last executing test programs: 46.810101299s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write(r1, &(0x7f0000000280)="9cde2335039b89bd230866f98f3ffa47a3af2f7b096407ad49550c34dd3c65af6dd12a3b2a74abfb30f8203efc79b59372b79a70727abf7eb8f3877d109e57d6851c327e7d4f334af40cede9b9a63b05ceeee99977390f5e78750bf6b1386e9f4e90eea4f1d522cbda8717795886fd03ec71d97343b7482f815bfcff25706516f8fa83093cfd58caf8ae9673d507b2ab85bc836da2c252a9f88e54cd378d3927c5aa313a6c8284facae7209be33c933da73b076df13bf7b14fd6991ab11c19d08fd8eb78b3c769a6656963be48d26425bda80c089cb6b8aa85d3e7a47af9999a59cac6fc681928615f730d80d4d436523fb0ac41b9", 0xf5) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x6004c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './sys/module/damon_reclaim/parameters/addr_unit\x00'}) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x44880, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x2, 0x81) writev(r5, &(0x7f0000000740)=[{&(0x7f00000003c0)="b67433", 0x3}], 0x1) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000200)={0x0, 0x57, &(0x7f0000000180)="1ddbea3cd2caeeb6bf3efdd1da7293f0ab6d6a2afb6ba08732a27423f767418ab87ea9789477606c6ece93bb0e78408738c6346c9550f85d27d554e0e5cd20135efd0593e3d4a6dfeb59f5591a6e230b68558ab2fed336"}) 43.76015746s ago: executing program 0 (id=71): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x83d3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfe7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x392ffd7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x583}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x44845) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x4801000000000000}, 0x0) 43.690961466s ago: executing program 0 (id=73): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000140)='%pI4 \x00'}, 0x20) sendmsg$nl_generic(r2, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x1b0, 0x3e, 0x4, 0x70bd29, 0x25dfdbff, {}, [@nested={0x10d, 0xa, 0x0, 0x1, [@nested={0x4, 0x121}, @generic="0faaf38b58db1c866019366fbd91a3d121aa9e93ebd1f2f488cfe9d8577cab0588ba6f0e6b1e168d3184f1f073de839ef2d7246f6c457a32e0b6c720d970366c53a7bcb7487619c9e25804b36ca62f1e4ad6a39d55ba359cdb00f973eba13d3c3683b8c75977a7e9d8afb0e5e90e8c6cc1fb62211714340d866864acdc844c078cee6ebf8ef851ba141906fadf4ae72344b3f0add1fef61ca19de79c37b6e9aeada2ef0e6a64f7a0f07dc625c3983c789913fefa3f8e5b0ce88376e2798cbf9ddd12231d9cb9712c366806f7bb691a45d47854309d476de31fd1166693c893f3001d5bf5f65970e4cafd", @nested={0x4, 0xb}, @generic="518ff7", @generic="5e764757cf138e2973e36d02fb5626d6e4596dff"]}, @generic="5e3139ac90d4ccb5a7ebb4f2991f88ce5deae8839b7a966c2faec3c36d374f995fdf2ad834fa7654b0360789142fa6e54477f7ac047ae95c1e4aff9a2b7fc3bfa9f1c20de6d3a7636cd3232b2a47da80c4e295c403", @typed={0x11, 0x15e, 0x0, 0x0, @str='802.15.4 MAC\x00'}, @typed={0xc, 0x150, 0x0, 0x0, @u64=0x8000000000000001}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@empty}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) read(r5, &(0x7f0000000240)=""/70, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000040)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r8, &(0x7f00000003c0)='10', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) mkdirat(r9, &(0x7f0000000600)='./bus/file0\x00', 0xcc) fsetxattr$security_ima(r9, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38004162c2e95d0400", @ANYRES16=r10, @ANYBLOB="0b062dbd7000030000003000000005003500460000000a0001007770616e3000000005003300000000000500360001000000"], 0x38}}, 0x20000000) 43.350034566s ago: executing program 0 (id=80): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x9, 0x3, {{0x14, 0x4, 0x3, 0x3b, 0x50, 0x67, 0x0, 0xf, 0x29, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x9, [{@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7ceb4910}, {@remote, 0x101}, {@broadcast, 0x101}, {@private=0xa010101, 0x4e9}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x7, [0x7, 0x4, 0x200]}]}}}}}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb00"/400], 0x190) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000053a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 43.282811363s ago: executing program 0 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000a2"]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000000380)=r3, 0x12) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00') 43.280637999s ago: executing program 0 (id=84): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040880) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x4, 0xfffffffd, 0x0, &(0x7f00000000c0)=0x1, 0x0) 27.960761912s ago: executing program 32 (id=84): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x4040880) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x4, 0xfffffffd, 0x0, &(0x7f00000000c0)=0x1, 0x0) 1.909002564s ago: executing program 3 (id=468): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x309c0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4c040) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) 