last executing test programs: 2.758096878s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="0a00000000000060d0", 0x9) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond1/bonding/slaves\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='+dummy0\n', 0x8) (fail_nth: 1) close(r3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'dummy0\x00', 0x1}) ioctl(r0, 0x8914, &(0x7f0000000280)) nanosleep(&(0x7f00000002c0)={0x0, 0x5f5e100}, 0x0) ioctl(r0, 0x8983, &(0x7f0000000300)='\x00\x00\x00\x00bond1\x00'/27) ioctl(r0, 0x8914, &(0x7f0000000340)="626f6e64312e310000000000000000000100") ioctl(r0, 0x8924, &(0x7f0000000380)="626f6e643100000000000000000000000100001122334455") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000780)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000007c0)={'bond_slave_1\x00'}) write(0xffffffffffffffff, &(0x7f0000000480)='-bond_slave_0\n\x00', 0xe) write(0xffffffffffffffff, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) write(r4, &(0x7f0000000580)='balance-alb\n\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='+dummy0\n\x00', 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000680)={0x0, 'bond0\x00', {0x1}}) 2.70894959s ago: executing program 1 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)="0a00000000000060d0", 0x9) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x0, "94c492eb2665203d36bec70800890100000000e1100a0000005900", 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='wchan\x00') mount$9p_fd(0x0, &(0x7f00000003c0)='.\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) close(r1) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond1/bonding/slaves\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='+dummy0\n', 0x8) close(r6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'dummy0\x00', 0x1}) ioctl(r0, 0x8914, &(0x7f0000000280)) nanosleep(&(0x7f00000002c0)={0x0, 0x5f5e100}, 0x0) ioctl(r0, 0x8983, &(0x7f0000000300)='\x00\x00\x00\x00bond1\x00'/27) ioctl(r0, 0x8914, &(0x7f0000000340)="626f6e64312e310000000000000000000100") ioctl(r0, 0x8924, &(0x7f0000000380)="626f6e643100000000000000000000000100001122334455") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000780)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000007c0)={'bond_slave_1\x00'}) write(0xffffffffffffffff, &(0x7f0000000480)='-bond_slave_0\n\x00', 0xe) write(0xffffffffffffffff, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) write(r7, &(0x7f0000000580)='balance-alb\n\x00', 0xc) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) 2.470401102s ago: executing program 1 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(r2, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000000500)=@ethtool_channels={0x3c, 0x81, 0x9, 0xfffffff2, 0xfff, 0x1c1d, 0x8, 0xfffffff3, 0x8}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r4, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000680), 0x2d, 0x20040040) write(r1, &(0x7f0000000240)="580000001400010300000000000000001e000020ff0000000800000000000000000000000000000000ff00000042f51a0e000000004660142b93248b91b3250000bf0000000000001000009eac0039c00000013b0dddc15ae2c56df302daf9ee00dc08fdee43a1afc0e747511bda4b44b761f3175c6420757efa391f4e611e5c1328850299d558c20cf970da27371caa6091e8b225f4a0c7f85da9894371e0426d0325d98fd19b510838341b1998f4106390db0065de7cc58e83c3adfd64839b37f4a8065e9c884032ca2beb77da17a76c5b8d358f9ff337de5e3f9e", 0xfffffffffffffcc6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = epoll_create1(0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000540), &(0x7f0000000580)=0x30) epoll_pwait(r9, &(0x7f00000000c0)=[{}], 0x1, 0xfffffff8, 0x0, 0x0) r10 = openat$bsg(0xffffff9c, &(0x7f0000000340)='/dev/bsg/0:0:0:0\x00', 0x101001, 0x0) ioctl$BSG_GET_TIMEOUT(r10, 0x2202, 0x0) dup3(r7, r8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r7], 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r11, &(0x7f0000000180)='100', 0x3) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'nr0\x00'}) 1.952293852s ago: executing program 3 (id=83): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000c0211000001000030005080110001004abee33908f8e6f16f162471f400000005000200010000000500090001000000"], 0x58}}, 0x0) 1.879242657s ago: executing program 3 (id=84): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1451c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000009c0)=""/4096, 0x20001b80}, {&(0x7f00000019c0)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 1.60899508s ago: executing program 1 (id=88): capset(&(0x7f0000000000)={0x20080522}, 0x0) openat$cachefiles(0xffffff9c, &(0x7f0000000140), 0x20100, 0x0) 1.53044896s ago: executing program 1 (id=89): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x28040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getpgid(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000004c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x6, 0x61, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x28, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xe, [@midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x3, 0x4, [{0xff, 0x1}, {0x9, 0x6}, {0xd3, 0x3}, {0x1, 0x4}], 0xdc}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0xf8, 0xd}, {0x6, 0x2}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x79ed, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x80, 0x4, [{0x40, 0x10}, {0x2, 0x7}, {0x5, 0x1}, {0xf, 0x1}]}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xc9, 0xd, 0xd, 0x20, 0x7f}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x525b}}, {0xf, &(0x7f00000001c0)=@string={0xf, 0x3, "d3a166b033d2984a2100dd580a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x282ef7d0f131fcb5}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "036b7cd2094ea514d830bb3b14f5691df686ba4f78e9f3bec73de807c03f7531370e84e8348b388cf2058422c574edba6828ac6a4b5c8185a1910cd717ef47e42c324996d137239eb90983378075cb21c71e0edaceae4ee0ae5aba94d8aa71a278d42b72b046a43114c551f076bf1010c655db55d89d3a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_connect$midi(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 1.050292173s ago: executing program 2 (id=92): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000c0211000001000030005080110001004abee33908f8e6f16f162471f40000000500020001000000050009000100000008000300"], 0x58}}, 0x0) 1.049653671s ago: executing program 2 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (fail_nth: 2) 999.745306ms ago: executing program 3 (id=94): r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000680)) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x1c0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x5000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/11, 0xb}, {&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000005c0)=""/76, 0x4c}], 0x6, 0xfffffffe, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e"], 0x28}}, 0x0) r4 = accept4$vsock_stream(r2, &(0x7f00000006c0)={0x28, 0x0, 0x0, @local}, &(0x7f0000000700)=0x10, 0x80000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_NEW(r4, 0x28, 0x8, &(0x7f0000001140)={0x1, 0x77848}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000740)='task\x00') getdents(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xa6, 0x0, r2, 0xb2d, '\x00', 0x0, r2, 0x1, 0x3, 0x4}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000940)={@initdev, 0x0}, &(0x7f0000000980)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r2, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x9, &(0x7f0000000d00)=@raw=[@exit, @alu={0x4, 0x0, 0x1, 0x9, 0x2, 0x2, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xa4}, @exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x9, 0x8, 0x0, 0x2, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}], &(0x7f0000000d80)='GPL\x00', 0x9, 0xa1, &(0x7f0000000dc0)=""/161, 0x40f00, 0x40, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x3, 0x3, 0xfffff92a}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000ec0)=[r2, r2, r2, r2, r2, r2], &(0x7f0000000f00)=[{0x2, 0x4, 0x10, 0xa}, {0x0, 0x2, 0xe, 0x5}, {0x4, 0x1, 0x9}, {0x5, 0x4, 0x1, 0x4}], 0x10, 0xfffffff7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1a, 0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000e70a0000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a400000018600000020000000000000000f80f0062b040000800000018110000", @ANYRES32=r5, @ANYBLOB="000000000094bc50c820000003000000186800000a000000000000000308000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000900)='syzkaller\x00', 0x49, 0x0, 0x0, 0x41000, 0x48, '\x00', r7, @fallback=0x14, r2, 0x8, &(0x7f00000009c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x2, &(0x7f0000001000)=[r2], &(0x7f0000001040)=[{0x2, 0x5, 0xc, 0x2}, {0x5, 0x5, 0x10, 0x3}], 0x10, 0x3}, 0x94) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x2a08840, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) 996.640472ms ago: executing program 2 (id=95): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x2, "bde851"}) 950.110752ms ago: executing program 2 (id=96): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000580)={0x7fffffff, 0x1000, 0x2d9bbdc3, 0x9, 0x1000, 0x200}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x2, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000005c0)={0x1}) 949.965309ms ago: executing program 3 (id=97): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) openat$cachefiles(0xffffff9c, 0x0, 0x20100, 0x0) 889.997508ms ago: executing program 3 (id=98): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x28040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x6, 0x30, &(0x7f0000000b00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x55}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xff}], &(0x7f0000000a40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getpgid(0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000004c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000580)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="08000500070000008146ccb2abe9f2e428d8055cca4528e48f5088554596f4e8de2b499d1f174054a0a468c759d2f89ec78659316a445277fbcbb89aec5e341079174a377a70526862583321968c1d4bea8b488e9a698b402180cac04879bdc64c39a9c3b908e0038d0ed122bf159e508aa5599ee7e637000a468b31a914fcc13b69a92c"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="99030000", @ANYRES16=r5, @ANYBLOB="050000000000000000001800000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) r7 = syz_pidfd_open(r2, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) pidfd_getfd(r7, r7, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x6, 0x61, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x28, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xe, [@midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x3, 0x4, [{0xff, 0x1}, {0x9, 0x6}, {0xd3, 0x3}, {0x1, 0x4}], 0xdc}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0xf8, 0xd}, {0x6, 0x2}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x79ed, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x80, 0x4, [{0x40, 0x10}, {0x2, 0x7}, {0x5, 0x1}, {0xf, 0x1}]}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xc9, 0xd, 0xd, 0x20, 0x7f}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x525b}}, {0xf, &(0x7f00000001c0)=@string={0xf, 0x3, "d3a166b033d2984a2100dd580a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x282ef7d0f131fcb5}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "036b7cd2094ea514d830bb3b14f5691df686ba4f78e9f3bec73de807c03f7531370e84e8348b388cf2058422c574edba6828ac6a4b5c8185a1910cd717ef47e42c324996d137239eb90983378075cb21c71e0edaceae4ee0ae5aba94d8aa71a278d42b72b046a43114c551f076bf1010c655db55d89d3a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}]}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000ac0)=@other={0x20b000020000010a, 0x0}) 339.012282ms ago: executing program 0 (id=103): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0xec6) (fail_nth: 2) 338.899663ms ago: executing program 0 (id=104): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x2, "bde851"}) 279.997433ms ago: executing program 0 (id=105): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2000, 0xba08}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x10) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) (async) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000e80)={&(0x7f0000000700)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x3e31512d, @mcast1, 0xfffffc00}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000780)="cbed76422d90c096b84d3ec5b08ca6c78ca710549659714570fefa94be3a0fd5f02949b862b224fafe8deac9cddb5def9b3374ceb2315101183b8d6526aeb89e56701d47462733dee997699cf207322aed8a683243169d01ed575fb12cc2d728f0730c76acc1c2281f3b10f1ad1c9050d44a0dd35676970f536084088fcfe7175207", 0x82}, {&(0x7f0000000840)="f60e29df36cc1ec6eec34945814ec3cb96ed5a89253d8ab0d05d6094782261f5823540b05fdea3b0a4556aa22f0a2c59c537cafd511d7cda9063b41f31c535c20101ee43deb248b969ab90263e6d516ec57957f6f1eecee0b9400d76100aa7eb7334cfa472799a37903365a6bc314930c137478cbc5faf945c89d194db6219d3e804990c37f7ebcd924cec5086", 0x8d}, {&(0x7f0000000900)="2ec1049bce0cc7612c1ec730d60e3b10a29e0e769295084f3fe4289fac2f9cc65e8ed04a3911e0dc053485e31b44b9dbb41b82b1d5dccbb7a946ea873db04240921db5fd6bb529502a6f27aa6bd8d5eafe948938fe0a73ea24cc63096fd1b44a1806d6f71ffd9ab30c82bd5bc54e71d2f4b99ee6a70135de179e758e560d6fd2993c323759e7c119624383b0df617edda8ec6e022438022c58e91288187a123df56d6f6af8167d6012d5b151593d1844527c58", 0xb3}, {&(0x7f00000009c0)="382b5bdf04fb3fe920c7cf879a3cfb1fe591ab718efb29f93fcbb64161524f2a3282ef2c0de982c0cd6397f725c88595caa6a10e4ffeaea5c9d5bf5d6671c6c0bdf079f8d9337b57fb6e45004cb5d33d20d7cc1f8d796a2ddd3633ece8f3b0adb7431d793b34762ccd2608a7db8c7aea1d3e396127b6b1d9e742d71ae32486e90ff87b4746e80c859f3a2181a1b0f457dc", 0x91}], 0x4, &(0x7f0000000ac0)=[{0x74, 0x110, 0x0, "b5f7f1fbcfbac06f2f5b4305883293c9aefaf9bc8d532734666e130564e1e9cb7511fb1ef0cf9401a223f5d2d9740d27e497b5f5e6ac9d5397057825c9a1f5d9c84c8c300d1811a4957aaadac662d664c40380da85958f26d4ff1e8cab7aeac499f163aafc5e"}, {0x30, 0x10d, 0x9, "071373310c43247616d6f866d00919e5d355f4b61049edc5d6b911ca8790d9da03"}, {0xb4, 0x3a, 0xdb1, "28466efb0bb07f09dbff8f0c895bb78e429a4e532d170bf8b119fd7033432a681bf689835c45cce6bc9ba2af8be2dae17f8e70842bef4b3e1d18415bd84c4e051422ae729f07e4e7fb0aa87a1ea69f84367e6b814cdc224a2659873ebb8ed8a8e0256e976d7c985156330d9305c4a50f049292d4be22d2def5d111cd69ba971d3ae20993239969bcefee93f53e5d3e75c2c5d0aa96de3934886fb5bda5a7a7b63fc5d12a813c"}, {0x8c, 0x11, 0x7, "ca46033774369ce6eefba32904e2d8d1d5c08891678949574ad93fdbd515aca8159ed01caebe6f4bcfff88487a4977ba1c0a38a58901871ab2f710530830c0b7ca324716d9a59671c8ca6dc22813eebf920532ecf2d8da001e20aabc0842a09a24885944ad5d0abc211f520b64ec7f49c76ef52d582957f51879e8840a703f"}, {0x60, 0x10b, 0x99, "e411de320413027d9d9115710b0b81b03880a0d1e4cfbbc4bdc19eb689b0d0ca06e08f6d5f4227f7635b80587946959e888b706115c8b8f18d25e6e7c52f8c67fa7cf87553c648b00b0ff298feab1cd9b9a9"}, {0x10c, 0xf6, 0x7fff, "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"}, {0x44, 0x1, 0x28e, "fe7c240022b379d5aa90e58354e3d330cdb6547854fc180522e72d67eac1a0c5a9504fa418de1cb7b0cc601fa686b01fafba5b443546aa"}], 0x394}, 0x20004080) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='numa_maps\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='numa_maps\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f0000000480)={0x1, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0x83a5, 0x1}, &(0x7f0000000540)=0x8c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={r3, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x2, 0x37}, &(0x7f0000000640)=0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000300000000000000000000000000f4ff00010000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000300000000000000000000000000f4ff00010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xa, &(0x7f0000000680)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0x6}, @generic={0x7, 0x2, 0x0, 0x4, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x5, 0x1}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xa, &(0x7f0000000680)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0x6}, @generic={0x7, 0x2, 0x0, 0x4, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x5, 0x1}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xd0, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffffffffffff}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_IFACE={0x14, 0x17, 'rose0\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 254.656237ms ago: executing program 0 (id=106): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) openat$cachefiles(0xffffff9c, 0x0, 0x20100, 0x0) 219.051036ms ago: executing program 3 (id=107): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x28040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000800)=[@text64={0x40, &(0x7f0000000840)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000008c0), 0xc240, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getpgid(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000004c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000680)={'wlan0\x00', 0x1}) (fail_nth: 2) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r6 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r6, r6, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_usb_connect$midi(0x6, 0x61, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x28, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xe, [@midi_out_jack={0xf, 0x24, 0x3, 0x0, 0x3, 0x4, [{0xff, 0x1}, {0x9, 0x6}, {0xd3, 0x3}, {0x1, 0x4}], 0xdc}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x3, 0x2, [{0xf8, 0xd}, {0x6, 0x2}], 0x3}, @ms_header={0x7, 0x24, 0x1, 0x79ed, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x80, 0x4, [{0x40, 0x10}, {0x2, 0x7}, {0x5, 0x1}, {0xf, 0x1}]}]}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xc9, 0xd, 0xd, 0x20, 0x7f}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x525b}}, {0xf, &(0x7f00000001c0)=@string={0xf, 0x3, "d3a166b033d2984a2100dd580a"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x282ef7d0f131fcb5}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "036b7cd2094ea514d830bb3b14f5691df686ba4f78e9f3bec73de807c03f7531370e84e8348b388cf2058422c574edba6828ac6a4b5c8185a1910cd717ef47e42c324996d137239eb90983378075cb21c71e0edaceae4ee0ae5aba94d8aa71a278d42b72b046a43114c551f076bf1010c655db55d89d3a"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x448}}]}) syz_usb_connect$midi(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x80001) 218.857008ms ago: executing program 0 (id=108): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0xec6) 134.186346ms ago: executing program 1 (id=109): r0 = socket$netlink(0x10, 0x3, 0x14) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000002400"], 0x80}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000b80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000004) (async) ptrace$getregs(0xffffffffffffffff, r3, 0x7, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43e41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000480)="2e9b5b0007e008900000dfb6c575b43f86dd6067", 0x14}, {&(0x7f0000000780)="0000ff00060000f814a74cb3addda147fb682a6bf9d594503d0700000000000000a5a79a0382bdc85ca3e718598114a0f269923005721bdb241e8d85776cd4e532d4543f13358194a29e", 0x4a}], 0x2) (async) keyctl$dh_compute(0x17, &(0x7f00000004c0)={0x0, r6}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) (async) fanotify_init(0xef0, 0x2) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="3120000000008907ed02c60e0004002b8008001b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 132.774985ms ago: executing program 0 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)="0200000003000000", 0x8) socket$kcm(0x1e, 0x5, 0x0) r1 = io_uring_setup(0x178d, &(0x7f0000000380)={0x0, 0x400052c1, 0x80000, 0x1, 0xc}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 362.018µs ago: executing program 2 (id=111): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000c0211000001000030005080110001004abee33908f8e6f16f162471f40000000500020001000000050009000100000008000300"], 0x58}}, 0x0) 0s ago: executing program 2 (id=112): socket$kcm(0x1e, 0x5, 0x0) r0 = io_uring_setup(0x178d, &(0x7f0000000380)={0x0, 0x400052c1, 