807] gfs2: not a GFS2 filesystem [ 211.026817][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 211.030766][ T830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 211.035032][ T830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 211.037627][ T830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.040152][ T830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.050373][ T830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.053169][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.129462][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'. [ 211.143004][T10810] netlink: 'syz.2.1506': attribute type 10 has an invalid length. [ 211.268231][ T830] usb 5-1: GET_CAPABILITIES returned 0 [ 211.269706][ T830] usbtmc 5-1:16.0: can't read capabilities [ 211.297851][T10810] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 211.476093][ T982] usb 5-1: USB disconnect, device number 21 [ 211.991539][ T65] Bluetooth: hci5: command tx timeout [ 212.381067][ C3] net_ratelimit: 3 callbacks suppressed [ 212.381079][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.381498][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.861115][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.391110][ T63] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 213.421101][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.421131][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.561020][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 213.564085][ T63] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.566606][ T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.569518][ T63] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 213.572160][ T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 213.574696][ T63] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.578013][ T63] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.580328][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.584698][ T63] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 213.851072][ T63] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 213.901098][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 213.949233][T10844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1517'. [ 213.953658][T10844] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 213.969962][T10844] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 214.004974][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.007961][ T63] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.010490][ T63] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.021179][ T63] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.023712][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.027751][ T63] usb 7-1: config 0 descriptor?? [ 214.061156][ T65] Bluetooth: hci5: command tx timeout [ 214.454799][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.456827][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.458788][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.460703][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.462697][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.464757][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.466707][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.468620][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.470483][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.471036][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.472869][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.476333][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.478140][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.480043][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.482026][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.483980][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.485898][ T63] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 214.488387][ T63] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 214.493173][ T63] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 214.941058][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 215.389356][T10865] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1522'. [ 215.394339][T10865] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 215.501031][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.764492][ T6190] usb 5-1: USB disconnect, device number 22 [ 215.894820][T10874] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 215.897894][T10874] overlayfs: failed to set xattr on upper [ 215.899874][T10874] overlayfs: ...falling back to redirect_dir=nofollow. [ 215.901657][ T982] usb 7-1: reset high-speed USB device number 28 using dummy_hcd [ 215.902413][T10874] overlayfs: ...falling back to index=off. [ 215.906769][T10874] overlayfs: ...falling back to uuid=null. [ 216.112485][T10879] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1527'. [ 216.121755][T10879] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 216.124115][T10879] CPU: 0 UID: 0 PID: 10879 Comm: syz.1.1527 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 216.126896][T10879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 216.129670][T10879] Call Trace: [ 216.130531][T10879] [ 216.131286][T10879] dump_stack_lvl+0x16c/0x1f0 [ 216.132466][T10879] sysfs_warn_dup+0x7f/0xa0 [ 216.133646][T10879] sysfs_do_create_link_sd+0x124/0x140 [ 216.135002][T10879] sysfs_create_link+0x61/0xc0 [ 216.136224][T10879] device_add+0x62e/0x1a70 [ 216.137398][T10879] ? __pfx_device_add+0x10/0x10 [ 216.138638][T10879] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 216.140143][T10879] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 216.141675][T10879] wiphy_register+0x20d7/0x2d30 [ 216.142922][T10879] ? __pfx_wiphy_register+0x10/0x10 [ 216.144277][T10879] ieee80211_register_hw+0x2959/0x3fb0 [ 216.145667][T10879] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 216.147136][T10879] ? rcu_is_watching+0x12/0xc0 [ 216.148340][T10879] ? trace_hrtimer_init+0x19d/0x220 [ 216.149669][T10879] ? __hrtimer_init+0x106/0x2c0 [ 216.150928][T10879] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 216.152349][T10879] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 216.153901][T10879] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 216.155532][T10879] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 216.156864][T10879] hwsim_new_radio_nl+0xb42/0x12b0 [ 216.158186][T10879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 216.159594][T10879] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 216.161428][T10879] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 216.163290][T10879] genl_family_rcv_msg_doit+0x202/0x2f0 [ 216.164675][T10879] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 216.166238][T10879] ? bpf_lsm_capable+0x9/0x10 [ 216.167453][T10879] ? security_capable+0x7e/0x260 [ 216.168708][T10879] ? ns_capable+0xd7/0x110 [ 216.169808][T10879] genl_rcv_msg+0x565/0x800 [ 216.171013][T10879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.172332][T10879] ? lockdep_hardirqs_on+0x7c/0x110 [ 216.173715][T10879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 216.175163][T10879] netlink_rcv_skb+0x165/0x410 [ 216.176416][T10879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.177740][T10879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.179232][T10879] ? down_read+0xc9/0x330 [ 216.180372][T10879] ? __pfx_down_read+0x10/0x10 [ 216.181637][T10879] ? netlink_deliver_tap+0x1ae/0xcf0 [ 216.182544][T10880] loop9: detected capacity change from 0 to 7 [ 216.183011][T10879] genl_rcv+0x28/0x40 [ 216.186319][T10879] netlink_unicast+0x53c/0x7f0 [ 216.187583][T10879] ? __pfx_netlink_unicast+0x10/0x10 [ 216.188963][T10879] ? const_folio_flags.constprop.0+0x56/0x150 [ 216.190554][T10879] ? __phys_addr_symbol+0x30/0x80 [ 216.191070][ T65] Bluetooth: hci5: command tx timeout [ 216.191859][T10879] ? __check_object_size+0x488/0x710 [ 216.195239][T10879] netlink_sendmsg+0x8b8/0xd70 [ 216.196494][T10879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.197886][T10879] ? lock_acquire+0x2f/0xb0 [ 216.199083][T10879] ____sys_sendmsg+0x9ae/0xb40 [ 216.200333][T10879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.201714][T10879] ? get_compat_msghdr+0x11b/0x170 [ 216.203052][T10879] ? __pfx___lock_acquire+0x10/0x10 [ 216.204413][T10879] ___sys_sendmsg+0x135/0x1e0 [ 216.205657][T10879] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.207026][T10879] ? lock_acquire+0x2f/0xb0 [ 216.208217][T10879] ? __fget_files+0x40/0x3f0 [ 216.209438][T10879] ? fdget+0x176/0x210 [ 216.210511][T10879] __sys_sendmsg+0x117/0x1f0 [ 216.211724][T10879] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.213078][T10879] ? __ia32_sys_futex_time32+0x1da/0x460 [ 216.214542][T10879] __do_fast_syscall_32+0x73/0x120 [ 216.215884][T10879] do_fast_syscall_32+0x32/0x80 [ 216.217181][T10879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 216.218845][T10879] RIP: 0023:0xf7f97579 [ 216.219925][T10879] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 216.224871][T10879] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 216.226992][T10879] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 216.228960][T10879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 216.230979][T10879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.232973][T10879] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 216.235014][T10879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 216.237043][T10879] [ 216.238799][T10880] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 216.240221][T10880] loop9: partition table partially beyond EOD, truncated [ 216.243649][T10880] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 216.393667][T10884] tmpfs: Bad value for 'mpol' [ 217.075077][T10894] sctp: [Deprecated]: syz.2.1531 (pid 10894) Use of int in max_burst socket option deprecated. [ 217.075077][T10894] Use struct sctp_assoc_value instead [ 217.525408][ T5456] usb 7-1: USB disconnect, device number 28 [ 217.545976][T10898] lo speed is unknown, defaulting to 1000 [ 217.553860][T10898] lo speed is unknown, defaulting to 1000 [ 217.556603][T10898] lo speed is unknown, defaulting to 1000 [ 217.567996][T10898] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.578417][T10898] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 217.581009][ C3] net_ratelimit: 5 callbacks suppressed [ 217.581019][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.581049][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.621030][T10908] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1535'. [ 217.644520][T10898] lo speed is unknown, defaulting to 1000 [ 217.646563][T10898] lo speed is unknown, defaulting to 1000 [ 217.751771][T10898] lo speed is unknown, defaulting to 1000 [ 217.758628][T10898] lo speed is unknown, defaulting to 1000 [ 217.764401][T10898] lo speed is unknown, defaulting to 1000 [ 217.768928][T10898] lo speed is unknown, defaulting to 1000 [ 217.843006][T10912] overlayfs: failed to resolve './file1': -2 [ 218.024519][T10916] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1537'. [ 218.028239][T10916] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 218.030263][T10916] CPU: 1 UID: 0 PID: 10916 Comm: syz.2.1537 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 218.032973][T10916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.035746][T10916] Call Trace: [ 218.036595][T10916] [ 218.037360][T10916] dump_stack_lvl+0x16c/0x1f0 [ 218.038539][T10916] sysfs_warn_dup+0x7f/0xa0 [ 218.039710][T10916] sysfs_do_create_link_sd+0x124/0x140 [ 218.041102][T10916] sysfs_create_link+0x61/0xc0 [ 218.042315][T10916] device_add+0x62e/0x1a70 [ 218.043460][T10916] ? __pfx_device_add+0x10/0x10 [ 218.044713][T10916] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 218.046203][T10916] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 218.047717][T10916] wiphy_register+0x20d7/0x2d30 [ 218.048956][T10916] ? __pfx_wiphy_register+0x10/0x10 [ 218.050389][T10916] ieee80211_register_hw+0x2959/0x3fb0 [ 218.051779][T10916] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 218.053285][T10916] ? rcu_is_watching+0x12/0xc0 [ 