1.841876836s ago: executing program 3 (id=472): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)={0xffffffffffffffff}) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000001040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b00)) (async) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x44000010) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000001040)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) (async) 1.741714521s ago: executing program 3 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x80) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000080)={0x33, &(0x7f0000000400)=[{0x19, '\x00', @st={0x4, [{0x3, @uvalue=0x10001}, {0x2, @uvalue=0x8000}, {0x3, @uvalue=0x8}, {0x0, @uvalue=0x1}]}, 0x400}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000100)={'hsr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x0, 0xee}, 0xff}, 0x18) getpeername(r4, 0x0, &(0x7f0000000180)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000200), 0x6d, 0x8000) mount$fuse(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) syz_open_dev$vcsu(0x0, 0x2aba, 0x204080) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000000)={0xe6, 0x2, 0x3, 0x1}) syz_open_dev$dri(&(0x7f0000000300), 0x6, 0x42c000) 1.638023681s ago: executing program 3 (id=478): r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='add s', 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x2a0, 0x2a0, 0xffffffff, 0x188, 0xe0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id, @port=0xfffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES8=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) setns(r0, 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) ioprio_set$pid(0x2, 0x0, 0x6000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000080)='0', 0x1}], 0x1) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000200)=@in6={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="96", 0x1}], 0x1, &(0x7f0000000100), 0x0, 0x40}, 0x488c4) 1.578726203s ago: executing program 2 (id=480): r0 = syz_io_uring_setup(0x49bb, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x7, 0x246}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x2e}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x8, 0x4004, @fd=r4, 0x9, &(0x7f0000000180)=[{&(0x7f00000000c0)="aac0a46114f100abb807340405637cbc6efeffed5beb8274a16cbcd8f5a131c8ad75cff63c07410a4d25cbfd9a2074f53951c128b2c0199648af0033ffdc4a1f39afdaf39177435a2bde390a243ceab99edb688c43f323c7199370e15ba7e03461c38f71b95bfe7f8cfd36799874d95e2861ef23657ec045d4597fe61ca996bff23f7a0d6bcdee0334f6ef33d704ab1c100e22ac8ca5dd80cfb2abff7cd4e2a7", 0xa0}], 0x1, 0x18, 0x0, {0x2, 0x0, 0x0, '\x00', &(0x7f00000003c0)={0x6, 0xfff7, 0xc0, &(0x7f00000001c0)="f2287ffe25422d86746a1726cf94b06cccd8ed5448df16232b7a6a0e4feea4e1fb293314f7d529925e4ceaa23f75e2c0eb0fa31ea5793ca54a3cd3ec4c365861cb681fa582b4ba4a1e42575ecac1be62bcd6158332eb0eca8c0485fe8d4b0b06a079ca933d157c858bc8b1aae3c495fe15774ecb65ea5bf08704bfc3c365a39f61b21b0884a99fec67c1f3352cef5de462e16bc8d6f4c63277c8a1f105a1610eb426ecd355cc54b3021fa377b35877556954f5bef261b5881cda307247d9c06b", 0x7fff}, 0x4}}) io_uring_enter(r0, 0x1ffc, 0xfffffffc, 0xc3, 0x0, 0x0) 1.512120338s ago: executing program 2 (id=481): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') pread64(r0, &(0x7f0000000140)=""/4072, 0xfe8, 0x80073) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e1f0a0088edee"], 0x22) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) fstat(r1, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x10, &(0x7f0000001540)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) r3 = getpid() syz_pidfd_open(r3, 0x0) capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f00000000c0)={0x2, 0x5, 0x3, 0x2cf, 0x8, 0xfffff000}) 1.415585082s ago: executing program 3 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x80, 0x8000002, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8800) mount$cgroup(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0), 0x900000, &(0x7f0000000400)={[{@none}, {@name}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@flag='mand'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x61, 0x171b14c1f7d22483, 0x0, 0x32, 0x37, 0x35], 0x2d, [0x32, 0x39, 0x38, 0x32], 0x2d, [0x35, 0x64, 0x61, 0x62], 0x2d, [0x35, 0x34, 0x65, 0x63], 0x2d, [0x63, 0x38, 0x32, 0x61, 0x63, 0x39, 0x38, 0x64]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'root'}}, {@fsname}, {@permit_directio}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x20) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) r5 = mq_open(&(0x7f0000000000)='*\x00', 0x800, 0x84, &(0x7f0000000040)={0x6, 0x8000000000000001, 0x3, 0x4}) mq_notify(r5, &(0x7f0000000080)={0x0, 0x19, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x104) (async) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@dev}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000300)=0xe8) (async) fanotify_init(0x1, 