0x80000, 0x1, 0xc}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43609' (ED25519) to the list of known hosts. [ 32.842219][ T5703] cgroup: Unknown subsys name 'net' [ 32.945727][ T5703] cgroup: Unknown subsys name 'cpuset' [ 32.950332][ T5703] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.881998][ T5703] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.708946][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.731002][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.731764][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.734521][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.735376][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.738669][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.739162][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.740775][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.744973][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.747025][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.747479][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.747984][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.749405][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.752543][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.755400][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.758348][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.758905][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.759125][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.759467][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.759724][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.995981][ T5793] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.000581][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.001134][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.002390][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.008040][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.012487][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 38.114378][ T5790] infiniband rxe0: set active [ 38.115078][ T64] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.115568][ T5790] infiniband rxe0: added rxe_eth0 [ 38.125685][ T5790] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 38.125707][ T5790] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 38.125727][ T5790] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 38.149331][ T5790] RDS/IB: rxe0: added [ 38.149642][ T5790] smc: adding ib device rxe0 with port count 1 [ 38.149716][ T5790] smc: ib device rxe0 port 1 has no pnetid [ 38.170269][ T858] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.173511][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.247498][ T1041] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.263231][ T64] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.306977][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.418873][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.424564][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.425114][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.425181][ T5793] bridge_slave_0: entered allmulticast mode [ 38.426031][ T5793] bridge_slave_0: entered promiscuous mode [ 38.442392][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.442512][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.442598][ T5793] bridge_slave_1: entered allmulticast mode [ 38.443923][ T5793] bridge_slave_1: entered promiscuous mode [ 38.444969][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.445035][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.445094][ T5785] bridge_slave_0: entered allmulticast mode [ 38.445838][ T5785] bridge_slave_0: entered promiscuous mode [ 38.468311][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.468429][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.468516][ T5785] bridge_slave_1: entered allmulticast mode [ 38.469729][ T5785] bridge_slave_1: entered promiscuous mode [ 38.490552][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.490698][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.490793][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.490925][ T5789] bridge_slave_0: entered allmulticast mode [ 38.492102][ T5789] bridge_slave_0: entered promiscuous mode [ 38.494222][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.494286][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.494376][ T5789] bridge_slave_1: entered allmulticast mode [ 38.496132][ T5789] bridge_slave_1: entered promiscuous mode [ 38.522373][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.530256][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.546909][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.555152][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.564273][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.566040][ T5793] team0: Port device team_slave_0 added [ 38.589601][ T5793] team0: Port device team_slave_1 added [ 38.603728][ T5785] team0: Port device team_slave_0 added [ 38.629957][ T5789] team0: Port device team_slave_0 added [ 38.633300][ T5785] team0: Port device team_slave_1 added [ 38.645023][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.645039][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.645058][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.657303][ T5789] team0: Port device team_slave_1 added [ 38.682900][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.682916][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.682941][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.691731][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.691747][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.691766][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.694762][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.694772][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.694787][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.702824][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.702837][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.702855][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.712588][ T5790] rxe_eth0 speed is unknown, defaulting to 1000 [ 38.739066][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.739077][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.739090][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.760590][ T5793] hsr_slave_0: entered promiscuous mode [ 38.761113][ T5793] hsr_slave_1: entered promiscuous mode [ 38.774226][ T5785] hsr_slave_0: entered promiscuous mode [ 38.774726][ T5785] hsr_slave_1: entered promiscuous mode [ 38.775095][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 38.775104][ T5785] Cannot create hsr debugfs directory [ 38.805042][ T5789] hsr_slave_0: entered promiscuous mode [ 38.805586][ T5789] hsr_slave_1: entered promiscuous mode [ 38.805890][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 38.805898][ T5789] Cannot create hsr debugfs directory [ 39.120497][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.131253][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.132063][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.135187][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.146700][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.148908][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.149331][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.151689][ T5789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.208333][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.212522][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.225013][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.228154][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.252215][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.255381][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.280309][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.284642][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.336707][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.336794][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.336861][ T5790] bridge_slave_0: entered allmulticast mode [ 39.337599][ T5790] bridge_slave_0: entered promiscuous mode [ 39.356363][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.356422][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.356489][ T5790] bridge_slave_1: entered allmulticast mode [ 39.357262][ T5790] bridge_slave_1: entered promiscuous mode [ 39.370449][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.372112][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.384910][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.386983][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.389050][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.392356][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.394381][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.396221][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.396245][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.399620][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.429370][ T5790] team0: Port device team_slave_0 added [ 39.445396][ T5790] team0: Port device team_slave_1 added [ 39.472716][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.472728][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.472739][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.477579][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.477589][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.477600][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.528787][ T5790] hsr_slave_0: entered promiscuous mode [ 39.529506][ T5790] hsr_slave_1: entered promiscuous mode [ 39.529959][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 39.529967][ T5790] Cannot create hsr debugfs directory [ 