218.054512][T10916] ? trace_hrtimer_init+0x19d/0x220 [ 218.055893][T10916] ? __hrtimer_init+0x106/0x2c0 [ 218.057201][T10916] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 218.058631][T10916] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 218.060148][T10916] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 218.061038][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 218.061797][T10916] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 218.064908][T10916] hwsim_new_radio_nl+0xb42/0x12b0 [ 218.066236][T10916] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 218.067640][T10916] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 218.069475][T10916] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 218.071368][T10916] genl_family_rcv_msg_doit+0x202/0x2f0 [ 218.072733][T10916] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 218.074305][T10916] ? bpf_lsm_capable+0x9/0x10 [ 218.075611][T10916] ? security_capable+0x7e/0x260 [ 218.076862][T10916] ? ns_capable+0xd7/0x110 [ 218.078008][T10916] genl_rcv_msg+0x565/0x800 [ 218.079173][T10916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.080425][T10916] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 218.081817][T10916] netlink_rcv_skb+0x165/0x410 [ 218.083024][T10916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.084304][T10916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.085788][T10916] ? down_read+0xc9/0x330 [ 218.086899][T10916] ? __pfx_down_read+0x10/0x10 [ 218.088134][T10916] ? netlink_deliver_tap+0x1ae/0xcf0 [ 218.089474][T10916] genl_rcv+0x28/0x40 [ 218.090483][T10916] netlink_unicast+0x53c/0x7f0 [ 218.091741][T10916] ? __pfx_netlink_unicast+0x10/0x10 [ 218.093146][T10916] ? const_folio_flags.constprop.0+0x56/0x150 [ 218.094674][T10916] ? __phys_addr_symbol+0x30/0x80 [ 218.095984][T10916] ? __check_object_size+0x488/0x710 [ 218.097335][T10916] netlink_sendmsg+0x8b8/0xd70 [ 218.098595][T10916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.099915][T10916] ? lock_acquire+0x2f/0xb0 [ 218.101058][T10916] ____sys_sendmsg+0x9ae/0xb40 [ 218.102242][T10916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.103551][T10916] ? get_compat_msghdr+0x11b/0x170 [ 218.104824][T10916] ? __pfx___lock_acquire+0x10/0x10 [ 218.106167][T10916] ___sys_sendmsg+0x135/0x1e0 [ 218.107339][T10916] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.108654][T10916] ? lock_acquire+0x2f/0xb0 [ 218.109814][T10916] ? __fget_files+0x40/0x3f0 [ 218.110958][T10916] ? fdget+0x176/0x210 [ 218.111942][T10916] __sys_sendmsg+0x117/0x1f0 [ 218.113129][T10916] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.114427][T10916] ? __ia32_sys_futex_time32+0x1da/0x460 [ 218.115876][T10916] __do_fast_syscall_32+0x73/0x120 [ 218.117172][T10916] do_fast_syscall_32+0x32/0x80 [ 218.118405][T10916] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.119990][T10916] RIP: 0023:0xf7f92579 [ 218.121032][T10916] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 218.125775][T10916] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 218.127902][T10916] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 218.129852][T10916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.131811][T10916] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.133816][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.135784][T10916] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.137763][T10916] [ 218.620998][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.621042][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.841156][T10928] netfs: Couldn't get user pages (rc=-14) [ 219.101050][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 219.661001][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.661068][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.097897][T10936] gfs2: not a GFS2 filesystem [ 220.125177][ T65] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 220.127582][ T65] CPU: 2 UID: 0 PID: 65 Comm: kworker/u33:0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 220.130159][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.132785][ T65] Workqueue: hci4 hci_rx_work [ 220.134084][ T65] Call Trace: [ 220.134982][ T65] [ 220.135758][ T65] dump_stack_lvl+0x16c/0x1f0 [ 220.137010][ T65] sysfs_warn_dup+0x7f/0xa0 [ 220.138201][ T65] sysfs_create_dir_ns+0x24d/0x2b0 [ 220.139539][ T65] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 220.141099][ T65] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 220.142502][ T65] ? kobject_add_internal+0x12d/0x990 [ 220.143898][ T65] ? do_raw_spin_unlock+0x172/0x230 [ 220.145209][ T65] kobject_add_internal+0x2c8/0x990 [ 220.146515][ T65] kobject_add+0x16f/0x240 [ 220.147655][ T65] ? __pfx_kobject_add+0x10/0x10 [ 220.148912][ T65] ? class_to_subsys+0x3e/0x160 [ 220.150168][ T65] ? do_raw_spin_unlock+0x172/0x230 [ 220.151484][ T65] ? kobject_put+0xab/0x5a0 [ 220.152629][ T65] device_add+0x289/0x1a70 [ 220.153791][ T65] ? __pfx_dev_set_name+0x10/0x10 [ 220.155048][ T65] ? __pfx_device_add+0x10/0x10 [ 220.156235][ T65] ? mgmt_send_event_skb+0x2f2/0x460 [ 220.157570][ T65] hci_conn_add_sysfs+0x17e/0x230 [ 220.158830][ T65] le_conn_complete_evt+0xfc7/0x1cf0 [ 220.160146][ T65] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 220.161581][ T65] ? trace_contention_end+0xea/0x140 [ 220.162889][ T65] ? __mutex_lock+0x1a6/0x9c0 [ 220.164090][ T65] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 220.165570][ T65] ? skb_pull_data+0x166/0x210 [ 220.166803][ T65] hci_le_meta_evt+0x2e2/0x5d0 [ 220.168019][ T65] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 220.169644][ T65] hci_event_packet+0x666/0x1190 [ 220.170904][ T65] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 220.171045][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 220.172231][ T65] ? __pfx_hci_event_packet+0x10/0x10 [ 220.175347][ T65] ? mark_held_locks+0x9f/0xe0 [ 220.176577][ T65] ? kcov_remote_start+0x3cf/0x6e0 [ 220.177857][ T65] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.179167][ T65] hci_rx_work+0x2c6/0x16c0 [ 220.180320][ T65] ? lock_acquire+0x2f/0xb0 [ 220.181522][ T65] ? process_one_work+0x8bb/0x1b30 [ 220.183343][ T65] process_one_work+0x958/0x1b30 [ 220.184584][ T65] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 220.186016][ T65] ? __pfx_process_one_work+0x10/0x10 [ 220.187376][ T65] ? assign_work+0x1a0/0x250 [ 220.188535][ T65] worker_thread+0x6c8/0xf00 [ 220.189749][ T65] ? __pfx_worker_thread+0x10/0x10 [ 220.191092][ T65] kthread+0x2c1/0x3a0 [ 220.192171][ T65] ? _raw_spin_unlock_irq+0x23/0x50 [ 220.193557][ T65] ? __pfx_kthread+0x10/0x10 [ 220.194771][ T65] ret_from_fork+0x45/0x80 [ 220.195947][ T65] ? __pfx_kthread+0x10/0x10 [ 220.197172][ T65] ret_from_fork_asm+0x1a/0x30 [ 220.198446][ T65] [ 220.204927][ T65] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 220.209160][ T65] Bluetooth: hci4: failed to register connection device [ 220.309927][T10943] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1546'. [ 220.322737][T10943] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 220.336116][T10943] CPU: 1 UID: 0 PID: 10943 Comm: syz.0.1546 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 220.338870][T10943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.341674][T10943] Call Trace: [ 220.342510][T10943] [ 220.343228][T10943] dump_stack_lvl+0x16c/0x1f0 [ 220.344426][T10943] sysfs_warn_dup+0x7f/0xa0 [ 220.345761][T10943] sysfs_do_create_link_sd+0x124/0x140 [ 220.347115][T10943] sysfs_create_link+0x61/0xc0 [ 220.348355][T10943] device_add+0x62e/0x1a70 [ 220.349518][T10943] ? __pfx_device_add+0x10/0x10 [ 220.350772][T10943] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.352813][T10943] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 220.354675][T10943] wiphy_register+0x20d7/0x2d30 [ 220.355884][T10943] ? __pfx_wiphy_register+0x10/0x10 [ 220.357173][T10943] ieee80211_register_hw+0x2959/0x3fb0 [ 220.358532][T10943] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 220.359947][T10943] ? rcu_is_watching+0x12/0xc0 [ 220.361168][T10943] ? trace_hrtimer_init+0x19d/0x220 [ 220.362593][T10943] ? __hrtimer_init+0x106/0x2c0 [ 220.363788][T10943] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 220.365225][T10943] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 220.366729][T10943] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 220.368371][T10943] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 220.369731][T10943] hwsim_new_radio_nl+0xb42/0x12b0 [ 220.371038][T10943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 220.372506][T10943] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 220.374338][T10943] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 220.376152][T10943] genl_family_rcv_msg_doit+0x202/0x2f0 [ 220.377576][T10943] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 220.379103][T10943] ? bpf_lsm_capable+0x9/0x10 [ 220.380338][T10943] ? security_capable+0x7e/0x260 [ 220.381824][T10943] ? ns_capable+0xd7/0x110 [ 220.382994][T10943] genl_rcv_msg+0x565/0x800 [ 220.384193][T10943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.385519][T10943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 220.386971][T10943] ? __pfx___lock_acquire+0x10/0x10 [ 220.388332][T10943] netlink_rcv_skb+0x165/0x410 [ 220.389598][T10943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.390870][T10943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.392235][T10943] ? down_read+0xc9/0x330 [ 220.393376][T10943] ? __pfx_down_read+0x10/0x10 [ 220.394565][T10943] ? netlink_deliver_tap+0x1ae/0xcf0 [ 220.395886][T10943] genl_rcv+0x28/0x40 [ 220.396908][T10943] netlink_unicast+0x53c/0x7f0 [ 220.398106][T10943] ? __pfx_netlink_unicast+0x10/0x10 [ 220.399431][T10943] ? const_folio_flags.constprop.0+0x56/0x150 [ 220.400978][T10943] ? __phys_addr_symbol+0x30/0x80 [ 220.402634][T10943] ? __check_object_size+0x488/0x710 [ 220.404063][T10943] netlink_sendmsg+0x8b8/0xd70 [ 220.405276][T10943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.406575][T10943] ? lock_acquire+0x2f/0xb0 [ 220.407738][T10943] ____sys_sendmsg+0x9ae/0xb40 [ 220.408909][T10943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.410218][T10943] ? get_compat_msghdr+0x11b/0x170 [ 220.411526][T10943] ? __pfx___lock_acquire+0x10/0x10 [ 220.412865][T10943] ___sys_sendmsg+0x135/0x1e0 [ 220.414088][T10943] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.415416][T10943] ? lock_acquire+0x2f/0xb0 [ 220.416578][T10943] ? __fget_files+0x40/0x3f0 [ 220.417752][T10943] ? fdget+0x176/0x210 [ 220.418791][T10943] __sys_sendmsg+0x117/0x1f0 [ 220.419965][T10943] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.421319][T10943] ? __ia32_sys_futex_time32+0x1da/0x460 [ 220.422751][T10943] __do_fast_syscall_32+0x73/0x120 [ 220.424036][T10943] do_fast_syscall_32+0x32/0x80 [ 220.425288][T10943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.426880][T10943] RIP: 0023:0xf7ff3579 [ 220.427924][T10943] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 220.432757][T10943] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 220.434863][T10943] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 220.436862][T10943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.438900][T10943] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.440904][T10943] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 220.443049][T10943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.445105][T10943] [ 220.701041][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.835043][T10956] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 220.949332][T10966] syz.0.1554 (10966): drop_caches: 2 [ 221.034600][T10968] usb usb6: usbfs: process 10968 (syz.0.1554) did not claim interface 0 before use [ 221.474783][T10974] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1556'. [ 221.478654][T10974] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 221.480726][T10974] CPU: 2 UID: 0 PID: 10974 Comm: syz.2.1556 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 221.483341][T10974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.486057][T10974] Call Trace: [ 221.486917][T10974] [ 