0x101000) (async) fanotify_mark(r2, 0x80, 0x8000002, 0xffffffffffffffff, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', &(0x7f0000000380), 0x8800) (async) mount$cgroup(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0), 0x900000, &(0x7f0000000400)={[{@none}, {@name}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@flag='mand'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x61, 0x171b14c1f7d22483, 0x0, 0x32, 0x37, 0x35], 0x2d, [0x32, 0x39, 0x38, 0x32], 0x2d, [0x35, 0x64, 0x61, 0x62], 0x2d, [0x35, 0x34, 0x65, 0x63], 0x2d, [0x63, 0x38, 0x32, 0x61, 0x63, 0x39, 0x38, 0x64]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'root'}}, {@fsname}, {@permit_directio}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x20) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) (async) mq_open(&(0x7f0000000000)='*\x00', 0x800, 0x84, &(0x7f0000000040)={0x6, 0x8000000000000001, 0x3, 0x4}) (async) mq_notify(r5, &(0x7f0000000080)={0x0, 0x19, 0x4}) (async) 1.150891876s ago: executing program 3 (id=483): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa3, 0xb69b, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xff, 0x1005, 0xfffffff, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x80006, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8091}, 0x4000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 961.342443ms ago: executing program 2 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = syz_open_dev$video(&(0x7f0000000080), 0x40000000007ff, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000040)={0x1, 0x100, 0x1, {0xff, 0xf, 0x9, 0x3}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xf0, 0x401, 0x3, 0x4000000000007, 0x4, 0x4, 0x80020001, 0x4, 0x200, 0xff, 0x6, 0x5, 0x100000000036, 0x7, 0xc], 0x0, 0x12a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e04a1f29f656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc}) r5 = socket$packet(0x11, 0x2, 0x300) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='security.selinux\x00', &(0x7f0000000300)='syz\x00', 0x4, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) 651.592717ms ago: executing program 1 (id=489): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2c4c18ea}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010400)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x820, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1a, 0xffffffff}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2c4c18ea}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010400)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x820, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1a, 0xffffffff}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000844) (async) 651.398504ms ago: executing program 4 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000019c0)={0x38, 0x41, 0x1, 0x70bd26, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@nested={0x6, 0x152, 0x0, 0x1, [@generic="22ae"]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2}, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000b656d95d0000000000"], &(0x7f0000000040)='syzkaller\x00', 0xa4e, 0x64, &(0x7f0000000140)=""/100, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x80000000}, 0x94) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'pim6reg0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 565.795145ms ago: executing program 2 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="3a6b2f563eb3"}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {}, {0xd, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x1000000, 0x0, 0x400c0}, 0x44840) 565.470679ms ago: executing program 4 (id=492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8f, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, r4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="4f54857bbab8", @ANYRES64=0x0], 0x10) r7 = socket$netlink(0x10, 0x3, 0xa) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) socket$kcm(0x29, 0x5, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r6, 0x4) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, r9, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r9, 0x3}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x9, 0x25dfdb7c, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x99}}, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001800090400000000000000000a002000000000000000000008001e000100"], 0x38}}, 0x0) 431.947024ms ago: executing program 4 (id=493): r0 = getuid() r1 = epoll_create1(0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000001d0000000000000000000000ad6039b4", @ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000100)=""/180, 0x4}, 0x20) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x8500, 0x0) ioctl$CDROM_NEXT_WRITABLE(r5, 0x5394, &(0x7f0000000240)) socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) close(r6) timer_settime(0x0, 0x31e8b16f7aab8171, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0xa002803f}) 290.945143ms ago: executing program 