39.537693][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.599801][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.658247][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.658331][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.659673][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.659717][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.663716][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.711577][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.730812][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.733306][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.733351][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.750605][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.750652][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.753724][ T5792] Bluetooth: hci0: command tx timeout [ 39.765826][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.770483][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.777231][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.779651][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.785265][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.786323][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.789659][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.797138][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.801119][ T5790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.806560][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.806607][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.820693][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.820813][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.834533][ T5153] Bluetooth: hci3: command tx timeout [ 39.835044][ T5153] Bluetooth: hci1: command tx timeout [ 39.835299][ T5792] Bluetooth: hci2: command tx timeout [ 39.985752][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.003029][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.009243][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.009290][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.018420][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.018471][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.128953][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.159184][ T5789] veth0_vlan: entered promiscuous mode [ 40.165709][ T5789] veth1_vlan: entered promiscuous mode [ 40.172346][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.192059][ T5789] veth0_macvtap: entered promiscuous mode [ 40.200056][ T5789] veth1_macvtap: entered promiscuous mode [ 40.209144][ T5793] veth0_vlan: entered promiscuous mode [ 40.215053][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.220074][ T5793] veth1_vlan: entered promiscuous mode [ 40.223722][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.226185][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.276033][ T5793] veth0_macvtap: entered promiscuous mode [ 40.284464][ T5793] veth1_macvtap: entered promiscuous mode [ 40.301363][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.301383][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.331848][ T5785] veth0_vlan: entered promiscuous mode [ 40.336015][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.336031][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.342369][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.348209][ T5785] veth1_vlan: entered promiscuous mode [ 40.351174][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.360285][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.375943][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.385717][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.385971][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.385991][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.392974][ T5785] veth0_macvtap: entered promiscuous mode [ 40.416755][ T5785] veth1_macvtap: entered promiscuous mode [ 40.428625][ T5789] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.438713][ T5790] veth0_vlan: entered promiscuous mode [ 40.458009][ T5789] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.460241][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.460258][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.461587][ T5789] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.466220][ T5789] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.471043][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.476601][ T5790] veth1_vlan: entered promiscuous mode [ 40.493637][ T5789] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.494431][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.515310][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.515331][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.573349][ T5790] veth0_macvtap: entered promiscuous mode [ 40.579252][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.579266][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.589046][ T5790] veth1_macvtap: entered promiscuous mode [ 40.610315][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.610343][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.612580][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.619157][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.645111][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.645141][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.645158][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.645176][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.645193][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.645211][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.674983][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.674996][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.692768][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.692787][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.703932][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.704109][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.704294][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.704320][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.704337][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.704353][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.843352][ T5792] Bluetooth: hci0: command tx timeout [ 41.913896][ T67] Bluetooth: hci3: command tx timeout [ 41.913968][ T5792] Bluetooth: hci1: command tx timeout [ 41.923659][ T5792] Bluetooth: hci2: command tx timeout [ 42.014239][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.173126][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 42.174315][ T5881] usb 5-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 42.175454][ T5881] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 42.175475][ T5881] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 42.175487][ T5881] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.175499][ T5881] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 42.177097][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.177109][ T5881] usb 5-1: Product: syz [ 42.177116][ T5881] usb 5-1: Manufacturer: syz [ 42.177122][ T5881] usb 5-1: SerialNumber: syz [ 42.185223][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 42.187448][ T5881] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input5 [ 42.456431][ T5967] Set syz1 is full, maxelem 65536 reached [ 42.460087][ T5881] imon:send_packet: packet tx failed (-71) [ 42.480243][ T5881] imon 5-1:155.0: panel buttons/knobs setup failed [ 42.480255][ T5881] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 42.480261][ T5881] (id 0x00) [ 42.525415][ T5881] rc_core: IR keymap rc-imon-pad not found [ 42.525432][ T5881] Registered IR keymap rc-empty [ 42.525660][ T5881] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 42.525676][ T5881] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 42.528109][ T5881] imon:send_packet: packet tx failed (-71) [ 42.545001][ T5881] imon 5-1:155.0: remote input dev register failed [ 42.545385][ T5881] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 42.594276][ T5881] imon 5-1:155.0: unable to initialize intf0, err 0 [ 42.598646][ T5881] usb 5-1: USB disconnect, device number 2 [ 42.753328][ T6000] Set syz1 is full, maxelem 65536 reached [ 42.802840][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 42.885210][ T6008] FAULT_INJECTION: forcing a failure. [ 42.885210][ T6008] name failslab, interval 1, probability 0, space 0, times 1 [ 42.885240][ T6008] CPU: 1 UID: 0 PID: 6008 Comm: syz.1.14 Not tainted syzkaller #0 PREEMPT(full) [ 42.885287][ T6008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 42.885298][ T6008] Call Trace: [ 42.885306][ T6008] [ 42.885314][ T6008] dump_stack_lvl+0x100/0x190 [ 42.885348][ T6008] should_fail_ex.cold+0x5/0xa [ 42.885382][ T6008] should_failslab+0xc2/0x120 [ 42.885405][ T6008] __kmalloc_noprof+0xfc/0x840 [ 42.885424][ T6008] ? constrain_params_by_rules+0x175/0xd20 [ 42.885453][ T6008] constrain_params_by_rules+0x175/0xd20 [ 42.885477][ T6008] ? stack_depot_save_flags+0x27/0xa10 [ 42.885507][ T6008] ? __kasan_kmalloc+0xaa/0xb0 [ 42.885525][ T6008] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 42.885551][ T6008] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 42.885573][ T6008] ? snd_pcm_oss_release+0x238/0x300 [ 42.885595][ T6008] ? __fput+0x3fb/0xb50 [ 42.885616][ T6008] ? fput_close_sync+0x118/0x250 [ 42.885639][ T6008] ? __ia32_sys_close_range+0x1f8/0x430 [ 42.885661][ T6008] ? __do_fast_syscall_32+0x14b/0x8c0 [ 42.885697][ T6008] ? rcu_is_watching+0x13/0xc0 [ 42.885722][ T6008] ? snd_interval_refine+0x2d0/0x580 [ 42.885744][ T6008] snd_pcm_hw_refine+0x82a/0xb40 [ 42.885771][ T6008] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 42.885797][ T6008] ? kasan_save_track+0x14/0x30 [ 42.885816][ T6008] ? __kasan_kmalloc+0xaa/0xb0 [ 42.885835][ T6008] ? __asan_memset+0x23/0x50 [ 42.885861][ T6008] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 42.885887][ T6008] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 42.885918][ T6008] ? snd_pcm_oss_make_ready+0xcb/0x1b0 [ 42.885946][ T6008] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 42.885969][ T6008] ? __pfx___mutex_lock+0x10/0x10 [ 42.886012][ T6008] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 42.886038][ T6008] snd_pcm_oss_sync+0x1de/0x840 [ 42.886067][ T6008] snd_pcm_oss_release+0x238/0x300 [ 42.886090][ T6008] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 42.886114][ T6008] __fput+0x3fb/0xb50 [ 42.886142][ T6008] fput_close_sync+0x118/0x250 [ 42.886166][ T6008] ? __pfx_fput_close_sync+0x10/0x10 [ 42.886198][ T6008] filp_close_sync+0x75/0xa0 [ 42.886224][ T6008] __range_close+0x4a6/0x8b0 [ 42.886254][ T6008] __ia32_sys_close_range+0x1f8/0x430 [ 42.886279][ T6008] ? __pfx___ia32_sys_close_range+0x10/0x10 [ 42.886328][ T6008] __do_fast_syscall_32+0x14b/0x8c0 [ 42.886361][ T6008] do_fast_syscall_32+0x32/0x70 [ 42.886386][ T6008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 42.886410][ T6008] RIP: 0023:0xf7f36fbc [ 42.886427][ T6008] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 42.886443][ T6008] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 42.886462][ T6008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000ffffffff [ 42.886474][ T6008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.886485][ T6008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.886495][ T6008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 42.886505][ T6008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.886528][ T6008] [ 43.923894][ T5792] Bluetooth: hci0: command tx timeout [ 43.994588][ T5792] Bluetooth: hci2: command tx timeout [ 43.994622][ T5792] Bluetooth: hci1: command tx timeout [ 43.995001][ T5792] Bluetooth: hci3: command tx timeout [ 44.330981][ T6032] FAULT_INJECTION: forcing a failure. [ 44.330981][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 44.331001][ T6032] CPU: 3 UID: 0 PID: 6032 Comm: syz.1.20 Not tainted syzkaller #0 PREEMPT(full) [ 44.331025][ T6032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.331031][ T6032] Call Trace: [ 44.331035][ T6032] [ 44.331040][ T6032] dump_stack_lvl+0x100/0x190 [ 44.331060][ T6032] should_fail_ex.cold+0x5/0xa [ 44.331076][ T6032] should_failslab+0xc2/0x120 [ 44.331088][ T6032] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 44.331105][ T6032] ? __alloc_skb+0x5b7/0x710 [ 44.331120][ T6032] ? __alloc_skb+0x140/0x710 [ 44.331136][ T6032] __alloc_skb+0x140/0x710 [ 44.331149][ T6032] ? __alloc_skb+0x5b7/0x710 [ 44.331162][ T6032] ? __pfx___alloc_skb+0x10/0x10 [ 44.331179][ T6032] netlink_alloc_large_skb+0x69/0x150 [ 44.331195][ T6032] netlink_sendmsg+0x755/0x10c0 [ 44.331213][ T6032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.331231][ T6032] ? apparmor_socket_sendmsg+0x165/0x280 [ 44.331246][ T6032] ? ____sys_sendmsg+0xa99/0xc30 [ 44.331256][ T6032] ____sys_sendmsg+0xa99/0xc30 [ 44.331266][ T6032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.331283][ T6032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 44.331300][ T6032] ___sys_sendmsg+0x190/0x1e0 [ 44.331312][ T6032] ? __pfx____sys_sendmsg+0x10/0x10 [ 44.331330][ T6032] ? find_held_lock+0x2b/0x80 [ 44.331352][ T6032] __sys_sendmsg+0x160/0x210 [ 44.331367][ T6032] ? __pfx___sys_sendmsg+0x10/0x10 [ 44.331389][ T6032] __do_fast_syscall_32+0x14b/0x8c0 [ 44.331403][ T6032] ? lockdep_hardirqs_on+0x7d/0x110 [ 44.331417][ T6032] do_fast_syscall_32+0x32/0x70 [ 44.331435][ T6032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 44.331449][ T6032] RIP: 0023:0xf7f36fbc [ 44.331457][ T6032] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 44.331467][ T6032] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 44.331477][ T6032] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 44.331483][ T6032] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.331489][ T6032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 44.331495][ T6032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 44.331501][ T6032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.331513][ T6032] [ 44.478375][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 45.815701][ T5986] Set syz1 is full, maxelem 65536 reached [ 45.994127][ T67] Bluetooth: hci0: command tx timeout [ 46.042245][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 46.083427][ T67] Bluetooth: hci3: command tx timeout [ 46.083455][ T67] Bluetooth: hci1: command tx timeout [ 46.084693][ T67] Bluetooth: hci2: command tx timeout [ 46.265600][ T6089] all (unregistering): Released all slaves [ 47.185056][ T102] IPVS: starting estimator thread 0... [ 47.273225][ T6094] IPVS: using max 25 ests per chain, 60000 per kthread [ 47.461994][ T6041] Set syz1 is full, maxelem 65536 reached [ 47.479857][ T6096] all (unregistering): Released all slaves [ 47.572727][ T6099] Bluetooth: MGMT ver 1.23 [ 47.584661][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'. [ 47.587249][ T6099] FAULT_INJECTION: forcing a failure. [ 47.587249][ T6099] name failslab, interval 1, probability 0, space 0, times 0 [ 47.587264][ T6099] CPU: 1 UID: 0 PID: 6099 Comm: syz.2.40 Not tainted syzkaller #0 PREEMPT(full) [ 47.587276][ T6099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.587282][ T6099] Call Trace: [ 47.587286][ T6099] [ 47.587291][ T6099] dump_stack_lvl+0x100/0x190 [ 47.587311][ T6099] should_fail_ex.cold+0x5/0xa [ 47.587326][ T6099] should_failslab+0xc2/0x120 [ 47.587340][ T6099] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 47.587357][ T6099] ? __alloc_skb+0x5b7/0x710 [ 47.587371][ T6099] ? __alloc_skb+0x140/0x710 [ 47.587386][ T6099] __alloc_skb+0x140/0x710 [ 47.587399][ T6099] ? __alloc_skb+0x5b7/0x710 [ 47.587412][ T6099] ? __pfx___alloc_skb+0x10/0x10 [ 47.587430][ T6099] netlink_alloc_large_skb+0x69/0x150 [ 47.587446][ T6099] netlink_sendmsg+0x755/0x10c0 [ 47.587464][ T6099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.587482][ T6099] ? apparmor_socket_sendmsg+0x165/0x280 [ 47.587497][ T6099] ? ____sys_sendmsg+0xa99/0xc30 [ 47.587507][ T6099] ____sys_sendmsg+0xa99/0xc30 [ 47.587517][ T6099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.587538][ T6099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 47.587556][ T6099] ___sys_sendmsg+0x190/0x1e0 [ 47.587568][ T6099] ? __pfx____sys_sendmsg+0x10/0x10 [ 47.587586][ T6099] ? find_held_lock+0x2b/0x80 [ 47.587609][ T6099] __sys_sendmsg+0x160/0x210 [ 47.587623][ T6099] ? __pfx___sys_sendmsg+0x10/0x10 [ 47.587645][ T6099] __do_fast_syscall_32+0x14b/0x8c0 [ 47.587660][ T6099] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.587674][ T6099] do_fast_syscall_32+0x32/0x70 [ 47.587687][ T6099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.587701][ T6099] RIP: 0023:0xf7f33fbc [ 47.587709][ T6099] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 47.587718][ T6099] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 47.587730][ T6099] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00000000800001c0 [ 47.587736][ T6099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.587741][ T6099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.587747][ T6099] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 47.587753][ T6099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.587766][ T6099] [ 47.601692][ T6096] FAULT_INJECTION: forcing a failure. [ 47.601692][ T6096] name failslab, interval 1, probability 0, space 0, times 0 [ 47.601724][ T6096] CPU: 3 UID: 0 PID: 6096 Comm: syz.1.39 Not tainted syzkaller #0 PREEMPT(full) [ 47.601748][ T6096] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 47.601754][ T6096] Call Trace: [ 47.601758][ T6096] [ 47.601762][ T6096] dump_stack_lvl+0x100/0x190 [ 47.601782][ T6096] should_fail_ex.cold+0x5/0xa [ 47.601798][ T6096] should_failslab+0xc2/0x120 [ 47.601811][ T6096] __kmalloc_noprof+0xfc/0x840 [ 47.601822][ T6096] ? alloc_pipe_info+0x1e7/0x590 [ 47.601837][ T6096] alloc_pipe_info+0x1e7/0x590 [ 47.601850][ T6096] splice_direct_to_actor+0x78b/0xa30 [ 47.601864][ T6096] ? __pfx_direct_splice_actor+0x10/0x10 [ 47.601876][ T6096] ? __pfx_aa_file_perm+0x10/0x10 [ 47.601889][ T6096] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 47.601903][ T6096] ? lock_acquire+0x1d1/0x380 [ 47.601916][ T6096] do_splice_direct+0x174/0x240 [ 47.601929][ T6096] ? __pfx_do_splice_direct+0x10/0x10 [ 47.601942][ T6096] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 47.601958][ T6096] ? bpf_lsm_file_permission+0x9/0x10 [ 47.601973][ T6096] ? security_file_permission+0x76/0x210 [ 47.601988][ T6096] ? rw_verify_area+0xce/0x6d0 [ 47.602005][ T6096] do_sendfile+0xadc/0xe20 [ 47.602017][ T6096] ? __pfx_do_sendfile+0x10/0x10 [ 47.602032][ T6096] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 47.602046][ T6096] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 47.602069][ T6096] __do_fast_syscall_32+0x14b/0x8c0 [ 47.602088][ T6096] ? lockdep_hardirqs_on+0x7d/0x110 [ 47.602107][ T6096] do_fast_syscall_32+0x32/0x70 [ 47.602126][ T6096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.602143][ T6096] RIP: 0023:0xf7f36fbc [ 47.602156][ T6096] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 47.602169][ T6096] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 47.602186][ T6096] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000000b [ 47.602195][ T6096] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 47.602203][ T6096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.602214][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.602223][ T6096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.602243][ T6096] [ 47.791945][ T6114] all (unregistering): Released all slaves [ 47.847779][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 47.883153][ T858] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 48.343599][ T858] usb 7-1: Invalid ep0 maxpacket: 32 [ 48.443318][ T6120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 48.529567][ T6120] netlink: 'syz.0.47': attribute type 61 has an invalid length. [ 48.529584][ T6120] netlink: 'syz.0.47': attribute type 268 has an invalid length. [ 48.641728][ T6123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.670489][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'. [ 48.676314][ T6129] netlink: 'syz.0.49': attribute type 61 has an invalid length. [ 48.676328][ T6129] netlink: 'syz.0.49': attribute type 268 has an invalid length. [ 48.713217][ T858] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 48.953124][ T858] usb 7-1: Invalid ep0 maxpacket: 32 [ 