221.487660][T10974] dump_stack_lvl+0x16c/0x1f0 [ 221.488838][T10974] sysfs_warn_dup+0x7f/0xa0 [ 221.489952][T10974] sysfs_do_create_link_sd+0x124/0x140 [ 221.491254][T10974] sysfs_create_link+0x61/0xc0 [ 221.492406][T10974] device_add+0x62e/0x1a70 [ 221.493509][T10974] ? __pfx_device_add+0x10/0x10 [ 221.494716][T10974] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.496120][T10974] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 221.497691][T10974] wiphy_register+0x20d7/0x2d30 [ 221.499160][T10974] ? __pfx_wiphy_register+0x10/0x10 [ 221.500744][T10974] ieee80211_register_hw+0x2959/0x3fb0 [ 221.502441][T10974] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 221.503941][T10974] ? rcu_is_watching+0x12/0xc0 [ 221.505176][T10974] ? trace_hrtimer_init+0x19d/0x220 [ 221.506439][T10974] ? __hrtimer_init+0x106/0x2c0 [ 221.507656][T10974] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 221.509053][T10974] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 221.510503][T10974] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 221.512082][T10974] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 221.513389][T10974] hwsim_new_radio_nl+0xb42/0x12b0 [ 221.514609][T10974] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.515948][T10974] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 221.517757][T10974] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 221.519544][T10974] genl_family_rcv_msg_doit+0x202/0x2f0 [ 221.520917][T10974] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.522606][T10974] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.524372][T10974] genl_rcv_msg+0x565/0x800 [ 221.525599][T10974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.527197][T10974] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.528851][T10974] netlink_rcv_skb+0x165/0x410 [ 221.530356][T10974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.531754][T10974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.533170][T10974] ? down_read+0xc9/0x330 [ 221.534416][T10974] ? __pfx_down_read+0x10/0x10 [ 221.535823][T10974] ? netlink_deliver_tap+0x1ae/0xcf0 [ 221.537468][T10974] genl_rcv+0x28/0x40 [ 221.538704][T10974] netlink_unicast+0x53c/0x7f0 [ 221.540075][T10974] ? __pfx_netlink_unicast+0x10/0x10 [ 221.541347][T10974] ? const_folio_flags.constprop.0+0x56/0x150 [ 221.542893][T10974] ? __phys_addr_symbol+0x30/0x80 [ 221.544306][T10974] ? __check_object_size+0x488/0x710 [ 221.545993][T10974] netlink_sendmsg+0x8b8/0xd70 [ 221.547451][T10974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.549235][T10974] ? lock_acquire+0x2f/0xb0 [ 221.550409][T10974] ____sys_sendmsg+0x9ae/0xb40 [ 221.551774][T10974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.553383][T10974] ? get_compat_msghdr+0x11b/0x170 [ 221.554706][T10974] ? __pfx___lock_acquire+0x10/0x10 [ 221.556026][T10974] ___sys_sendmsg+0x135/0x1e0 [ 221.557223][T10974] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.558565][T10974] ? lock_acquire+0x2f/0xb0 [ 221.559754][T10974] ? __fget_files+0x40/0x3f0 [ 221.561049][T10974] ? fdget+0x176/0x210 [ 221.562195][T10974] __sys_sendmsg+0x117/0x1f0 [ 221.563387][T10974] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.564736][T10974] ? kvm_sched_clock_read+0x11/0x20 [ 221.566146][T10974] __do_fast_syscall_32+0x73/0x120 [ 221.567503][T10974] do_fast_syscall_32+0x32/0x80 [ 221.568799][T10974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.570473][T10974] RIP: 0023:0xf7f92579 [ 221.571575][T10974] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.576439][T10974] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 221.578533][T10974] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 221.580522][T10974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.582639][T10974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.584527][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.586514][T10974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.588517][T10974] [ 222.173176][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 222.231117][ T5357] Bluetooth: hci4: command tx timeout [ 222.423239][T10996] 9pnet_fd: Insufficient options for proto=fd [ 222.572395][T11005] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1566'. [ 222.576191][T11005] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 222.578356][T11005] CPU: 2 UID: 0 PID: 11005 Comm: syz.2.1566 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 222.581292][T11005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 222.584345][T11005] Call Trace: [ 222.585222][T11005] [ 222.585991][T11005] dump_stack_lvl+0x16c/0x1f0 [ 222.587230][T11005] sysfs_warn_dup+0x7f/0xa0 [ 222.588406][T11005] sysfs_do_create_link_sd+0x124/0x140 [ 222.589817][T11005] sysfs_create_link+0x61/0xc0 [ 222.591188][T11005] device_add+0x62e/0x1a70 [ 222.592689][T11005] ? __pfx_device_add+0x10/0x10 [ 222.594466][T11005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.596367][T11005] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 222.597977][T11005] wiphy_register+0x20d7/0x2d30 [ 222.599417][T11005] ? __pfx_wiphy_register+0x10/0x10 [ 222.600787][T11005] ieee80211_register_hw+0x2959/0x3fb0 [ 222.602654][T11005] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 222.604163][T11005] ? rcu_is_watching+0x12/0xc0 [ 222.605419][T11005] ? trace_hrtimer_init+0x19d/0x220 [ 222.606770][T11005] ? __hrtimer_init+0x106/0x2c0 [ 222.608034][T11005] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 222.609520][T11005] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 222.611226][T11005] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 222.613469][T11005] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 222.614839][T11005] hwsim_new_radio_nl+0xb42/0x12b0 [ 222.616166][T11005] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 222.617612][T11005] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 222.619508][T11005] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 222.621661][T11005] genl_family_rcv_msg_doit+0x202/0x2f0 [ 222.623318][T11005] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 222.624886][T11005] ? bpf_lsm_capable+0x9/0x10 [ 222.626122][T11005] ? security_capable+0x7e/0x260 [ 222.627402][T11005] ? ns_capable+0xd7/0x110 [ 222.628561][T11005] genl_rcv_msg+0x565/0x800 [ 222.629754][T11005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.631155][T11005] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 222.633154][T11005] netlink_rcv_skb+0x165/0x410 [ 222.634403][T11005] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.635710][T11005] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.637236][T11005] ? down_read+0xc9/0x330 [ 222.638354][T11005] ? __pfx_down_read+0x10/0x10 [ 222.639666][T11005] ? rcu_is_watching+0x12/0xc0 [ 222.640979][T11005] genl_rcv+0x28/0x40 [ 222.642472][T11005] netlink_unicast+0x53c/0x7f0 [ 222.643726][T11005] ? __pfx_netlink_unicast+0x10/0x10 [ 222.645041][T11005] ? const_folio_flags.constprop.0+0x56/0x150 [ 222.646573][T11005] ? __phys_addr_symbol+0x30/0x80 [ 222.647853][T11005] ? __check_object_size+0x488/0x710 [ 222.649206][T11005] netlink_sendmsg+0x8b8/0xd70 [ 222.650428][T11005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.652165][T11005] ? lock_acquire+0x2f/0xb0 [ 222.653634][T11005] ____sys_sendmsg+0x9ae/0xb40 [ 222.654860][T11005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.656218][T11005] ? get_compat_msghdr+0x11b/0x170 [ 222.657554][T11005] ? __pfx___lock_acquire+0x10/0x10 [ 222.658888][T11005] ___sys_sendmsg+0x135/0x1e0 [ 222.660091][T11005] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.661687][T11005] ? lock_acquire+0x2f/0xb0 [ 222.663056][T11005] ? __fget_files+0x40/0x3f0 [ 222.664252][T11005] ? fdget+0x176/0x210 [ 222.665323][T11005] __sys_sendmsg+0x117/0x1f0 [ 222.666528][T11005] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.667848][T11005] ? __ia32_sys_futex_time32+0x1da/0x460 [ 222.669319][T11005] __do_fast_syscall_32+0x73/0x120 [ 222.670584][T11005] do_fast_syscall_32+0x32/0x80 [ 222.672253][T11005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.674292][T11005] RIP: 0023:0xf7f92579 [ 222.675377][T11005] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 222.680403][T11005] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 222.682522][T11005] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 222.684430][T11005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.686402][T11005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.688415][T11005] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 222.690509][T11005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.692515][T11005] [ 222.781022][ C2] net_ratelimit: 4 callbacks suppressed [ 222.781036][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.261002][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 223.609430][T11021] lo speed is unknown, defaulting to 1000 [ 223.820967][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.821030][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.167684][T11033] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1575'. [ 224.171992][T11033] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 224.174174][T11033] CPU: 1 UID: 0 PID: 11033 Comm: syz.3.1575 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 224.176958][T11033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.179745][T11033] Call Trace: [ 224.180663][T11033] [ 224.181463][T11033] dump_stack_lvl+0x16c/0x1f0 [ 224.182714][T11033] sysfs_warn_dup+0x7f/0xa0 [ 224.183923][T11033] sysfs_do_create_link_sd+0x124/0x140 [ 224.185369][T11033] sysfs_create_link+0x61/0xc0 [ 224.186638][T11033] device_add+0x62e/0x1a70 [ 224.187825][T11033] ? __pfx_device_add+0x10/0x10 [ 224.189116][T11033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.190676][T11033] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 224.192273][T11033] wiphy_register+0x20d7/0x2d30 [ 224.193601][T11033] ? __pfx_wiphy_register+0x10/0x10 [ 224.194992][T11033] ieee80211_register_hw+0x2959/0x3fb0 [ 224.196436][T11033] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 224.197997][T11033] ? rcu_is_watching+0x12/0xc0 [ 224.199268][T11033] ? trace_hrtimer_init+0x19d/0x220 [ 224.200578][T11033] ? __hrtimer_init+0x106/0x2c0 [ 224.201835][T11033] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 224.203338][T11033] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 224.204948][T11033] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 224.206672][T11033] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 224.208042][T11033] hwsim_new_radio_nl+0xb42/0x12b0 [ 224.209393][T11033] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 224.210858][T11033] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 224.212796][T11033] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 224.214727][T11033] genl_family_rcv_msg_doit+0x202/0x2f0 [ 224.216164][T11033] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 224.217781][T11033] ? bpf_lsm_capable+0x9/0x10 [ 224.219030][T11033] ? security_capable+0x7e/0x260 [ 224.220342][T11033] ? ns_capable+0xd7/0x110 [ 224.221532][T11033] genl_rcv_msg+0x565/0x800 [ 224.222695][T11033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.224009][T11033] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 224.225474][T11033] netlink_rcv_skb+0x165/0x410 [ 224.226734][T11033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.228061][T11033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.229467][T11033] ? down_read+0xc9/0x330 [ 224.230619][T11033] ? __pfx_down_read+0x10/0x10 [ 224.231894][T11033] ? netlink_deliver_tap+0x1ae/0xcf0 [ 224.233297][T11033] genl_rcv+0x28/0x40 [ 224.234360][T11033] netlink_unicast+0x53c/0x7f0 [ 224.235627][T11033] ? __pfx_netlink_unicast+0x10/0x10 [ 224.237019][T11033] ? bpf_lsm_netlink_send+0x4/0x10 [ 224.238373][T11033] netlink_sendmsg+0x8b8/0xd70 [ 224.239640][T11033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.241036][T11033] ? lock_acquire+0x2f/0xb0 [ 224.242243][T11033] ____sys_sendmsg+0x9ae/0xb40 [ 224.243491][T11033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.244882][T11033] ? get_compat_msghdr+0x11b/0x170 [ 224.246240][T11033] ? __pfx___lock_acquire+0x10/0x10 [ 224.247611][T11033] ___sys_sendmsg+0x135/0x1e0 [ 224.248865][T11033] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.250253][T11033] ? lock_acquire+0x2f/0xb0 [ 224.251438][T11033] ? __fget_files+0x40/0x3f0 [ 224.252653][T11033] ? fdget+0x176/0x210 [ 224.253688][T11033] __sys_sendmsg+0x117/0x1f0 [ 224.254908][T11033] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.256248][T11033] ? __ia32_sys_futex_time32+0x1da/0x460 [ 224.257733][T11033] __do_fast_syscall_32+0x73/0x120 [ 224.259085][T11033] do_fast_syscall_32+0x32/0x80 [ 224.260354][T11033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.262015][T11033] RIP: 0023:0xf7fe2579 [ 224.263090][T11033] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.268070][T11033] RSP: 002b:00000000f574556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 224.270243][T11033] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 224.272307][T11033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.274375][T11033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.276435][T11033] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 224.278499][T11033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.280532][T11033] [ 224.282943][T11035] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 224.284914][T11035] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.301011][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 224.452222][T11041] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1576'. [ 224.680783][T11051] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1580'. [ 224.860947][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.860957][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.340943][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 225.566699][T11064] sctp: [Deprecated]: syz.3.1581 (pid 11064) Use of int in max_burst socket option deprecated. [ 225.566699][T11064] Use struct sctp_assoc_value instead [ 225.900941][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.901011][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.945966][T11085] bridge0: entered allmulticast mode [ 226.120019][T11088] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1587'. [ 226.127341][T11088] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 226.129471][T11088] CPU: 3 UID: 0 PID: 11088 Comm: syz.0.1587 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 226.132347][T11088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.135373][T11088] Call Trace: [ 226.136330][T11088] [ 226.137196][T11088] dump_stack_lvl+0x16c/0x1f0 [ 226.138571][T11088] sysfs_warn_dup+0x7f/0xa0 [ 226.140087][T11088] sysfs_do_create_link_sd+0x124/0x140 [ 226.141618][T11088] sysfs_create_link+0x61/0xc0 [ 226.142902][T11088] device_add+0x62e/0x1a70 [ 226.144175][T11088] ? __pfx_device_add+0x10/0x10 [ 226.145601][T11088] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.147227][T11088] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 226.148951][T11088] wiphy_register+0x20d7/0x2d30 [ 226.150294][T11088] ? __pfx_wiphy_register+0x10/0x10 [ 226.151657][T11088] ieee80211_register_hw+0x2959/0x3fb0 [ 226.153102][T11088] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 226.154620][T11088] ? rcu_is_watching+0x12/0xc0 [ 226.155897][T11088] ? trace_hrtimer_init+0x19d/0x220 [ 226.157307][T11088] ? __hrtimer_init+0x106/0x2c0 [ 226.158586][T11088] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 226.160261][T11088] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 226.161840][T11088] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 226.163536][T11088] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 226.164924][T11088] hwsim_new_radio_nl+0xb42/0x12b0 [ 226.166261][T11088] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 226.167701][T11088] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 226.169592][T11088] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 226.171592][T11088] genl_family_rcv_msg_doit+0x202/0x2f0 [ 226.173134][T11088] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.174706][T11088] ? bpf_lsm_capable+0x9/0x10 [ 226.175927][T11088] ? security_capable+0x7e/0x260 [ 226.177228][T11088] ? ns_capable+0xd7/0x110 [ 226.178382][T11088] genl_rcv_msg+0x565/0x800 [ 226.179592][T11088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.181414][T11088] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 226.182822][T11088] ? __pfx___lock_acquire+0x10/0x10 [ 226.184177][T11088] netlink_rcv_skb+0x165/0x410 [ 226.185435][T11088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.186751][T11088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.188264][T11088] ? down_read+0xc9/0x330 [ 226.189449][T11088] ? __pfx_down_read+0x10/0x10 [ 226.190773][T11088] ? netlink_deliver_tap+0x1ae/0xcf0 [ 226.192246][T11088] genl_rcv+0x28/0x40 [ 226.193403][T11088] netlink_unicast+0x53c/0x7f0 [ 226.194673][T11088] ? __pfx_netlink_unicast+0x10/0x10 [ 226.196135][T11088] ? const_folio_flags.constprop.0+0x56/0x150 [ 226.197743][T11088] ? __phys_addr_symbol+0x30/0x80 [ 226.199058][T11088] ? __check_object_size+0x488/0x710 [ 226.200906][T11088] netlink_sendmsg+0x8b8/0xd70 [ 226.202506][T11088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.204019][T11088] ? lock_acquire+0x2f/0xb0 [ 226.205520][T11088] ____sys_sendmsg+0x9ae/0xb40 [ 226.206965][T11088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.208464][T11088] ? get_compat_msghdr+0x11b/0x170 [ 226.209856][T11088] ? __pfx___lock_acquire+0x10/0x10 [ 226.211348][T11088] ___sys_sendmsg+0x135/0x1e0 [ 226.212639][T11088] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.214059][T11088] ? lock_acquire+0x2f/0xb0 [ 226.215246][T11088] ? __fget_files+0x40/0x3f0 [ 226.216459][T11088] ? fdget+0x176/0x210 [ 226.217536][T11088] __sys_sendmsg+0x117/0x1f0 [ 226.218740][T11088] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.220393][T11088] ? __ia32_sys_futex_time32+0x1da/0x460 [ 226.222345][T11088] __do_fast_syscall_32+0x73/0x120 [ 226.223689][T11088] do_fast_syscall_32+0x32/0x80 [ 226.224973][T11088] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.226617][T11088] RIP: 0023:0xf7ff3579 [ 226.227688][T11088] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 226.232592][T11088] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 226.234729][T11088] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000000 [ 226.236779][T11088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.238833][T11088] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.241537][T11088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.243600][T11088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.245652][T11088] [ 226.405825][T11095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1591'. [ 226.408219][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1591'. [ 226.410683][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1591'. [ 226.502231][T11095] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 227.972690][ T39] audit: type=1326 audit(1729696352.806:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 227.979162][ T39] audit: type=1326 audit(1729696352.806:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 227.981019][ C2] net_ratelimit: 4 callbacks suppressed [ 227.981029][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.989614][ T39] audit: type=1326 audit(1729696352.806:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 228.060380][ T39] audit: type=1326 audit(1729696352.806:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 228.065653][ T39] audit: type=1326 audit(1729696352.806:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 228.070974][ T39] audit: type=1326 audit(1729696352.806:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 228.076497][ T39] audit: type=1326 audit(1729696352.806:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 228.082580][ T39] audit: type=1326 audit(1729696352.806:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 228.097084][ T39] audit: type=1326 audit(1729696352.806:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 228.104321][ T39] audit: type=1326 audit(1729696352.806:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11140 comm="syz.0.1603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 228.113351][T11147] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1605'. [ 228.461013][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.030921][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.030932][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.051055][T11126] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 229.225200][T11126] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 229.227317][T11126] usb 8-1: can't read configurations, error -61 [ 229.352294][T11126] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 229.511155][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 229.572981][T11126] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 229.574973][T11126] usb 8-1: can't read configurations, error -61 [ 229.576817][T11126] usb usb8-port1: attempt power cycle [ 229.889049][T11213] overlay: Unknown parameter '/' [ 229.931276][T11213] netlink: 'syz.1.1621': attribute type 10 has an invalid length. [ 229.934045][T11213] hsr0: entered promiscuous mode [ 229.943832][T11213] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.950921][T11213] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 229.953851][T11213] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 229.957043][T11213] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 229.961056][T11126] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 229.983545][T11213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 230.000506][T11126] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 230.060956][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.060964][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.082896][T11126] usb 8-1: can't read configurations, error -61 [ 230.250928][T11126] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 230.281254][T11126] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 230.283337][T11126] usb 8-1: can't read configurations, error -61 [ 230.285759][T11126] usb usb8-port1: unable to enumerate USB device [ 230.540957][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 231.100961][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.110950][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.324225][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1625'. [ 231.344806][T11232] syz.2.1625(11232): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 232.030949][T11239] syzkaller1: entered promiscuous mode [ 232.034745][T11239] syzkaller1: entered allmulticast mode [ 232.038448][ T65] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 232.326426][T11243] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1629'. [ 232.332199][T11243] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 232.334332][T11243] CPU: 0 UID: 0 PID: 11243 Comm: syz.0.1629 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 232.337214][T11243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.339980][T11243] Call Trace: [ 232.340867][T11243] [ 232.341640][T11243] dump_stack_lvl+0x16c/0x1f0 [ 232.342873][T11243] sysfs_warn_dup+0x7f/0xa0 [ 232.344037][T11243] sysfs_do_create_link_sd+0x124/0x140 [ 232.345455][T11243] sysfs_create_link+0x61/0xc0 [ 232.346668][T11243] device_add+0x62e/0x1a70 [ 232.347838][T11243] ? __pfx_device_add+0x10/0x10 [ 232.349097][T11243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.350636][T11243] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 232.352218][T11243] wiphy_register+0x20d7/0x2d30 [ 232.353510][T11243] ? __pfx_wiphy_register+0x10/0x10 [ 232.354863][T11243] ieee80211_register_hw+0x2959/0x3fb0 [ 232.356274][T11243] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 232.357797][T11243] ? rcu_is_watching+0x12/0xc0 [ 232.359039][T11243] ? trace_hrtimer_init+0x19d/0x220 [ 232.360389][T11243] ? __hrtimer_init+0x106/0x2c0 [ 