2 (id=494): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0, 0x1, 0x6, 0xce9}]}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) (async) listen(r3, 0xd) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000440)={0x1a, {"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", 0x1000}}, 0x1006) (async) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0xd, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x44800) 289.885947ms ago: executing program 1 (id=495): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x3, 0x4, 0x2, {0x2, @raw_data="6b68d801e190f57dae0a0c0000d36c87da439a72d0cd933d9acaa23854ba8295e64f555dcc8f8d490cc9697553fb9ffe26ef2dafee0f25eb365893ceda6a00f217cf9cd15ef7307ea1ca89bd9333368fd0d0db1720d2513bd8863f2fcb3e80b129b571b972ab99902f3d7ce38e6d17ca0e4de4c3443c461df6f80d8117de07fab7dc52aefb76215fdd677cd71860341e64e776b2768c3b5be7c66095e606d5548ffc09e0de01df0431b152bc238e1468e7763bebabbe01015b3c00800d522c4200"}, 0x7a0d3211}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f000001ff40)={0x2, @meta={0x48505356, 0x9148081, 0x8085, 0x87eb, 0x49bdcc8a}}) 190.526803ms ago: executing program 1 (id=496): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0xfa, 0x6, @multicast}, 0x14) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x40, 0x20, 0xb, 0x5, {{0x11, 0x4, 0x2, 0x9, 0x44, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x4e, 0x1, 0x6, [{@private=0xa010101, 0x6}, {@multicast1, 0x7}, {@broadcast, 0x1}]}, @timestamp={0x44, 0x14, 0xc4, 0x0, 0x0, [0xf, 0x81, 0x9, 0x499]}]}}}}}) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket(0xa, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r4], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001000000000400000000", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) r10 = dup(r9) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000380)={0x3}, 0x4) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r11, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000160011002cbd7000fedbdf250a0040ff", @ANYRES32=r14, @ANYBLOB="14000100ff02000000020000000000000000000114000200fc0200"/40], 0x40}}, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 97.341987ms ago: executing program 2 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60}) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 81.026637ms ago: executing program 1 (id=498): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x40c, 0x0) (async) add_key(0x0, 0x0, &(0x7f0000000180)="6e0c9b6b38d8854d85727d43ce556eb22c5cb5fc81ee9f9941ba0c6c60c1ab528285e82284ed3c1478e8aea7dc", 0x2d, 0xffffffffffffffff) (async) set_robust_list(0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r0, r0, 0x2f}, 0x20) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1c000000000000, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000100)={0x2, @vbi={0x200, 0x2a, 0xa02, 0x34324d59, [0xff, 0x1], [0x2b1f, 0x8004], 0x1}}) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r0, r1, 0x2f, 0x2000, 0x4, @value=r4}, 0x20) (async) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00r1, &(0x7f0000000100)='TIPCv2\x00', 0x0, &(0x7f0000000400)={@_ha_fsid={[0x80000000, 0x100]}, {0x10, 0x5, 0x5, 0x5c6d}}, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000000000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 2.00242ms ago: executing program 4 (id=501): r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r2, 0x40, 0x1, 0x400001) 523.883µs ago: executing program 1 (id=502): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xa, 0xfffffffc}) r2 = syz_io_uring_setup(0x4919, &(0x7f0000000500)={0x0, 0x34f0, 0x40000, 0x0, 0x5}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x2001, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r7, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, 0x0) write(r6, &(0x7f0000000380)='z', 0x1) ioctl$MEMERASE(r6, 0x40084d02, &(0x7f0000000000)={0x7, 0x9}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002020000102505a1a44000010203010902bb00010108002b090400130302060000052406000005240007000d240f0101000000a3dbf40208090582024000050106090503024000080009"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=503): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'nr0\x00', 0x0}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) listen(r0, 0x1de) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x343200, 0x48) r3 = openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xc0, 0xe1, 0x3}, 0x18) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r4, 0x0, 0x1000, 