48.953455][ T858] usb usb7-port1: attempt power cycle [ 49.293148][ T858] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 49.305655][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 49.328736][ T858] usb 7-1: Invalid ep0 maxpacket: 32 [ 49.451171][ T6156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'. [ 49.473125][ T858] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 49.494546][ T858] usb 7-1: Invalid ep0 maxpacket: 32 [ 49.494672][ T858] usb usb7-port1: unable to enumerate USB device [ 49.575767][ T6166] usb usb8: check_ctrlrecip: process 6166 (syz.3.58) requesting ep 01 but needs 81 [ 49.575786][ T6166] usb usb8: usbfs: process 6166 (syz.3.58) did not claim interface 0 before use [ 49.714626][ T6176] bonding: no command found in bonding_masters - use +ifname or -ifname [ 49.753390][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 49.802010][ T6184] bonding: no command found in bonding_masters - use +ifname or -ifname [ 49.802624][ T6184] FAULT_INJECTION: forcing a failure. [ 49.802624][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.802639][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.1.66 Not tainted syzkaller #0 PREEMPT(full) [ 49.802651][ T6184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.802657][ T6184] Call Trace: [ 49.802661][ T6184] [ 49.802666][ T6184] dump_stack_lvl+0x100/0x190 [ 49.802686][ T6184] should_fail_ex.cold+0x5/0xa [ 49.802701][ T6184] _copy_to_user+0x32/0xd0 [ 49.802718][ T6184] simple_read_from_buffer+0xcb/0x170 [ 49.802732][ T6184] proc_fail_nth_read+0x1af/0x230 [ 49.802765][ T6184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.802781][ T6184] ? rw_verify_area+0xce/0x6d0 [ 49.802796][ T6184] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.802809][ T6184] vfs_read+0x1e4/0xb40 [ 49.802820][ T6184] ? lock_acquire+0x1d1/0x380 [ 49.802831][ T6184] ? __fget_files+0x34/0x3d0 [ 49.802842][ T6184] ? __pfx_vfs_read+0x10/0x10 [ 49.802851][ T6184] ? find_held_lock+0x2b/0x80 [ 49.802865][ T6184] ? __fget_files+0x215/0x3d0 [ 49.802878][ T6184] ? __fget_files+0x21f/0x3d0 [ 49.802893][ T6184] ksys_read+0x12a/0x250 [ 49.802903][ T6184] ? __pfx_ksys_read+0x10/0x10 [ 49.802918][ T6184] do_int80_emulation+0x166/0x650 [ 49.802934][ T6184] asm_int80_emulation+0x1a/0x20 [ 49.802945][ T6184] RIP: 0023:0xf7127f6b [ 49.802954][ T6184] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 49.802963][ T6184] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 49.802974][ T6184] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 49.802980][ T6184] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 49.802986][ T6184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.802991][ T6184] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 49.802997][ T6184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.803010][ T6184] [ 49.836499][ T6192] bonding: no command found in bonding_masters - use +ifname or -ifname [ 49.883445][ T6199] FAULT_INJECTION: forcing a failure. [ 49.883445][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 49.883465][ T6199] CPU: 0 UID: 0 PID: 6199 Comm: syz.3.69 Tainted: G L syzkaller #0 PREEMPT(full) [ 49.883486][ T6199] Tainted: [L]=SOFTLOCKUP [ 49.883490][ T6199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.883495][ T6199] Call Trace: [ 49.883499][ T6199] [ 49.883504][ T6199] dump_stack_lvl+0x100/0x190 [ 49.883523][ T6199] should_fail_ex.cold+0x5/0xa [ 49.883539][ T6199] should_failslab+0xc2/0x120 [ 49.883552][ T6199] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 49.883568][ T6199] ? __alloc_skb+0x5b7/0x710 [ 49.883582][ T6199] ? __alloc_skb+0x140/0x710 [ 49.883597][ T6199] __alloc_skb+0x140/0x710 [ 49.883610][ T6199] ? __alloc_skb+0x5b7/0x710 [ 49.883623][ T6199] ? __pfx___alloc_skb+0x10/0x10 [ 49.883641][ T6199] netlink_alloc_large_skb+0x69/0x150 [ 49.883657][ T6199] netlink_sendmsg+0x755/0x10c0 [ 49.883674][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.883693][ T6199] ? apparmor_socket_sendmsg+0x165/0x280 [ 49.883708][ T6199] ? ____sys_sendmsg+0xa99/0xc30 [ 49.883719][ T6199] ____sys_sendmsg+0xa99/0xc30 [ 49.883729][ T6199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.883745][ T6199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 49.883762][ T6199] ___sys_sendmsg+0x190/0x1e0 [ 49.883774][ T6199] ? __pfx____sys_sendmsg+0x10/0x10 [ 49.883792][ T6199] ? find_held_lock+0x2b/0x80 [ 49.883816][ T6199] __sys_sendmsg+0x160/0x210 [ 49.883830][ T6199] ? __pfx___sys_sendmsg+0x10/0x10 [ 49.883852][ T6199] __do_fast_syscall_32+0x14b/0x8c0 [ 49.883866][ T6199] ? lockdep_hardirqs_on+0x7d/0x110 [ 49.883880][ T6199] do_fast_syscall_32+0x32/0x70 [ 49.883894][ T6199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.883907][ T6199] RIP: 0023:0xf746efbc [ 49.883916][ T6199] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 49.883925][ T6199] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 49.883936][ T6199] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 49.883942][ T6199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.883947][ T6199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.883953][ T6199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 49.883959][ T6199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.883971][ T6199] [ 49.896656][ T6176] bond0: option mode: unable to set because the bond device has slaves [ 49.897797][ T6176] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 50.022121][ T6192] bond0: option mode: unable to set because the bond device has slaves [ 50.057372][ T6213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.057701][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.073584][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.167036][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 50.220199][ T6223] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 50.281666][ T6230] FAULT_INJECTION: forcing a failure. [ 50.281666][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.281688][ T6230] CPU: 2 UID: 0 PID: 6230 Comm: syz.3.78 Tainted: G L syzkaller #0 PREEMPT(full) [ 50.281717][ T6230] Tainted: [L]=SOFTLOCKUP [ 50.281720][ T6230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.281726][ T6230] Call Trace: [ 50.281730][ T6230] [ 50.281735][ T6230] dump_stack_lvl+0x100/0x190 [ 50.281754][ T6230] should_fail_ex.cold+0x5/0xa [ 50.281770][ T6230] strncpy_from_user+0x3b/0x2d0 [ 50.281784][ T6230] do_getname+0x78/0x390 [ 50.281800][ T6230] do_sys_openat2+0xc3/0x1d0 [ 50.281814][ T6230] ? __pfx_do_sys_openat2+0x10/0x10 [ 50.281830][ T6230] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 50.281847][ T6230] __ia32_compat_sys_openat+0x12d/0x210 [ 50.281862][ T6230] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 50.281882][ T6230] __do_fast_syscall_32+0x14b/0x8c0 [ 50.281896][ T6230] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.281910][ T6230] do_fast_syscall_32+0x32/0x70 [ 50.281924][ T6230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.281950][ T6230] RIP: 0023:0xf746efbc [ 50.281960][ T6230] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 50.281972][ T6230] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 50.281982][ T6230] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 50.281989][ T6230] RDX: 0000000000082880 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.281994][ T6230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.282000][ T6230] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.282006][ T6230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.282019][ T6230] [ 50.378581][ T6234] nvme_fabrics: found same hostid ea4dc906-8b7f-4c06-b45e-c4fcaf47949d but different hostnqn n [ 50.553351][ T5954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.605999][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 50.755391][ T6256] loop7: detected capacity change from 0 to 7 [ 50.797813][ T5893] rxe_eth0 speed is unknown, defaulting to 1000 [ 50.815800][ T6256] Dev loop7: unable to read RDB block 7 [ 50.815821][ T6256] loop7: unable to read partition table [ 50.815914][ T6256] loop7: partition table beyond EOD, truncated [ 50.815930][ T6256] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 50.892163][ T6256] netlink: 96 bytes leftover after parsing attributes in process `syz.2.86'. [ 50.950072][ T5809] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.950568][ T5809] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.951115][ T5809] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.951482][ T5809] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.952055][ T5809] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.972126][ T5201] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.972157][ T5201] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.972181][ T5201] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.972201][ T5201] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.972236][ T5201] Buffer I/O error on dev loop7, logical block 0, async page read [ 50.972280][ T5201] ldm_validate_partition_table(): Disk read failed. [ 50.972328][ T5201] Dev loop7: unable to read RDB block 0 [ 50.972404][ T5201] loop7: unable to read partition table [ 50.972547][ T5201] loop7: partition table beyond EOD, truncated [ 50.980672][ T6268] FAULT_INJECTION: forcing a failure. [ 50.980672][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 50.980699][ T6268] CPU: 2 UID: 0 PID: 6268 Comm: syz.0.87 Tainted: G L syzkaller #0 PREEMPT(full) [ 50.980722][ T6268] Tainted: [L]=SOFTLOCKUP [ 50.980728][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.980738][ T6268] Call Trace: [ 50.980744][ T6268] [ 50.980752][ T6268] dump_stack_lvl+0x100/0x190 [ 50.980783][ T6268] should_fail_ex.cold+0x5/0xa [ 50.980814][ T6268] should_failslab+0xc2/0x120 [ 50.980835][ T6268] __kmalloc_noprof+0xfc/0x840 [ 50.980853][ T6268] ? alloc_pipe_info+0x1e7/0x590 [ 50.980879][ T6268] alloc_pipe_info+0x1e7/0x590 [ 50.980901][ T6268] splice_direct_to_actor+0x78b/0xa30 [ 50.980926][ T6268] ? __pfx_direct_splice_actor+0x10/0x10 [ 50.980946][ T6268] ? __pfx_aa_file_perm+0x10/0x10 [ 50.980964][ T6268] ? lock_acquire+0x1d1/0x380 [ 50.980983][ T6268] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 50.981007][ T6268] ? lock_acquire+0x1d1/0x380 [ 50.981027][ T6268] do_splice_direct+0x174/0x240 [ 50.981049][ T6268] ? __pfx_do_splice_direct+0x10/0x10 [ 50.981071][ T6268] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 50.981092][ T6268] ? bpf_lsm_file_permission+0x9/0x10 [ 50.981117][ T6268] ? security_file_permission+0x76/0x210 [ 50.981142][ T6268] ? rw_verify_area+0xce/0x6d0 [ 50.981169][ T6268] do_sendfile+0xadc/0xe20 [ 50.981191][ T6268] ? __pfx_do_sendfile+0x10/0x10 [ 50.981208][ T6268] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 50.981239][ T6268] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 50.981261][ T6268] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 50.981304][ T6268] __do_fast_syscall_32+0x14b/0x8c0 [ 50.981329][ T6268] ? lockdep_hardirqs_on+0x7d/0x110 [ 50.981352][ T6268] do_fast_syscall_32+0x32/0x70 [ 50.981374][ T6268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.981395][ T6268] RIP: 0023:0xf7f66fbc [ 50.981409][ T6268] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 50.981424][ T6268] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 50.981441][ T6268] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 50.981451][ T6268] RDX: 0000000000000000 RSI: 00000000578410eb RDI: 0000000000000000 [ 50.981461][ T6268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.981471][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.981480][ T6268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.981504][ T6268] [ 51.061587][ T42] audit: type=1326 audit(1793913431.601:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.061636][ T42] audit: type=1326 audit(1793913431.601:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.065151][ T42] audit: type=1326 audit(1793913431.601:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.065234][ T42] audit: type=1326 audit(1793913431.601:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.065265][ T42] audit: type=1326 audit(1793913431.601:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.069457][ T42] audit: type=1326 audit(1793913431.611:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.069480][ T42] audit: type=1326 audit(1793913431.611:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.069499][ T42] audit: type=1326 audit(1793913431.611:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.070115][ T42] audit: type=1326 audit(1793913431.611:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.070137][ T42] audit: type=1326 audit(1793913431.611:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f36fbc code=0x7ffc0000 [ 51.124561][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.128564][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.163367][ T6274] can0: slcan on ttyprintk. [ 51.334730][ T6272] can0 (unregistered): slcan off ttyprintk. [ 51.393493][ T1041] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.539810][ T6298] ======================================================= [ 51.539810][ T6298] WARNING: The mand mount option has been deprecated and [ 51.539810][ T6298] and is ignored by this kernel. Remove the mand [ 51.539810][ T6298] option from the mount to silence this warning. [ 51.539810][ T6298] ======================================================= [ 51.555378][ T1041] usb 6-1: Using ep0 maxpacket: 16 [ 51.563473][ T1041] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.563499][ T1041] usb 6-1: New USB device found: idVendor=0499, idProduct=105c, bcdDevice=0.40 [ 51.567404][ T1041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.567424][ T1041] usb 6-1: Product: syz [ 51.567434][ T1041] usb 6-1: Manufacturer: syz [ 51.567445][ T1041] usb 6-1: SerialNumber: syz [ 51.669292][ T6306] netlink: 'syz.3.98': attribute type 29 has an invalid length. [ 51.703199][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.703272][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.703291][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.703308][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.799536][ T1041] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.854597][ T1041] usb 6-1: USB disconnect, device number 2 [ 51.903607][ T6313] udevd[6313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 52.155278][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.248175][ T6327] FAULT_INJECTION: forcing a failure. [ 52.248175][ T6327] name failslab, interval 1, probability 0, space 0, times 0 [ 52.248194][ T6327] CPU: 1 UID: 0 PID: 6327 Comm: syz.0.105 Tainted: G L syzkaller #0 PREEMPT(full) [ 52.248208][ T6327] Tainted: [L]=SOFTLOCKUP [ 52.248211][ T6327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.248217][ T6327] Call Trace: [ 52.248221][ T6327] [ 52.248225][ T6327] dump_stack_lvl+0x100/0x190 [ 52.248244][ T6327] should_fail_ex.cold+0x5/0xa [ 52.248260][ T6327] should_failslab+0xc2/0x120 [ 52.248273][ T6327] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 52.248290][ T6327] ? __d_alloc+0x34/0xad0 [ 52.248305][ T6327] __d_alloc+0x34/0xad0 [ 52.248319][ T6327] __d_alloc_parallel+0x105/0x15e0 [ 52.248339][ T6327] ? lock_acquire+0x1d1/0x380 [ 52.248349][ T6327] ? lookup_slow+0x41/0x80 [ 52.248363][ T6327] ? __pfx___d_alloc_parallel+0x10/0x10 [ 52.248380][ T6327] ? __pfx___might_resched+0x10/0x10 [ 52.248396][ T6327] ? find_held_lock+0x2b/0x80 [ 52.248412][ T6327] ? down_read+0x136/0x4c0 [ 52.248433][ T6327] ? __pfx_down_read+0x10/0x10 [ 52.248448][ T6327] __lookup_slow+0x98/0x320 [ 52.248464][ T6327] lookup_slow+0x54/0x80 [ 52.248479][ T6327] link_path_walk+0x1551/0x1bd0 [ 52.248494][ T6327] path_openat+0x1a7/0x23f0 [ 52.248509][ T6327] ? __pfx_path_openat+0x10/0x10 [ 52.248524][ T6327] do_file_open+0x20e/0x430 [ 52.248537][ T6327] ? __pfx_do_file_open+0x10/0x10 [ 52.248554][ T6327] ? __pfx_kfree_link+0x10/0x10 [ 52.248568][ T6327] ? _raw_spin_unlock+0x28/0x50 [ 52.248579][ T6327] ? alloc_fd+0x471/0x7a0 [ 52.248594][ T6327] do_sys_openat2+0x163/0x1d0 [ 52.248609][ T6327] ? __pfx_do_sys_openat2+0x10/0x10 [ 52.248622][ T6327] ? find_held_lock+0x2b/0x80 [ 52.248638][ T6327] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 52.248654][ T6327] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 52.248671][ T6327] __ia32_compat_sys_openat+0x12d/0x210 [ 52.248686][ T6327] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 52.248718][ T6327] do_int80_emulation+0x166/0x650 [ 52.248736][ T6327] asm_int80_emulation+0x1a/0x20 [ 52.248746][ T6327] RIP: 0023:0xf7157f6b [ 52.248755][ T6327] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 52.248764][ T6327] RSP: 002b:00000000f54163cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 52.248775][ T6327] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5416490 [ 52.248781][ T6327] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.248787][ T6327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.248793][ T6327] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.248798][ T6327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.248812][ T6327] [ 52.352006][ T6332] FAULT_INJECTION: forcing a failure. [ 52.352006][ T6332] name failslab, interval 1, probability 0, space 0, times 0 [ 52.352024][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.3.107 Tainted: G L syzkaller #0 PREEMPT(full) [ 52.352038][ T6332] Tainted: [L]=SOFTLOCKUP [ 52.352041][ T6332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.352047][ T6332] Call Trace: [ 52.352051][ T6332] [ 52.352055][ T6332] dump_stack_lvl+0x100/0x190 [ 52.352075][ T6332] should_fail_ex.cold+0x5/0xa [ 52.352091][ T6332] should_failslab+0xc2/0x120 [ 52.352103][ T6332] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 52.352135][ T6332] ? __alloc_skb+0x5b7/0x710 [ 52.352150][ T6332] ? __alloc_skb+0x140/0x710 [ 52.352166][ T6332] __alloc_skb+0x140/0x710 [ 52.352178][ T6332] ? __alloc_skb+0x5b7/0x710 [ 52.352191][ T6332] ? __pfx___alloc_skb+0x10/0x10 [ 52.352204][ T6332] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 52.352221][ T6332] ? lockdep_init_map_type+0x5c/0x250 [ 52.352235][ T6332] audit_log_start+0x350/0x930 [ 52.352246][ T6332] ? __pfx_audit_log_start+0x10/0x10 [ 52.352260][ T6332] ? rcu_read_lock_any_held+0x6a/0x90 [ 52.352275][ T6332] ? find_held_lock+0x2b/0x80 [ 52.352290][ T6332] audit_seccomp+0x60/0x190 [ 52.352307][ T6332] __seccomp_filter+0x88c/0x1130 [ 52.352325][ T6332] ? __pfx___seccomp_filter+0x10/0x10 [ 52.352342][ T6332] ? find_held_lock+0x2b/0x80 [ 52.352355][ T6332] ? __might_fault+0xc5/0x140 [ 52.352368][ T6332] ? __might_fault+0xc5/0x140 [ 52.352382][ T6332] __seccomp_permit_syscall+0x207/0x2d0 [ 52.352399][ T6332] __do_fast_syscall_32+0x431/0x8c0 [ 52.352413][ T6332] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.352427][ T6332] do_fast_syscall_32+0x32/0x70 [ 52.352441][ T6332] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.352454][ T6332] RIP: 0023:0xf746efbc [ 52.352464][ T6332] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.352473][ T6332] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 52.352484][ T6332] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008914 [ 52.352490][ T6332] RDX: 0000000080000680 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.352496][ T6332] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.352502][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.352507][ T6332] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.352520][ T6332] [ 52.405230][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.427229][ T5792] Bluetooth: hci0: Zero size dump init pkt [ 52.512222][ T6335] syz.1.109 uses obsolete (PF_INET,SOCK_PACKET) [ 52.516053][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 52.564432][ T6335] ================================================================== [ 52.564442][ T6335] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 52.564459][ T6335] Write of size 8 at addr ffffc90024b22400 by task syz.1.109/6335 [ 52.564467][ T6335] [ 52.564474][ T6335] CPU: 3 UID: 0 PID: 6335 Comm: syz.1.109 Tainted: G L syzkaller #0 PREEMPT(full) [ 