232.361660][T11243] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 232.363142][T11243] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 232.364716][T11243] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 232.366421][T11243] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 232.367796][T11243] hwsim_new_radio_nl+0xb42/0x12b0 [ 232.369130][T11243] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 232.370561][T11243] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 232.372451][T11243] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 232.374314][T11243] genl_family_rcv_msg_doit+0x202/0x2f0 [ 232.375693][T11243] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 232.377257][T11243] ? bpf_lsm_capable+0x9/0x10 [ 232.378485][T11243] ? security_capable+0x7e/0x260 [ 232.379779][T11243] ? ns_capable+0xd7/0x110 [ 232.380951][T11243] genl_rcv_msg+0x565/0x800 [ 232.382144][T11243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.383452][T11243] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 232.384893][T11243] ? __pfx___lock_acquire+0x10/0x10 [ 232.386244][T11243] netlink_rcv_skb+0x165/0x410 [ 232.387493][T11243] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.388814][T11243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.390196][T11243] ? down_read+0xc9/0x330 [ 232.391286][T11243] ? __pfx_down_read+0x10/0x10 [ 232.392539][T11243] ? netlink_deliver_tap+0x1ae/0xcf0 [ 232.393923][T11243] genl_rcv+0x28/0x40 [ 232.394967][T11243] netlink_unicast+0x53c/0x7f0 [ 232.396210][T11243] ? __pfx_netlink_unicast+0x10/0x10 [ 232.397586][T11243] ? const_folio_flags.constprop.0+0x56/0x150 [ 232.399158][T11243] ? __phys_addr_symbol+0x30/0x80 [ 232.400465][T11243] ? __check_object_size+0x488/0x710 [ 232.401843][T11243] netlink_sendmsg+0x8b8/0xd70 [ 232.403013][T11243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.404389][T11243] ? lock_acquire+0x2f/0xb0 [ 232.405585][T11243] ____sys_sendmsg+0x9ae/0xb40 [ 232.406836][T11243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.408198][T11243] ? get_compat_msghdr+0x11b/0x170 [ 232.409534][T11243] ? __pfx___lock_acquire+0x10/0x10 [ 232.410819][T11243] ___sys_sendmsg+0x135/0x1e0 [ 232.412026][T11243] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.413370][T11243] ? lock_acquire+0x2f/0xb0 [ 232.414523][T11243] ? __fget_files+0x40/0x3f0 [ 232.415707][T11243] ? fdget+0x176/0x210 [ 232.416746][T11243] __sys_sendmsg+0x117/0x1f0 [ 232.417860][T11243] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.419078][T11243] ? __ia32_sys_futex_time32+0x1da/0x460 [ 232.420503][T11243] __do_fast_syscall_32+0x73/0x120 [ 232.421813][T11243] do_fast_syscall_32+0x32/0x80 [ 232.423010][T11243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.424610][T11243] RIP: 0023:0xf7ff3579 [ 232.425649][T11243] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.430401][T11243] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 232.432493][T11243] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 232.434476][T11243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.436448][T11243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.438427][T11243] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 232.440388][T11243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.442336][T11243] [ 232.456415][T11245] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.588212][T11249] overlay: Unknown parameter 'smackfstransmute' [ 232.644566][T11256] all: renamed from bridge_slave_0 (while UP) [ 233.090979][ T5384] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 233.092409][T11274] overlayfs: failed to resolve './file1': -2 [ 233.180958][ C2] net_ratelimit: 4 callbacks suppressed [ 233.180971][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.286792][ T5384] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 233.289227][ T5384] usb 5-1: can't read configurations, error -61 [ 233.440986][ T5384] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 233.559127][T11280] fuse: Unknown parameter 'grk€”Éd' [ 233.568259][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.570391][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.578845][T11280] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.582102][T11280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.584606][T11280] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.586515][T11280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.599862][T11280] team0: Port device bridge0 added [ 233.602828][ T5384] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 233.604894][ T5384] usb 5-1: can't read configurations, error -61 [ 233.606697][ T5384] usb usb5-port1: attempt power cycle [ 233.660925][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 233.716590][T11287] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1642'. [ 233.723375][T11287] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 233.725694][T11287] CPU: 2 UID: 0 PID: 11287 Comm: syz.1.1642 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 233.728456][T11287] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.731279][T11287] Call Trace: [ 233.732161][T11287] [ 233.732958][T11287] dump_stack_lvl+0x16c/0x1f0 [ 233.734200][T11287] sysfs_warn_dup+0x7f/0xa0 [ 233.735396][T11287] sysfs_do_create_link_sd+0x124/0x140 [ 233.736818][T11287] sysfs_create_link+0x61/0xc0 [ 233.738079][T11287] device_add+0x62e/0x1a70 [ 233.739254][T11287] ? __pfx_device_add+0x10/0x10 [ 233.740532][T11287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.742084][T11287] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 233.743658][T11287] wiphy_register+0x20d7/0x2d30 [ 233.744945][T11287] ? __pfx_wiphy_register+0x10/0x10 [ 233.746309][T11287] ieee80211_register_hw+0x2959/0x3fb0 [ 233.747744][T11287] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 233.749273][T11287] ? rcu_is_watching+0x12/0xc0 [ 233.750528][T11287] ? trace_hrtimer_init+0x19d/0x220 [ 233.751893][T11287] ? __hrtimer_init+0x106/0x2c0 [ 233.753193][T11287] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 233.754690][T11287] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 233.756273][T11287] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 233.758004][T11287] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 233.759391][T11287] hwsim_new_radio_nl+0xb42/0x12b0 [ 233.760739][T11287] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 233.762189][T11287] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 233.764105][T11287] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 233.766034][T11287] genl_family_rcv_msg_doit+0x202/0x2f0 [ 233.767480][T11287] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 233.769079][T11287] ? bpf_lsm_capable+0x9/0x10 [ 233.770315][T11287] ? security_capable+0x7e/0x260 [ 233.771617][T11287] ? ns_capable+0xd7/0x110 [ 233.772950][T11287] genl_rcv_msg+0x565/0x800 [ 233.774165][T11287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.775500][T11287] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 233.776982][T11287] netlink_rcv_skb+0x165/0x410 [ 233.778260][T11287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 233.779570][T11287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.780950][T11287] ? down_read+0xc9/0x330 [ 233.782097][T11287] ? __pfx_down_read+0x10/0x10 [ 233.783354][T11287] ? netlink_deliver_tap+0x1ae/0xcf0 [ 233.784684][T11287] genl_rcv+0x28/0x40 [ 233.785771][T11287] netlink_unicast+0x53c/0x7f0 [ 233.787031][T11287] ? __pfx_netlink_unicast+0x10/0x10 [ 233.788401][T11287] ? const_folio_flags.constprop.0+0x56/0x150 [ 233.790012][T11287] ? __phys_addr_symbol+0x30/0x80 [ 233.791334][T11287] ? __check_object_size+0x488/0x710 [ 233.792733][T11287] netlink_sendmsg+0x8b8/0xd70 [ 233.794000][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.795383][T11287] ? lock_acquire+0x2f/0xb0 [ 233.796587][T11287] ____sys_sendmsg+0x9ae/0xb40 [ 233.797859][T11287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.799243][T11287] ? get_compat_msghdr+0x11b/0x170 [ 233.800586][T11287] ? __pfx___lock_acquire+0x10/0x10 [ 233.801948][T11287] ___sys_sendmsg+0x135/0x1e0 [ 233.803188][T11287] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.804562][T11287] ? lock_acquire+0x2f/0xb0 [ 233.805773][T11287] ? __fget_files+0x40/0x3f0 [ 233.806992][T11287] ? fdget+0x176/0x210 [ 233.808075][T11287] __sys_sendmsg+0x117/0x1f0 [ 233.809301][T11287] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.810653][T11287] ? __ia32_sys_futex_time32+0x1da/0x460 [ 233.812127][T11287] __do_fast_syscall_32+0x73/0x120 [ 233.813482][T11287] do_fast_syscall_32+0x32/0x80 [ 233.814765][T11287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.816404][T11287] RIP: 0023:0xf7f97579 [ 233.817470][T11287] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 233.822433][T11287] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 233.824607][T11287] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 233.826682][T11287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.828737][T11287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.830801][T11287] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 233.832866][T11287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.834934][T11287] [ 233.956268][ T5384] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 234.096228][ T5384] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 234.098302][ T5384] usb 5-1: can't read configurations, error -61 [ 234.220917][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.230896][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.242162][ T5384] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 234.277362][ T5384] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 234.279456][ T5384] usb 5-1: can't read configurations, error -61 [ 234.281698][ T5384] usb usb5-port1: unable to enumerate USB device [ 234.312191][T11300] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 234.710925][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 234.924975][T11315] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 234.932859][T11316] pimreg: entered allmulticast mode [ 234.980126][T11315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1648'. [ 235.260962][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.271040][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.750912][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 235.973445][T11326] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.203915][T11337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1655'. [ 236.300890][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.300507][T11356] fuse: Bad value for 'group_id' [ 237.302185][T11356] fuse: Bad value for 'group_id' [ 237.888128][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1663'. [ 238.390898][ C3] net_ratelimit: 5 callbacks suppressed [ 238.390911][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.540975][ T5384] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 238.860910][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 238.951066][T11376] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1667'. [ 238.970259][T11376] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 238.977212][T11376] CPU: 3 UID: 0 PID: 11376 Comm: syz.3.1667 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 238.979986][T11376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.982934][T11376] Call Trace: [ 238.983806][T11376] [ 238.984578][T11376] dump_stack_lvl+0x16c/0x1f0 [ 238.985904][T11376] sysfs_warn_dup+0x7f/0xa0 [ 238.987127][T11376] sysfs_do_create_link_sd+0x124/0x140 [ 238.988544][T11376] sysfs_create_link+0x61/0xc0 [ 238.989807][T11376] device_add+0x62e/0x1a70 [ 238.991006][T11376] ? __pfx_device_add+0x10/0x10 [ 238.992284][T11376] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.993847][T11376] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 238.995659][T11376] wiphy_register+0x20d7/0x2d30 [ 238.997273][T11376] ? __pfx_wiphy_register+0x10/0x10 [ 238.998924][T11376] ieee80211_register_hw+0x2959/0x3fb0 [ 239.000991][T11376] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 239.002519][T11376] ? rcu_is_watching+0x12/0xc0 [ 239.003770][T11376] ? trace_hrtimer_init+0x19d/0x220 [ 239.005139][T11376] ? __hrtimer_init+0x106/0x2c0 [ 239.006750][T11376] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 239.008609][T11376] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 239.010667][T11376] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 239.012407][T11376] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 239.013837][T11376] hwsim_new_radio_nl+0xb42/0x12b0 [ 239.015189][T11376] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 239.016664][T11376] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 239.018591][T11376] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 239.020512][T11376] genl_family_rcv_msg_doit+0x202/0x2f0 [ 239.022010][T11376] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 239.023619][T11376] ? bpf_lsm_capable+0x9/0x10 [ 239.024881][T11376] ? security_capable+0x7e/0x260 [ 239.026198][T11376] ? ns_capable+0xd7/0x110 [ 239.027384][T11376] genl_rcv_msg+0x565/0x800 [ 239.028601][T11376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.029928][T11376] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 239.031356][T11376] netlink_rcv_skb+0x165/0x410 [ 239.032646][T11376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.033985][T11376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.035389][T11376] ? down_read+0xc9/0x330 [ 239.036539][T11376] ? __pfx_down_read+0x10/0x10 [ 239.037817][T11376] ? rcu_is_watching+0x12/0xc0 [ 239.039082][T11376] genl_rcv+0x28/0x40 [ 239.040143][T11376] netlink_unicast+0x53c/0x7f0 [ 239.041390][T11376] ? __pfx_netlink_unicast+0x10/0x10 [ 239.042718][T11376] ? const_folio_flags.constprop.0+0x56/0x150 [ 239.044283][T11376] ? __phys_addr_symbol+0x30/0x80 [ 239.045605][T11376] ? __check_object_size+0x488/0x710 [ 239.046917][T11376] netlink_sendmsg+0x8b8/0xd70 [ 239.048098][T11376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.049504][T11376] ? lock_acquire+0x2f/0xb0 [ 239.050723][T11376] ____sys_sendmsg+0x9ae/0xb40 [ 239.051987][T11376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.053389][T11376] ? get_compat_msghdr+0x11b/0x170 [ 239.054738][T11376] ? __pfx___lock_acquire+0x10/0x10 [ 239.056107][T11376] ___sys_sendmsg+0x135/0x1e0 [ 239.057363][T11376] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.058738][T11376] ? lock_acquire+0x2f/0xb0 [ 239.059934][T11376] ? __fget_files+0x40/0x3f0 [ 239.061160][T11376] ? fdget+0x176/0x210 [ 239.062235][T11376] __sys_sendmsg+0x117/0x1f0 [ 239.063448][T11376] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.064778][T11376] ? __ia32_sys_futex_time32+0x1da/0x460 [ 239.066337][T11376] __do_fast_syscall_32+0x73/0x120 [ 239.067697][T11376] do_fast_syscall_32+0x32/0x80 [ 239.068994][T11376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.070652][T11376] RIP: 0023:0xf7fe2579 [ 239.071726][T11376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 239.076729][T11376] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 239.078910][T11376] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 239.080988][T11376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.083037][T11376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.085108][T11376] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 239.087227][T11376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.089294][T11376] [ 239.421043][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.430922][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.900932][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 240.404721][T11402] netfs: Couldn't get user pages (rc=-14) [ 240.406414][T11402] netfs: Zero-sized read [R=39] [ 240.464668][T11407] overlayfs: failed to resolve './file0': -2 [ 240.470922][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.471649][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.940915][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 241.371440][T11419] vivid-007: disconnect [ 241.500903][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.510880][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.062906][T11423] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1679'. [ 242.067738][T11423] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 242.071674][T11423] CPU: 1 UID: 0 PID: 11423 Comm: syz.1.1679 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 242.074466][T11423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.077247][T11423] Call Trace: [ 242.078125][T11423] [ 242.078899][T11423] dump_stack_lvl+0x16c/0x1f0 [ 242.080171][T11423] sysfs_warn_dup+0x7f/0xa0 [ 242.081378][T11423] sysfs_do_create_link_sd+0x124/0x140 [ 242.082796][T11423] sysfs_create_link+0x61/0xc0 [ 242.084043][T11423] device_add+0x62e/0x1a70 [ 242.085216][T11423] ? __pfx_device_add+0x10/0x10 [ 242.086486][T11423] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 242.088023][T11423] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 242.089732][T11423] wiphy_register+0x20d7/0x2d30 [ 242.091065][T11423] ? __pfx_wiphy_register+0x10/0x10 [ 242.092420][T11423] ieee80211_register_hw+0x2959/0x3fb0 [ 242.093870][T11423] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 242.095385][T11423] ? rcu_is_watching+0x12/0xc0 [ 242.096638][T11423] ? trace_hrtimer_init+0x19d/0x220 [ 242.098000][T11423] ? __hrtimer_init+0x106/0x2c0 [ 242.099294][T11423] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 242.100808][T11423] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 242.102384][T11423] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 242.104084][T11423] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 242.105466][T11423] hwsim_new_radio_nl+0xb42/0x12b0 [ 242.106810][T11423] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 242.108250][T11423] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 242.110184][T11423] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 242.112077][T11423] genl_family_rcv_msg_doit+0x202/0x2f0 [ 242.113538][T11423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 242.115112][T11423] ? bpf_lsm_capable+0x9/0x10 [ 242.116335][T11423] ? security_capable+0x7e/0x260 [ 242.117628][T11423] ? ns_capable+0xd7/0x110 [ 242.118790][T11423] genl_rcv_msg+0x565/0x800 [ 242.120029][T11423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.121352][T11423] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 242.122791][T11423] netlink_rcv_skb+0x165/0x410 [ 242.124035][T11423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.125344][T11423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.126703][T11423] ? down_read+0xc9/0x330 [ 242.127854][T11423] ? __pfx_down_read+0x10/0x10 [ 242.129091][T11423] ? rcu_is_watching+0x12/0xc0 [ 242.130427][T11423] genl_rcv+0x28/0x40 [ 242.131467][T11423] netlink_unicast+0x53c/0x7f0 [ 242.132712][T11423] ? __pfx_netlink_unicast+0x10/0x10 [ 242.134015][T11423] ? const_folio_flags.constprop.0+0x56/0x150 [ 242.135594][T11423] ? __phys_addr_symbol+0x30/0x80 [ 242.136920][T11423] ? __check_object_size+0x488/0x710 [ 242.138305][T11423] netlink_sendmsg+0x8b8/0xd70 [ 242.138666][T11415] vivid-007: reconnect [ 242.139664][T11423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.142562][T11423] ? lock_acquire+0x2f/0xb0 [ 242.143775][T11423] ____sys_sendmsg+0x9ae/0xb40 [ 242.143792][T11423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.143805][T11423] ? get_compat_msghdr+0x11b/0x170 [ 242.143820][T11423] ? __pfx___lock_acquire+0x10/0x10 [ 242.143837][T11423] ___sys_sendmsg+0x135/0x1e0 [ 242.143854][T11423] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.143876][T11423] ? lock_acquire+0x2f/0xb0 [ 242.143889][T11423] ? __fget_files+0x40/0x3f0 [ 242.143906][T11423] ? fdget+0x176/0x210 [ 242.143918][T11423] __sys_sendmsg+0x117/0x1f0 [ 242.143928][T11423] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.143939][T11423] ? __ia32_sys_futex_time32+0x1da/0x460 [ 242.143961][T11423] __do_fast_syscall_32+0x73/0x120 [ 242.143978][T11423] do_fast_syscall_32+0x32/0x80 [ 242.143993][T11423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.144009][T11423] RIP: 0023:0xf7f97579 [ 242.144018][T11423] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 242.144029][T11423] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 242.144041][T11423] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 242.144048][T11423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.144054][T11423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.144061][T11423] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 242.144068][T11423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.144081][T11423] [ 242.492420][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 242.492431][ T39] audit: type=1326 audit(1729696367.326:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11426 comm="syz.3.1680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 242.553640][ T39] audit: type=1326 audit(1729696367.326:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11426 comm="syz.3.1680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 242.561193][ T39] audit: type=1326 audit(1729696367.326:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11426 comm="syz.3.1680" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 242.572339][T11444] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 1 (only 8 groups) [ 242.631069][ T65] Bluetooth: hci4: command tx timeout [ 243.067993][T11457] input: syz0 as /devices/virtual/input/input26 [ 243.177057][ T39] audit: type=1326 audit(1729696368.006:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 243.189720][ T39] audit: type=1326 audit(1729696368.016:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 243.200039][ T39] audit: type=1326 audit(1729696368.016:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 243.215626][ T39] audit: type=1326 audit(1729696368.016:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 243.229864][ T39] audit: type=1326 audit(1729696368.016:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 243.237717][ T39] audit: type=1326 audit(1729696368.016:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 243.244003][ T39] audit: type=1326 audit(1729696368.016:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.1.1690" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97579 code=0x7ffc0000 [ 243.581015][ C2] net_ratelimit: 4 callbacks suppressed [ 243.581027][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.590993][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.070891][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 244.160699][T11495] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 244.620941][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.620938][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.110925][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 245.154710][ T63] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 245.323742][ T63] usb 7-1: config 0 has no interfaces? [ 245.325249][ T63] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 245.327561][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.341690][ T63] usb 7-1: config 0 descriptor?? [ 245.554316][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.561153][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.660886][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.660892][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.050089][ T6189] usb 7-1: USB disconnect, device number 29 [ 246.140917][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 246.700894][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.708555][ T830] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 246.713340][ T830] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 246.967527][T11551] loop9: detected capacity change from 0 to 7 [ 246.969677][T11551] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 246.971239][T11551] loop9: partition table partially beyond EOD, truncated [ 246.973780][T11551] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 247.550927][ T830] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 247.715274][ T830] usb 7-1: config 0 has no interfaces? [ 