0x7c, &(0x7f0000000240)="a972b4c46c49b667c410daa4d83de5cbc901fa33e3f23292fd88f1d1c00e587d2e0fd999bcd023f2406789a6de669a6197f0e1836c37aa99ee724848ddcd8b940714bdf834d55b993f709b1b16311a556a23fd7a1470e847cfaf6aa4eb51d6ec15fb359c72ab544e1eb07b809297bfd58c25b43368155e67da37ce2500653099bae6c7f8a6f34bf895358fc9d9d98557c4508c1373e6e071921c5ece3f66bc97a121b126e8c8381c8d2d28f47c9ba884256969c258df90990f172ecc3976971341457bc0118d155cb0bdc17e0413e554a407a183bf0adae08a31613bcaec7dc4f804e38531ef110f6261ebebeb06df0219e406aaeb08af3ea76c1af4883c75229b14ae575a61de750742f65685b0a5cb2157c25b9c56ec61c96ee0352c43924e0bf83472a939a5cd975c1fbce09e6ce4e774fe6a8993147ac9b6383ea1dd2907add2ade83e70b486d3e509d2367e762289df5c956fd7076164189656ba32073fc79b988da8cf802ce2afbeb008eca48e4210b5524b7415a780f671adbab584c370f1194fc263b04e6d3f9748f60588f074aad7dab66f28e022c4f27bfff60aa97425645a5c74d00deab33d0d71105735796456cbf0304928754b8dcc02a43b53bbf4770273ab785033f33b1e8b929618c3785d2f9f63ee15a19e8f5ba399a8f91b24b35dedaf4c87b8a4a0ec980cf8f81968af866a6b2f3ab2e7c8ae7936452ffa7371ba11aa47e6c0137bf479cf340ec133a46949cca16e80a7c788b6bdb2ad1ba1f8a2f910f7c218a9803b634cbe2c025d59af415eca2b481fd627f2a5949dd8ce90809d649d797f487d923809d2fe19de6fd93a3a4afbe85b54ca278c561f943ea3c8de263fcb723ebd6e949ffed040c1ce7c80db617db5d4817fbf616ad39e1ca972226f66550f0a9d501455171cb3517585866dfc9ec1b5877516829a900531a30baf12096851bee008ac1a4b75cc71a078cb45bba0bc5457295f47fd6c31ae01c977447f68d8f0cb1f64c279c7797028e017d212528802193b84bc2c51fe8b700422eb5b844b3167693528f06c49a7382644cd20dfa41672df5354a39a19cb8e984ea387bd67dadc454922bb6a986435ca99a24457feeedfb46a11e276533cf3b5f75f29512b4125cb9b9c1156b5bc24b7add3f081f479e54b27e110b630e6e28b9e536d2c8c340ac12ed1a8ad82df797b884ca244e5993c06cfae2c6e13c735c93b18af523edeb2da7acc58787757993f1fcb8709395274eab127ed09c9743478b625a9f9d9d490621e2b4552479d86330537e9300c47493f2d3e5cc5ee6039b3f53af4d084cb88bef48ca4246f61c713e3b6736d81e7149a3bb459131065fe49474b729e507b045f1504d6407de6014c3e8cecff5f4a9e86d5e985eab892bfeb43c7217f921f4a10400caca1fcd66527744bcc7e483dac675f40d26592ae02959b15db0a92e224e4efaa8a1cff70967fc898cbfc09f5a7dfe98475765f1066a97612f2784a390c6b470129a6efb16c9319e674cbefbb9dc96543962d7b681a1266f95ba82694667d581fd92a1ee06c4df7ce8d201455e284f87401a320f4998b26d0336357618db6d504bceda2b7317f96dc872ff9066668972c7a73196ff9934f178da0b2ba8dd7366f53f066232475d68051f119b0fc8208b2c91e21d81d2497a3b0687989da8148003c75a35d3973ed3f36dc2cd895af4b4aab39621229a53a2282e6ac3e56a93939849ad4dfe27f24a9c92772d2fac3c080d7755c275824bba5e2fb09fd9ab2dbed05383b2d1845583f66e23519956092db9cb1d39fe215397db41d3c28465981abb59ed63327cdda56b5985fea0c842ced17bbcb00390dc44701a4edd4150ca1634beee787f07e7b88657a7a64759027745327325fb58f7e756bbffc5724d3f256b0e0d4b38f5fe087d800be9973b9d2fbbaf3f5ad78baf07f8bf5faf09a2ba6b3de9a0756bf332d6a2732523716f8c7b87b102a966d28debf2eb2711fd10205a9832f303e27a7663f9881199806b5b9472684d648afc2c944addd2524722a54b0604bfd9b54a6703ae79602b68fa92f756f503cd927748c9d9275bbdeb20f7ca3c32290fc514971c22bbb38202908d027424e0f085798a4cda3a3fb033418ee06d21f12e35a5d5ba4d6ee43523cc7f037b2f39975e10d804c10eaaebdd889ec37ff0c129ab3c5cbadeb350551c3810ddbbec604d57c6f194cf5061363492188032d94a1cc4c779ab14660ee8b5aeaf5274d0481a67333459c08f799c474b69dd4154ffd978629db4af3b3fda9be8413c4bb428ed6482b74bb916be3e37d63635c18b9638c2d4053bc7b94eaa2cf83b01c2a3eaa6eff354620e2726c5ea35dfaf05f6ac19729860f538a1e6e0fe937469bd6fe984a508ea1c2e8bf1680155fd4927145654296a6905664c13307a96a9e5553804097267a76a49e3ff7906c65aeec6211076e58bd5113cc8b7b22474a3cf617dd928a8fa160ff62de76c6f85f782317a972337e2d19f6bfbd53f7853ccbb824f3f82f07f2000c0d4f781dd485c82dad5651d3e9ce4db6293cc3436d23d49870621e3c40ede74d9397745cfafcbb927593a5e654a118e27367d80e270aa260788abbf9f0071d7cac505d883e36d7fa60893299eccb72ac7f3d112e2506913a85e8efe0acbfa78f6830dc44023f2fc9639275b6a423822a53f055ef67aa507a17e3b99c9af18754606969ffae71e7fc0b11c69aec7bbdab9a5dd6e1efcbd24d1891ca7726a8fb7a13877593e2db8df67baab228aa30157ac3a7588939e85a8e8567f3ddfd86261c4c5fb2cd334f1e7def5ad7ffcb54e59dd6f0770d88331e29fc8da77497377d7fc63eaa4d244cf3bf26471bb931f6e1f9817c767d7bb1a69fa8eef221f64771c6d4e4e1c622daec2b04228f4cd5782ce8a20f0507c703fa377dea2f7848766cdf2ce41b7653e9c797bb015e7086b1af1309cbb89d65ca24fde0849cfd7ff96fbc856f6b0c27161074808a6e16574cacf36befa39a502e6d8aeef9fe13a76c1883972dfae9b8123e90469883a2a5786c92c56e819fc6101aee8f6767f225bd6f773066549f11f0ad7e0fb9b0051434a2ceb54ef5c4eaa49834008cb839cd3218c5a334214a978d9fe89c162950a101f3ef2e10303317f59f49390a81fb531eeba7e5a68ad6ed9d457348e9f4201e5142a1b136018251e46c49bb99c8d7341174c70f424e1b6b82247e94be24d1fba68b079d344d93846ae8cabdbe926c47d3b9c9b897fc8cdc504418e40d3188c8869ed68807ec8a31c0303fac44b9b5c64c1cca2899a0726d75f05d49855888369989386ba70762c08fe0de744d8bee12e6b011f18092b1fdddee3ca653b71b2a98ef2e79d967f148f2ce356878ba75085858b942e30c771f185c1be040cce7e2f52341bf5a71680d8caaaef265d5c3908dc6002a39ca7b9c81a38f82354ebc943da0e3df09747baab3502509cab2a10d31b14f1f13d733fac29ff8bd3226a40440de9703b463475129c724d18cf6d61048905c1f0a55337247bf03dbaec0251ed5483e983b96f2803d185d5701858e12a6a5a30b1a36b0f439e0775a8133b552f2bd0f24e6243ee63dd03d105e364b7af7219e8f12c72f6f126163756fe63c9d5d4d7c711121357537deca80d8ea2f0feea3ea353bd51fda4f3d209a8443840aabe9f3bba0a728a58c9fecebf1faefc0b318507716f42cafb44e06269006bde5f3df318d67fe0d63a37d962a9874ad639c5fc3135b9f89cb351ed257f7c490ee3540fbc948ebd47b1a50d9050