52.564488][ T6335] Tainted: [L]=SOFTLOCKUP [ 52.564491][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.564497][ T6335] Call Trace: [ 52.564501][ T6335] [ 52.564505][ T6335] dump_stack_lvl+0x100/0x190 [ 52.564520][ T6335] print_report+0x13d/0x4b0 [ 52.564535][ T6335] ? _raw_spin_lock_irqsave+0x52/0x60 [ 52.564563][ T6335] ? sys_imageblit+0x19fb/0x1d60 [ 52.564573][ T6335] kasan_report+0xdf/0x1c0 [ 52.564586][ T6335] ? sys_imageblit+0x19fb/0x1d60 [ 52.564598][ T6335] sys_imageblit+0x19fb/0x1d60 [ 52.564610][ T6335] ? rcu_is_watching+0x13/0xc0 [ 52.564625][ T6335] ? __pfx_sys_imageblit+0x10/0x10 [ 52.564636][ T6335] ? drm_fb_helper_setcmap+0x117/0x1010 [ 52.564649][ T6335] ? drm_fb_helper_setcmap+0x117/0x1010 [ 52.564662][ T6335] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 52.564676][ T6335] ccw_putcs+0x92f/0xbb0 [ 52.564689][ T6335] ? __pfx_ccw_putcs+0x10/0x10 [ 52.564701][ T6335] ? fb_get_color_depth+0x120/0x250 [ 52.564714][ T6335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.564728][ T6335] fbcon_putcs+0x3b2/0x480 [ 52.564740][ T6335] ? __pfx_ccw_putcs+0x10/0x10 [ 52.564751][ T6335] do_update_region+0x2cf/0x3f0 [ 52.564773][ T6335] redraw_screen+0x63f/0x760 [ 52.564783][ T6335] ? mark_held_locks+0x40/0x70 [ 52.564794][ T6335] ? __pfx_redraw_screen+0x10/0x10 [ 52.564805][ T6335] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 52.564817][ T6335] vc_do_resize+0xc3d/0xeb0 [ 52.564830][ T6335] ? lock_acquire+0x1d1/0x380 [ 52.564840][ T6335] ? __pfx_vc_do_resize+0x10/0x10 [ 52.564851][ T6335] ? rcu_is_watching+0x13/0xc0 [ 52.564866][ T6335] vt_ioctl+0x1e74/0x3170 [ 52.564876][ T6335] ? __pfx_vt_ioctl+0x10/0x10 [ 52.564885][ T6335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 52.564899][ T6335] ? futex_wait+0x11e/0x370 [ 52.564910][ T6335] ? hook_capable+0x1bc/0x500 [ 52.564921][ T6335] ? rcu_is_watching+0x13/0xc0 [ 52.564934][ T6335] ? apparmor_capable+0x1d7/0x4d0 [ 52.564946][ T6335] ? bpf_lsm_capable+0x9/0x10 [ 52.564957][ T6335] ? security_capable+0x80/0x260 [ 52.564968][ T6335] vt_compat_ioctl+0x33f/0x4e0 [ 52.564978][ T6335] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 52.564987][ T6335] ? __fget_files+0x215/0x3d0 [ 52.564998][ T6335] ? hook_file_ioctl_common+0x140/0x440 [ 52.565013][ T6335] ? __fget_files+0x21f/0x3d0 [ 52.565023][ T6335] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 52.565033][ T6335] tty_compat_ioctl+0x1b4/0x420 [ 52.565046][ T6335] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 52.565058][ T6335] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 52.565075][ T6335] __do_fast_syscall_32+0x14b/0x8c0 [ 52.565088][ T6335] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.565100][ T6335] do_fast_syscall_32+0x32/0x70 [ 52.565113][ T6335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.565126][ T6335] RIP: 0023:0xf7f36fbc [ 52.565134][ T6335] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.565144][ T6335] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 52.565165][ T6335] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000560a [ 52.565171][ T6335] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.565177][ T6335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.565183][ T6335] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.565189][ T6335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.565198][ T6335] [ 52.565201][ T6335] [ 52.565204][ T6335] The buggy address belongs to a 16-page vmalloc region starting at 0xffffc90024b12000 allocated at tpg_alloc+0xbd/0x9b0 [ 52.565223][ T6335] Memory state around the buggy address: [ 52.565228][ T6335] ffffc90024b22300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 52.565235][ T6335] ffffc90024b22380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 52.565241][ T6335] >ffffc90024b22400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 52.565246][ T6335] ^ [ 52.565250][ T6335] ffffc90024b22480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 52.565256][ T6335] ffffc90024b22500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 52.565262][ T6335] ================================================================== [ 52.565301][ T6335] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 52.709969][ T6335] CPU: 3 UID: 0 PID: 6335 Comm: syz.1.109 Tainted: G L syzkaller #0 PREEMPT(full) [ 52.713270][ T6335] Tainted: [L]=SOFTLOCKUP [ 52.714659][ T6335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.717756][ T6335] Call Trace: [ 52.718851][ T6335] [ 52.719788][ T6335] dump_stack_lvl+0x100/0x190 [ 52.721266][ T6335] vpanic+0x2dc/0x6f8 [ 52.722555][ T6335] panic+0xd1/0xe0 [ 52.723751][ T6335] ? __pfx_panic+0x10/0x10 [ 52.725156][ T6335] check_panic_on_warn.cold+0x19/0x34 [ 52.726872][ T6335] end_report.part.0+0x3a/0x90 [ 52.728372][ T6335] kasan_report.cold+0xe/0x18 [ 52.729906][ T6335] ? sys_imageblit+0x19fb/0x1d60 [ 52.731475][ T6335] sys_imageblit+0x19fb/0x1d60 [ 52.733001][ T6335] ? rcu_is_watching+0x13/0xc0 [ 52.734506][ T6335] ? __pfx_sys_imageblit+0x10/0x10 [ 52.736133][ T6335] ? drm_fb_helper_setcmap+0x117/0x1010 [ 52.737890][ T6335] ? drm_fb_helper_setcmap+0x117/0x1010 [ 52.739656][ T6335] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 52.741569][ T6335] ccw_putcs+0x92f/0xbb0 [ 52.742940][ T6335] ? __pfx_ccw_putcs+0x10/0x10 [ 52.744439][ T6335] ? fb_get_color_depth+0x120/0x250 [ 52.746076][ T6335] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 52.747949][ T6335] fbcon_putcs+0x3b2/0x480 [ 52.749389][ T6335] ? __pfx_ccw_putcs+0x10/0x10 [ 52.750913][ T6335] do_update_region+0x2cf/0x3f0 [ 52.752463][ T6335] redraw_screen+0x63f/0x760 [ 52.753932][ T6335] ? mark_held_locks+0x40/0x70 [ 52.755447][ T6335] ? __pfx_redraw_screen+0x10/0x10 [ 52.757049][ T6335] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 52.758901][ T6335] vc_do_resize+0xc3d/0xeb0 [ 52.760343][ T6335] ? lock_acquire+0x1d1/0x380 [ 52.761823][ T6335] ? __pfx_vc_do_resize+0x10/0x10 [ 52.763426][ T6335] ? rcu_is_watching+0x13/0xc0 [ 52.764938][ T6335] vt_ioctl+0x1e74/0x3170 [ 52.766317][ T6335] ? __pfx_vt_ioctl+0x10/0x10 [ 52.767804][ T6335] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 52.769697][ T6335] ? futex_wait+0x11e/0x370 [ 52.771134][ T6335] ? hook_capable+0x1bc/0x500 [ 52.772627][ T6335] ? rcu_is_watching+0x13/0xc0 [ 52.774124][ T6335] ? apparmor_capable+0x1d7/0x4d0 [ 52.775723][ T6335] ? bpf_lsm_capable+0x9/0x10 [ 52.777194][ T6335] ? security_capable+0x80/0x260 [ 52.778781][ T6335] vt_compat_ioctl+0x33f/0x4e0 [ 52.780281][ T6335] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 52.781932][ T6335] ? __fget_files+0x215/0x3d0 [ 52.783423][ T6335] ? hook_file_ioctl_common+0x140/0x440 [ 52.785153][ T6335] ? __fget_files+0x21f/0x3d0 [ 52.786647][ T6335] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 52.788300][ T6335] tty_compat_ioctl+0x1b4/0x420 [ 52.789837][ T6335] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 52.791534][ T6335] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 52.793267][ T6335] __do_fast_syscall_32+0x14b/0x8c0 [ 52.794918][ T6335] ? lockdep_hardirqs_on+0x7d/0x110 [ 52.796558][ T6335] do_fast_syscall_32+0x32/0x70 [ 52.798098][ T6335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 52.800107][ T6335] RIP: 0023:0xf7f36fbc [ 52.801409][ T6335] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 52.807372][ T6335] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 52.809963][ T6335] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000560a [ 52.812463][ T6335] RDX: 00000000800006c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.814933][ T6335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.817378][ T6335] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 52.819861][ T6335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.822323][ T6335] [ 52.823966][ T6335] Kernel Offset: disabled [ 52.825326][ T6335] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:17:13 Registers: info registers vcpu 0 CPU#0 RAX=00000000000e3939 RBX=ffffffff8fc91540 RCX=ffffffff8bec5325 RDX=0000000000000001 RSI=ffffffff8e625249 RDI=ffffffff8c835a80 RBP=fffffbfff1f922a8 RSP=ffffffff8fc07cf0 R8 =0000000000000001 R9 =ffffed10055c6825 R10=ffff88802ae3412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000 RIP=ffffffff8bec37bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809527e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f122000 CR3=0000000066aef000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000befeb RBX=ffff88801df72580 RCX=ffffffff8bec5325 RDX=0000000000000001 RSI=ffffffff8e625249 RDI=ffffffff8c835a80 RBP=ffffed1003bee4b0 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed10055e6825 R10=ffff88802af3412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bec37bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809537e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e721ff8 CR3=000000007118a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000023400000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000004c4d0000 RCX=0000000000005a80 RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffff88804c4d2580 RBP=0000000000000008 RSP=ffffc9000111f458 R8 =0000000000040001 R9 =0000000000000000 R10=ffffed100989a000 R11=dffffc0000000000 R12=0000000000000008 R13=ffffea0001313400 R14=00000000000d2820 R15=0000000000000001 RIP=ffffffff827731a3 RFL=00010286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809547e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f720fc8c CR3=000000007118a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000023400000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85c112f5 RDI=ffffffff9cf3d5a0 RBP=ffffffff9cf3d560 RSP=ffffc9000f39ee28 R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=666f206574697257 R12=0000000000000000 R13=0000000000000036 R14=0000000000000002 R15=ffffc9000f39f140 RIP=ffffffff85c1131f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809557e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffc81000 CR3=0000000073e7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000023400000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000