247.716580][ T830] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 247.718739][ T830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.727146][ T830] usb 7-1: config 0 descriptor?? [ 247.935099][T11569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.937499][T11569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.284834][T11581] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 248.286537][T11581] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 248.294514][T11581] vhci_hcd vhci_hcd.0: Device attached [ 248.405629][T11585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1725'. [ 248.483601][ T69] vhci_hcd: vhci_device speed not set [ 248.542247][ T69] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 248.552596][ T5353] usb 7-1: USB disconnect, device number 30 [ 248.790882][ C2] net_ratelimit: 5 callbacks suppressed [ 248.790895][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.150298][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 249.150309][ T39] audit: type=1326 audit(1729696373.976:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.158612][ T39] audit: type=1326 audit(1729696373.986:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.168312][ T39] audit: type=1326 audit(1729696373.986:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.181054][ T39] audit: type=1326 audit(1729696373.996:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.187016][ T39] audit: type=1326 audit(1729696373.996:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.193390][ T39] audit: type=1326 audit(1729696373.996:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.199684][ T39] audit: type=1326 audit(1729696374.006:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.207665][ T39] audit: type=1326 audit(1729696374.006:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.217733][ T39] audit: type=1326 audit(1729696374.006:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.224683][ T39] audit: type=1326 audit(1729696374.006:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.3.1727" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 249.270894][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 249.384141][T11583] vhci_hcd: connection reset by peer [ 249.388173][ T9321] vhci_hcd: stop threads [ 249.389673][ T9321] vhci_hcd: release socket [ 249.396477][ T9321] vhci_hcd: disconnect device [ 249.405170][T11604] loop9: detected capacity change from 0 to 7 [ 249.407393][T11604] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 249.409484][T11604] loop9: partition table partially beyond EOD, truncated [ 249.412618][T11604] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 249.529141][T11610] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1733'. [ 249.536470][T11610] sysfs: cannot create duplicate filename '/class/ieee80211/ü !' [ 249.538703][T11610] CPU: 2 UID: 0 PID: 11610 Comm: syz.2.1733 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 249.541534][T11610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.544226][T11610] Call Trace: [ 249.545133][T11610] [ 249.545920][T11610] dump_stack_lvl+0x16c/0x1f0 [ 249.547186][T11610] sysfs_warn_dup+0x7f/0xa0 [ 249.548404][T11610] sysfs_do_create_link_sd+0x124/0x140 [ 249.549851][T11610] sysfs_create_link+0x61/0xc0 [ 249.551108][T11610] device_add+0x62e/0x1a70 [ 249.552307][T11610] ? __pfx_device_add+0x10/0x10 [ 249.553634][T11610] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.555199][T11610] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 249.556794][T11610] wiphy_register+0x20d7/0x2d30 [ 249.558136][T11610] ? __pfx_wiphy_register+0x10/0x10 [ 249.559501][T11610] ieee80211_register_hw+0x2959/0x3fb0 [ 249.560934][T11610] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 249.562473][T11610] ? rcu_is_watching+0x12/0xc0 [ 249.563729][T11610] ? trace_hrtimer_init+0x19d/0x220 [ 249.565126][T11610] ? __hrtimer_init+0x106/0x2c0 [ 249.566294][T11610] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 249.567774][T11610] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 249.569392][T11610] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 249.571106][T11610] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 249.572539][T11610] hwsim_new_radio_nl+0xb42/0x12b0 [ 249.573904][T11610] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.575348][T11610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 249.577274][T11610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 249.579211][T11610] genl_family_rcv_msg_doit+0x202/0x2f0 [ 249.580672][T11610] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 249.582297][T11610] ? bpf_lsm_capable+0x9/0x10 [ 249.583539][T11610] ? security_capable+0x7e/0x260 [ 249.584868][T11610] ? ns_capable+0xd7/0x110 [ 249.586051][T11610] genl_rcv_msg+0x565/0x800 [ 249.587258][T11610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.588593][T11610] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 249.590070][T11610] netlink_rcv_skb+0x165/0x410 [ 249.591355][T11610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.592710][T11610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.594094][T11610] ? down_read+0xc9/0x330 [ 249.595243][T11610] ? __pfx_down_read+0x10/0x10 [ 249.596499][T11610] ? netlink_deliver_tap+0x1ae/0xcf0 [ 249.597918][T11610] genl_rcv+0x28/0x40 [ 249.598978][T11610] netlink_unicast+0x53c/0x7f0 [ 249.600244][T11610] ? __pfx_netlink_unicast+0x10/0x10 [ 249.601644][T11610] ? const_folio_flags.constprop.0+0x56/0x150 [ 249.603222][T11610] ? __phys_addr_symbol+0x30/0x80 [ 249.604544][T11610] ? __check_object_size+0x488/0x710 [ 249.605936][T11610] netlink_sendmsg+0x8b8/0xd70 [ 249.607194][T11610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.608601][T11610] ? lock_acquire+0x2f/0xb0 [ 249.609814][T11610] ____sys_sendmsg+0x9ae/0xb40 [ 249.611073][T11610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.612471][T11610] ? get_compat_msghdr+0x11b/0x170 [ 249.613827][T11610] ? __pfx___lock_acquire+0x10/0x10 [ 249.615199][T11610] ___sys_sendmsg+0x135/0x1e0 [ 249.616440][T11610] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.617822][T11610] ? lock_acquire+0x2f/0xb0 [ 249.619016][T11610] ? __fget_files+0x40/0x3f0 [ 249.620231][T11610] ? fdget+0x176/0x210 [ 249.621303][T11610] __sys_sendmsg+0x117/0x1f0 [ 249.622518][T11610] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.623862][T11610] ? __ia32_sys_futex_time32+0x1da/0x460 [ 249.625339][T11610] __do_fast_syscall_32+0x73/0x120 [ 249.626678][T11610] do_fast_syscall_32+0x32/0x80 [ 249.627953][T11610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.629612][T11610] RIP: 0023:0xf7f92579 [ 249.630683][T11610] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 249.636664][T11610] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 249.638860][T11610] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000000 [ 249.641054][T11610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.643286][T11610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.645395][T11610] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 249.647444][T11610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.649549][T11610] [ 249.791053][T11608] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.820886][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.830872][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.300900][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 250.459925][T11608] [ 250.460603][T11608] ====================================================== [ 250.462431][T11608] WARNING: possible circular locking dependency detected [ 250.464314][T11608] 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 Not tainted [ 250.466681][T11608] ------------------------------------------------------ [ 250.469336][T11608] syz.0.1732/11608 is trying to acquire lock: [ 250.470880][T11608] ffff8880650834c8 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: netfs_start_io_direct+0x25/0x260 [ 250.473565][T11608] [ 250.473565][T11608] but task is already holding lock: [ 250.475366][T11608] ffff888049aeec18 (&ima_iint_mutex_key[depth]#3){+.+.}-{3:3}, at: process_measurement+0x885/0x2370 [ 250.478123][T11608] [ 250.478123][T11608] which lock already depends on the new lock. [ 250.478123][T11608] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 250.480794][T11608] [ 250.480794][T11608] the existing dependency chain (in reverse order) is: [ 250.483184][T11608] [ 250.483184][T11608] -> #2 (&ima_iint_mutex_key[depth]#3){+.+.}-{3:3}: [ 250.485451][T11608] __mutex_lock+0x175/0x9c0 [ 250.486758][T11608] process_measurement+0x885/0x2370 [ 250.488224][T11608] ima_file_mmap+0x1b1/0x1d0 [ 250.489550][T11608] security_mmap_file+0x8bd/0x990 [ 250.490979][T11608] __do_sys_remap_file_pages+0x526/0x900 [ 250.492585][T11608] __do_fast_syscall_32+0x73/0x120 [ 250.494041][T11608] do_fast_syscall_32+0x32/0x80 [ 250.495432][T11608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.497193][T11608] [ 250.497193][T11608] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 250.499134][T11608] gup_fast_fallback+0x1201/0x2690 [ 250.500516][T11608] pin_user_pages_fast+0xa8/0x100 [ 250.501913][T11608] iov_iter_extract_pages+0x397/0x1f30 [ 250.503420][T11608] netfs_extract_user_iter+0x21a/0x620 [ 250.504940][T11608] netfs_unbuffered_read_iter_locked+0xcef/0x19b0 [ 250.506727][T11608] netfs_unbuffered_read_iter+0xc5/0x100 [ 250.508333][T11608] v9fs_file_read_iter+0xbf/0x100 [ 250.509778][T11608] vfs_read+0x86e/0xbd0 [ 250.511109][T11608] ksys_read+0x12f/0x260 [ 250.512354][T11608] __do_fast_syscall_32+0x73/0x120 [ 250.513838][T11608] do_fast_syscall_32+0x32/0x80 [ 250.515246][T11608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.517017][T11608] [ 250.517017][T11608] -> #0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 250.519259][T11608] __lock_acquire+0x250b/0x3ce0 [ 250.520767][T11608] lock_acquire.part.0+0x11b/0x380 [ 250.522238][T11608] down_read_interruptible+0x9d/0x380 [ 250.523867][T11608] netfs_start_io_direct+0x25/0x260 [ 250.525505][T11608] netfs_unbuffered_read_iter+0xa3/0x100 [ 250.527147][T11608] v9fs_file_read_iter+0xbf/0x100 [ 250.528606][T11608] do_iter_readv_writev+0x614/0x7f0 [ 250.530121][T11608] vfs_iter_read+0x321/0x480 [ 250.531495][T11608] backing_file_read_iter+0x564/0x750 [ 250.533134][T11608] ovl_read_iter+0x26c/0x300 [ 250.534467][T11608] do_iter_readv_writev+0x614/0x7f0 [ 250.535987][T11608] vfs_iter_read+0x321/0x480 [ 250.537369][T11608] backing_file_read_iter+0x564/0x750 [ 250.539036][T11608] ovl_read_iter+0x26c/0x300 [ 250.540369][T11608] __kernel_read+0x3f1/0xb50 [ 250.541694][T11608] integrity_kernel_read+0x7f/0xb0 [ 250.543141][T11608] ima_calc_file_hash_tfm+0x2c9/0x3e0 [ 250.544664][T11608] ima_calc_file_hash+0x1ba/0x490 [ 250.546139][T11608] ima_collect_measurement+0x8a7/0xa10 [ 250.547699][T11608] process_measurement+0x1271/0x2370 [ 250.549228][T11608] ima_file_check+0xc1/0x110 [ 250.550563][T11608] security_file_post_open+0x8e/0x210 [ 250.552098][T11608] path_openat+0x1419/0x2d60 [ 250.553461][T11608] do_filp_open+0x1dc/0x430 [ 250.554770][T11608] do_sys_openat2+0x17a/0x1e0 [ 250.556117][T11608] __ia32_compat_sys_open+0x147/0x1e0 [ 250.557673][T11608] __do_fast_syscall_32+0x73/0x120 [ 250.559217][T11608] do_fast_syscall_32+0x32/0x80 [ 250.560603][T11608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.562369][T11608] [ 250.562369][T11608] other info that might help us debug this: [ 250.562369][T11608] [ 250.565005][T11608] Chain exists of: [ 250.565005][T11608] &sb->s_type->i_mutex_key#23 --> &mm->mmap_lock --> &ima_iint_mutex_key[depth]#3 [ 250.565005][T11608] [ 250.568876][T11608] Possible unsafe locking scenario: [ 250.568876][T11608] [ 250.570805][T11608] CPU0 CPU1 [ 250.572212][T11608] ---- ---- [ 250.573670][T11608] lock(&ima_iint_mutex_key[depth]#3); [ 250.575107][T11608] lock(&mm->mmap_lock); [ 250.576987][T11608] lock(&ima_iint_mutex_key[depth]#3); [ 250.579086][T11608] rlock(&sb->s_type->i_mutex_key#23); [ 250.580556][T11608] [ 250.580556][T11608] *** DEADLOCK *** [ 250.580556][T11608] [ 250.582674][T11608] 1 lock held by syz.0.1732/11608: [ 250.584008][T11608] #0: ffff888049aeec18 (&ima_iint_mutex_key[depth]#3){+.