fb9145d4ed44f26dbd0c451d42465af51d65b7440a0d0cce3d72f46c07f84141f32cdb503fa25534a159b91ba28d1b077e00aeeba241c3ec2ad2762684c8df2bc46ce111cc375c5fe9e1b598fb90ebd542f9c4f7ddb56caa0aa1b448d364e6a42a1e5e38e4d79a5ecdaa7e22dbc271607079ac3b5745bf200de20548d6de10413ba01e76ab860434631bccc85266d5439afd74c6ee650afbf45df250f5b9a6ef66b3a5b88053222fce70ed3baaa26b374f809805290542136bd26044798f9b9635b78967f73f9360abb12abca0a33ab0fc3f5964bbbb685c4aa7997977e0cc5b9fc4e909ebd98c98af4da5da7bc61a45b213d340172e7cbffe5d04afc75cb1710ad8bdc0b00699569ba58496b779a5f5e98efaee78640f72d3d905332b298b23b3fe841255192515e94d40d34fc26d7cc3a5d65a53273ffba3b5e8e5ff090496aede962467467004b3acc40be832ccebea428c3355e83cf3666aba7033eac749217bf29157d0590951c469de71cb883b8ff352383722c821a68845b3353c5f2c9a814cc7504946ec934d8e2f3852b142bb7bf41c502bc15a68d82e593aaf7f94b10bf1fddca055a04f3b826e41237492e1c890fa3c79d6eb8ee674ceb17012839030aaf26f59c6e57e7b25fe5bef37aed18ad6b538e98df5a48a1507c081a92e15a3decb8e94ac84df4198bf8faf37cacf69aacdd1a2fa9eac069123c723c398f8a302bd7eca723a01fc020881c104f5b95b837c5febb093c9260e5e958628b594d58a3c638fe56eb5aec45a239d929b9f925dc2157dff94f6bf7788acb26bf4b7a9df9c56946ce9e440793ad3247870efbdb1ea3423dafeb20b5e79198893c87d301769885845ea0fbb87fcc69eefd4aed8bffcae649e867c563061c6b30d7b686b4391da9c57797b6f93f8304033cd3d396cef19243561bf096402f8178e85bf9c8dc043ac8bab3c2e7129fa2674b28e75f3dfa3395a6052037455d337d7aea1400185c1c6d8a4860d19508132d092fd4c6bf2481e79c4d783b3fcdc7c30635eeff1823b4d1df1017142776e95c5441b8a7abd308990a0e2c1a29e79268eae7e65123b1103d2b90f89323bd6325b132980b82bc2c0ddee1c72307b981d673aad32c37abbf34c5c54f3e2aef1d03724e4fe4a45e7cbdc30164f183c3affe92260889c39ab9206aee2ac89f34ec7082e088ae9f6cac3445b46f8e03087949583599d7e61e0cd7a7694469215e2bf7e7d57681e9fdd87cb29b314eeb32641c293d332fb1515c37a77d3cd297034342fd1213eb5a6b91a87fb3f645592f144e6e29bc35dd4258928f91e83155c45b4f378c83bcfe3a870afe205f69ea514b16f963e81075ba00c32ac24bbe1e6215b736792038838a899f87f3cdbc04e8ce05f6b244a03cc4b8f0b0d1265b2fc5f9dceebef42fc51adfc9786c93fca8d16ee2a76500d88476d8639dfdc653ff3b1edc970671f5f4ea4f7ef619f8447e3bbe8b5eb43d473178589b65c6932709c6acfbc48c583f7fc6439e8f0e669fba330aafe5cd8c3c9c8ea9450bb71bf0e97eb62baa88c0b567dec9620a2a573c04117126ff0d10b4868c14d0d465748f161f19c8a4ededd19de4d916133ac9295379c1b751352d194822fb2f680c8876f1240b8ed623621050083156871375b45d632a028e77af0db0c3b15f47c3ba8af28c769c5c6905dad82080077eaf46cfc2ee4d98d60b8df95483bfe5abf9d9df35543f4860e7eee7da5c04e92bf02552db8a92ed6dbc2e59552d4f01373eec0c4009eb0bd8ca491291ce070f0ba168668ab03de137e887d03400e39a7d3a53a69c4b38ba0b8fc43dd3b80b7f68be340bb033b998c7ac0789521158dac757eb8d4d9169c8bb337bfd6bb35ff5e8de01d2f4d089b330b28c7062349822afa6238d16a4905ff09e74380fa427b35338d244d77ce7a01390dae366781bf4f203bd7bf96837225897189370b29af3b19b897c4897f58c7378", &(0x7f0000001240)=""/124, 0x8, 0x0, 0xf4, 0xdf, &(0x7f00000012c0)="19707d3405a019d278c5e0be30cdfe0c39a0239eb4deac25aa09289b44b1db15e949d3ace217254f795df8f714b652bd936bd6ced1f641ebf9e4f72871c319672eeee6346d4d8c77f72dff7281dc48c4119a7069859416a0393794ac6768c2bd551ecc8fff80a888c5e6d6ceb42d83463c5457593594ff2755ea6196a0f4d3bd2be600746dbaa4850bbb0ae1bbdda43ef7e761321df39f3af8d37c3642b37c536dc6eaf011e7e48b13dcb1e0cd9413ef751c975f7affd3b7c124a310c60e393197eeac787125e2518b42fe108f42a3cb5f848638c4f177f9aee807c5b01a8cd180f5597fa78486ceceb6f7120eea483cb6b8f396", &(0x7f00000013c0)="4a0bc94dffb945c29242f593b919cbb799ebbffba9ad410233272420620192dcb560210aeb764cbde88af0ccce2775941404736c33c69ceee0275a70d2b9f3ccacdb8e2ecd5d894668ddac347abcbfc7ded0d2fb0b623aec6ce1efa5376a9b67d59af25c677e0a533ae91d29478ce8a467a86b8d1bbfdc1c20217f205b07af8e594c77461d926eb776d3b3f1b4c33a6fd747d6f2df46e7c396ac787ed77ffbb4f908caa1b6db94bcda933730c21a0cdb7a96fdbda726670558dd00b458ac3f413ab862dde81ebaa153f86027702ac3126586c833afb22e75c3e2d5cfe361f9", 0x0, 0x0, 0x3}, 0x50) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000001540)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001580)=0x28) r5 = signalfd4(r4, &(0x7f00000015c0)={[0xdee8]}, 0x8, 0x80000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000001600)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000018c0)={r6, 0x0, 0x3c, 0xd6, &(0x7f0000001640)="1ace83e2aa4fd0cf19d7b883100175caeb5988d55e23489095657290df5f0158fa8d20685e378317e8485e7cc96ad2863c5e7581df68e6058fffd338", &(0x7f0000001680)=""/214, 0x3, 0x0, 0x6e, 0xa2, &(0x7f0000001780)="db2f06dd5e23aad7836ddf9a7ab18d357d168cda0cbcdd25390d4f71d107d1cd9bf2066af52b03722cff08b7456f5bd4e42c4ae1a982c2aa042668bc3efe63a25f4ef28492adeb240c73ab26073c23922459ce7504a0b55631ac15b12aaa240fe9255a76aa90b4d955c807218e31", &(0x7f0000001800)="01dea850ba5c0529ea674fe75fd3a385eca0aae24a3d9e067e01d35c509859ef22e02778ca5c8567c4271e2df0a92301389403ef2a9f070f3921b592075d547de9edb2657ffbad9c09546fa17b844517ecafa60f451be84ff7c85dcc9372edf39b2e9e5ef04802786f78d4614d8579af1a108abef13864e5d027b1853277497fc0cda03cf5535f491d9106ac753b252b794884928c5273aa70cf0437931e18710f57", 