+.}-{3:3}, at: process_measurement+0x885/0x2370 [ 250.586900][T11608] [ 250.586900][T11608] stack backtrace: [ 250.588441][T11608] CPU: 3 UID: 0 PID: 11608 Comm: syz.0.1732 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 250.591225][T11608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.594047][T11608] Call Trace: [ 250.594940][T11608] [ 250.595725][T11608] dump_stack_lvl+0x116/0x1f0 [ 250.596982][T11608] print_circular_bug+0x419/0x5d0 [ 250.598307][T11608] check_noncircular+0x31a/0x400 [ 250.599647][T11608] ? __pfx_check_noncircular+0x10/0x10 [ 250.601171][T11608] ? register_lock_class+0xb1/0x1240 [ 250.602592][T11608] ? lockdep_lock+0xc6/0x200 [ 250.603919][T11608] ? __pfx_lockdep_lock+0x10/0x10 [ 250.605320][T11608] __lock_acquire+0x250b/0x3ce0 [ 250.606655][T11608] ? __pfx___lock_acquire+0x10/0x10 [ 250.608063][T11608] ? __pfx___lock_acquire+0x10/0x10 [ 250.609470][T11608] ? __switch_to+0x749/0x1180 [ 250.610703][T11608] lock_acquire.part.0+0x11b/0x380 [ 250.611885][T11608] ? netfs_start_io_direct+0x25/0x260 [ 250.613344][T11608] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 250.614834][T11608] ? rcu_is_watching+0x12/0xc0 [ 250.616091][T11608] ? trace_lock_acquire+0x14a/0x1d0 [ 250.617375][T11608] ? netfs_start_io_direct+0x25/0x260 [ 250.618679][T11608] ? lock_acquire+0x2f/0xb0 [ 250.619852][T11608] ? netfs_start_io_direct+0x25/0x260 [ 250.621239][T11608] down_read_interruptible+0x9d/0x380 [ 250.622642][T11608] ? netfs_start_io_direct+0x25/0x260 [ 250.624034][T11608] ? __pfx_down_read_interruptible+0x10/0x10 [ 250.625563][T11608] ? __lock_acquire+0xbdd/0x3ce0 [ 250.626828][T11608] netfs_start_io_direct+0x25/0x260 [ 250.628087][T11608] netfs_unbuffered_read_iter+0xa3/0x100 [ 250.629517][T11608] v9fs_file_read_iter+0xbf/0x100 [ 250.630879][T11608] do_iter_readv_writev+0x614/0x7f0 [ 250.632175][T11608] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 250.634470][T11608] vfs_iter_read+0x321/0x480 [ 250.635903][T11608] backing_file_read_iter+0x564/0x750 [ 250.637749][T11608] ovl_read_iter+0x26c/0x300 [ 250.639330][T11608] ? __pfx_ovl_read_iter+0x10/0x10 [ 250.641080][T11608] ? __pfx_ovl_file_accessed+0x10/0x10 [ 250.642874][T11608] ? ovl_lowerdata_redirect+0x79/0xb0 [ 250.644487][T11608] do_iter_readv_writev+0x614/0x7f0 [ 250.646127][T11608] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 250.647805][T11608] vfs_iter_read+0x321/0x480 [ 250.649326][T11608] backing_file_read_iter+0x564/0x750 [ 250.651089][T11608] ovl_read_iter+0x26c/0x300 [ 250.652491][T11608] ? __pfx_ovl_read_iter+0x10/0x10 [ 250.653852][T11608] ? __pfx_ovl_file_accessed+0x10/0x10 [ 250.655253][T11608] ? kasan_save_track+0x14/0x30 [ 250.656496][T11608] ? __kasan_kmalloc+0xaa/0xb0 [ 250.657742][T11608] ? ima_calc_file_hash_tfm+0x2a1/0x3e0 [ 250.659209][T11608] ? ima_calc_file_hash+0x1ba/0x490 [ 250.660845][T11608] ? ima_collect_measurement+0x8a7/0xa10 [ 250.662685][T11608] ? process_measurement+0x1271/0x2370 [ 250.664360][T11608] ? ima_file_check+0xc1/0x110 [ 250.666002][T11608] __kernel_read+0x3f1/0xb50 [ 250.667508][T11608] ? __pfx___kernel_read+0x10/0x10 [ 250.669274][T11608] integrity_kernel_read+0x7f/0xb0 [ 250.670883][T11608] ? __pfx_integrity_kernel_read+0x10/0x10 [ 250.672698][T11608] ? kasan_save_track+0x14/0x30 [ 250.674305][T11608] ima_calc_file_hash_tfm+0x2c9/0x3e0 [ 250.675717][T11608] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 250.677269][T11608] ? vfs_getattr_nosec+0x2bf/0x380 [ 250.678682][T11608] ? __pfx_ovl_verify_lowerdata+0x10/0x10 [ 250.680172][T11608] ? ovl_other_xattr_get+0x101/0x160 [ 250.681593][T11608] ? ima_alloc_tfm+0x21d/0x2d0 [ 250.682863][T11608] ima_calc_file_hash+0x1ba/0x490 [ 250.684437][T11608] ima_collect_measurement+0x8a7/0xa10 [ 250.685947][T11608] ? __pfx_ima_collect_measurement+0x10/0x10 [ 250.687535][T11608] ? __pfx_ovl_other_xattr_get+0x10/0x10 [ 250.689029][T11608] ? ovl_verify_lowerdata+0x21d/0xb60 [ 250.690444][T11608] ? xattr_resolve_name+0x27b/0x3f0 [ 250.691821][T11608] ? vfs_getxattr_alloc+0xf1/0x340 [ 250.693198][T11608] ? ima_get_hash_algo+0x27d/0x410 [ 250.694580][T11608] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 250.696045][T11608] ? ovl_dentry_lowerdata+0xe7/0x130 [ 250.697492][T11608] ? process_measurement+0x1271/0x2370 [ 250.698915][T11608] process_measurement+0x1271/0x2370 [ 250.700310][T11608] ? __pfx_process_measurement+0x10/0x10 [ 250.701802][T11608] ? bpf_lsm_file_open+0x9/0x10 [ 250.703121][T11608] ? file_ra_state_init+0x39/0xe0 [ 250.704451][T11608] ? do_dentry_open+0xbe9/0x1530 [ 250.705774][T11608] ? __pfx_ovl_open+0x10/0x10 [ 250.707029][T11608] ? __pfx_ovl_open+0x10/0x10 [ 250.708272][T11608] ? bpf_lsm_file_open+0x9/0x10 [ 250.709582][T11608] ? inode_to_bdi+0x9e/0x160 [ 250.710842][T11608] ima_file_check+0xc1/0x110 [ 250.712160][T11608] ? __pfx_ima_file_check+0x10/0x10 [ 250.713566][T11608] ? inode_permission+0xdd/0x5f0 [ 250.714876][T11608] security_file_post_open+0x8e/0x210 [ 250.716307][T11608] path_openat+0x1419/0x2d60 [ 250.717537][T11608] ? __pfx_path_openat+0x10/0x10 [ 250.718835][T11608] ? __pfx___lock_acquire+0x10/0x10 [ 250.720226][T11608] do_filp_open+0x1dc/0x430 [ 250.721440][T11608] ? __pfx_do_filp_open+0x10/0x10 [ 250.722815][T11608] ? _raw_spin_unlock+0x28/0x50 [ 250.724111][T11608] ? alloc_fd+0x2d7/0x6c0 [ 250.725260][T11608] do_sys_openat2+0x17a/0x1e0 [ 250.726508][T11608] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.727883][T11608] ? kvm_sched_clock_read+0x11/0x20 [ 250.729257][T11608] ? sched_clock+0x38/0x60 [ 250.730439][T11608] __ia32_compat_sys_open+0x147/0x1e0 [ 250.731863][T11608] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 250.733445][T11608] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 250.735163][T11608] __do_fast_syscall_32+0x73/0x120 [ 250.736520][T11608] do_fast_syscall_32+0x32/0x80 [ 250.737821][T11608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.739516][T11608] RIP: 0023:0xf7ff3579 [ 250.740599][T11608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 250.745620][T11608] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000005 [ 250.747794][T11608] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 0000000000000000 [ 250.749862][T11608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.751936][T11608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.754001][T11608] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 250.756062][T11608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.758141][T11608] [ 250.860904][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.870897][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.162045][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.227173][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.295667][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.340873][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 251.425263][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.892188][ T45] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 251.896912][ T45] bond0 (unregistering): Released all slaves [ 251.899989][ T45] bond1 (unregistering): Released all slaves [ 251.901643][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.910879][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.971627][ T45] tipc: Disabling bearer [ 251.973755][ T45] tipc: Disabling bearer [ 251.975111][ T45] tipc: Left network mode [ 252.489567][ T45] hsr_slave_0: left promiscuous mode [ 252.492222][ T45] hsr_slave_1: left promiscuous mode [ 252.495605][ T45] veth1_macvtap: left promiscuous mode [ 252.497050][ T45] veth0_macvtap: left promiscuous mode [ 252.544465][ T45] pimreg (unregistering): left allmulticast mode [ 253.649294][ T45] IPVS: stop unused estimator thread 0... [ 253.660945][ T69] vhci_hcd: vhci_device speed not set [ 253.735279][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.798168][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.868110][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.938397][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.310780][ T45] bridge_slave_1: left allmulticast mode [ 254.313144][ T45] bridge_slave_1: left promiscuous mode [ 254.314795][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.317716][ T45] bridge_slave_0: left allmulticast mode [ 254.319186][ T45] bridge_slave_0: left promiscuous mode [ 254.320674][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.458606][ T45] team0: Port device bridge0 removed [ 254.464352][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.466032][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.470871][ C3] net_ratelimit: 2 callbacks suppressed [ 254.470885][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 254.538515][ T45] bridge0 (unregistering): left allmulticast mode [ 254.599873][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.604722][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.608798][ T45] bond0 (unregistering): Released all slaves [ 254.688983][ T45] bond0 (unregistering): Released all slaves [ 254.783314][ T45] : left promiscuous mode [ 254.898472][ T45] tipc: Left network mode [ 254.904850][ T45] tipc: Left network mode [ 255.354076][ T45] hsr_slave_0: left promiscuous mode [ 255.356232][ T45] hsr_slave_1: left promiscuous mode [ 255.358685][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.360614][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.364222][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.366151][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.370604][ T45] hsr_slave_0: left promiscuous mode [ 255.372993][ T45] hsr_slave_1: left promiscuous mode [ 255.376856][ T45] veth1_macvtap: left promiscuous mode [ 255.378290][ T45] veth0_macvtap: left promiscuous mode [ 255.379763][ T45] veth1_vlan: left promiscuous mode [ 255.381600][ T45] veth0_vlan: left promiscuous mode [ 255.384338][ T45] vlan1: left allmulticast mode [ 255.385629][ T45] veth0_vlan: left allmulticast mode [ 255.387013][ T45] veth0_vlan: left promiscuous mode [ 255.510892][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 255.632912][ T45] team0 (unregistering): Port device team_slave_1 removed [ 255.681640][ T45] team0 (unregistering): Port device team_slave_0 removed [ 255.904997][ T45] pimreg (unregistering): left allmulticast mode [ 256.550859][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 257.590859][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.630854][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 259.660865][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 15:12:54 Registers: info registers vcpu 0 CPU#0 RAX=000000000097398c RBX=0000000000000000 RCX=ffffffff8b139ef9 RDX=ffffed1005687026 RSI=ffffffff8bb12ce0 RDI=ffffffff8164177c RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000003 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901ce608 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002cf01ff8 CR3=00000000633be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900039a7a78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffffc900039a7ca8 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff813bb068 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002004d000 CR3=00000000633be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81d52a39 RDX=ffff8880210b0000 RSI=ffffffff81d52a54 RDI=0000000000000005 RBP=00000000e947c000 RSP=ffffc9000639f880 R8 =0000000000000005 R9 =00000000ff000000 R10=00000000ffffffff R11=0000000000004fd0 R12=dffffc0000000000 R13=0000000000000000 R14=ffff8880001cd580 R15=ffffea0001d2dc40 RIP=ffffffff818cb891 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc6e40 CR3=0000000045fda000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f745bff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8503f3f5 RDI=ffffffff9a6402a0 RBP=ffffffff9a640260 RSP=ffffc90003186158 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff8503f390 R15=0000000000000000 RIP=ffffffff8503f41f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002027e000 CR3=000000004f822000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000