0x2}, 0x50) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f0000001940)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000019c0)={&(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000001a00)={0x1, 0x9, 0xb, 0x0, 0x4000000000, 0x3, 0x3, 0x9, 0x3, 0xffffffffffffa42d, 0x5, 0x2}) ioctl$MEMSETBADBLOCK(r5, 0x40084d0c, &(0x7f0000001ac0)=0x200) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r8, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20048894}, 0x4000000) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000001c40)={0xc20, "ac8eb83dcd96a98e05d4a19af46b7c874f10a4384572394fa87c7166ab4a0a25", 0x3, 0x10, 0x0, 0xaf, 0x2, 0x2, 0xc, 0x7fffffff}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001cc0)=0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000001d00)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001d40)={"3eb9b80d911614769485cfffe5003783", r9, r10, {0x1ff, 0x4}, {0x8afb, 0xa}, 0x5, [0x800, 0xa6d, 0x8, 0x9, 0x8, 0x1, 0x100000000, 0x3, 0x9, 0x1, 0x7, 0x8000000000000000, 0xb0, 0xe, 0x80000000, 0x8dc]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001f40)={'ip_vti0\x00', &(0x7f0000001e40)={'ip_vti0\x00', r1, 0x1, 0x8, 0x80000000, 0x1, {{0x33, 0x4, 0x2, 0x4, 0xcc, 0x64, 0x0, 0x1, 0x29, 0x0, @empty, @local, {[@noop, @end, @timestamp_addr={0x44, 0x34, 0x43, 0x1, 0x3, [{@multicast1, 0x3}, {@rand_addr=0x64010101, 0x8}, {@local, 0x2}, {@private=0xa010100, 0x4487c9e7}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4}, {@multicast2, 0xf09}]}, @timestamp_prespec={0x44, 0x1c, 0xec, 0x3, 0x1, [{@remote, 0x45db9632}, {@loopback, 0x9}, {@local, 0x1ff}]}, @timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0x3, [{@private=0xa010100, 0x6}]}, @noop, @cipso={0x86, 0x45, 0x0, [{0x5, 0xe, "1c26a9c52b67222d5ddf6720"}, {0x5, 0x12, "46c7184b288a09485c36647ae187c487"}, {0x6, 0xb, "346fb513c618f46619"}, {0x5, 0xa, "fafd6764717ae090"}, {0x6, 0xa, "488471f237a40c33"}]}, @timestamp={0x44, 0x14, 0xb, 0x0, 0x3, [0x7e, 0x9, 0x2, 0x4]}]}}}}}) sendmsg$can_j1939(r5, &(0x7f0000002080)={&(0x7f0000001f80)={0x1d, r11, 0x2, {0x2, 0xf, 0x4}, 0x1}, 0x18, &(0x7f0000002040)={&(0x7f0000001fc0)="db6a796fe5098b2c914da437a82839b570623bc2497199e3d2a7b5475e05889cd6e788bef78db64e94774ebb093c2ea0fb78ee1676793c7fe094cc2e4f43d062636e06d7a5e98780aeb3e11c03599a3eca6442b271aef0feeadf3630f692265d63686d40acd6609bdf78d794b84a6a5017b73ae24d4e4e", 0x77}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000020c0)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002100)={@ifindex=r1, r4, 0xb, 0x2011, r12, @value=r5}, 0x20) accept$unix(r12, 0x0, &(0x7f0000002140)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000002180)={0x0, @adiantum, 0x0, @desc3}) openat$udambuf(0xffffffffffffff9c, &(0x7f00000021c0), 0x2) kernel console output (not intermixed with test programs): : hci2: Injecting HCI hardware error event [ 74.312095][ T66] Bluetooth: hci2: hardware error 0x00 [ 74.426203][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.431479][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.433690][ T5837] bond0 (unregistering): Released all slaves [ 74.436779][ T5837] bond1 (unregistering): Released all slaves [ 74.471703][ T5734] Bluetooth: hci4: command tx timeout [ 74.489333][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 74.489353][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 74.576691][ T43] audit: type=1400 audit(1789878109.642:541): avc: denied { write } for pid=6974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.579515][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.593179][ T6866] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.600882][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.600972][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.614131][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.614221][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.661050][ T43] audit: type=1400 audit(1789878109.732:542): avc: denied { write } for pid=6980 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.713374][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 74.735486][ T5837] hsr_slave_0: left promiscuous mode [ 74.736210][ T5837] hsr_slave_1: left promiscuous mode [ 74.742455][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.742484][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.745161][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.745176][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.765643][ T5837] veth1_macvtap: left promiscuous mode [ 74.765685][ T5837] veth0_macvtap: left promiscuous mode [ 74.765752][ T5837] veth1_vlan: left promiscuous mode [ 74.765808][ T5837] veth0_vlan: left promiscuous mode [ 74.786304][ T43] audit: type=1400 audit(1789878109.852:543): avc: denied { ioctl } for pid=6984 comm="syz.3.294" path="socket:[14159]" dev="sockfs" ino=14159 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.966756][ T5837] team0 (unregistering): Port device team_slave_1 removed [ 74.980131][ T5837] team0 (unregistering): Port device team_slave_0 removed [ 75.170264][ T43] audit: type=1400 audit(1789878110.242:544): avc: denied { read write } for pid=6996 comm="syz.3.296" name="uhid" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.170309][ T43] audit: type=1400 audit(1789878110.242:545): avc: denied { open } for pid=6996 comm="syz.3.296" path="/dev/uhid" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.196477][ T6991] mmap: syz.2.295 (6991) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.238398][ T6991] ata3.00: invalid multi_count 1 ignored [ 75.294346][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 75.343690][ T6991] jffs2: notice: (6991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 75.398888][ T6866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.400833][ T6997] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.401365][ T6997] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.552819][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 75.604776][ T6866] veth0_vlan: entered promiscuous mode [ 75.613124][ T6866] veth1_vlan: entered promiscuous mode [ 75.634705][ T6866] veth0_macvtap: entered promiscuous mode [ 75.638461][ T6866] veth1_macvtap: entered promiscuous mode [ 75.650914][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.654583][ T6866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.718913][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.719102][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.744828][ T6102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.744841][ T6102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.775052][ T6102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.775065][ T6102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.789520][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 75.799990][ T5779] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800318][ T5779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800459][ T5779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800478][ T5779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.904830][ T7049] veth1_macvtap: left promiscuous mode [ 75.904846][ T7049] macsec0: entered allmulticast mode [ 75.910369][ T7057] could not allocate digest TFM handle cryptd(blake2b-160) [ 75.957535][ T5808] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 76.000205][ T7070] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 76.037440][ T7070] bridge1: entered promiscuous mode [ 76.043084][ T7070] bond3: (slave bridge1): making interface the new active one [ 76.044134][ T7070] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 76.050475][ T7072] bridge2: entered promiscuous mode [ 76.057094][ T7072] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 76.068255][ T7070] bridge3: entered promiscuous mode [ 76.070965][ T7070] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 76.075080][ T7070] bridge4: entered promiscuous mode [ 76.079794][ T7070] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 76.086149][ T7070] bridge5: entered promiscuous mode [ 76.090807][ T7070] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 76.091143][ T5808] usb 8-1: device descriptor read/64, error -71 [ 76.095088][ T7070] bridge6: entered promiscuous mode [ 76.102994][ T7070] bond3: (slave bridge6): Enslaving as a backup interface with an up link [ 76.106898][ T7070] bridge7: entered promiscuous mode [ 76.115136][ T7070] bond3: (slave bridge7): Enslaving as a backup interface with an up link [ 76.128767][ T7070] bridge8: entered promiscuous mode [ 76.131281][ T7070] bond3: (slave bridge8): Enslaving as a backup interface with an up link [ 76.140419][ T7070] bridge9: entered promiscuous mode [ 76.152342][ T7070] bond3: (slave bridge9): Enslaving as a backup interface with an up link [ 76.163397][ T7070] bridge10: entered promiscuous mode [ 76.174123][ T7070] bond3: (slave bridge10): Enslaving as a backup interface with an up link [ 76.181524][ T7070] bridge11: entered promiscuous mode [ 76.183994][ T7070] bond3: (slave bridge11): Enslaving as a backup interface with an up link [ 76.191953][ T7070] bridge12: entered promiscuous mode [ 76.202063][ T7070] bond3: (slave bridge12): Enslaving as a backup interface with an up link [ 76.217805][ T7070] bridge13: entered promiscuous mode [ 76.220877][ T7070] bond3: (slave bridge13): Enslaving as a backup interface with an up link [ 76.232856][ T7070] bridge14: entered promiscuous mode [ 76.236444][ T7070] bond3: (slave bridge14): Enslaving as a backup interface with an up link [ 76.237458][ T5836] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 76.245706][ T7070] bridge15: entered promiscuous mode [ 76.250951][ T7070] bond3: (slave bridge15): Enslaving as a backup interface with an up link [ 76.258745][ T7070] bridge16: entered promiscuous mode [ 76.263534][ T7070] bond3: (slave bridge16): Enslaving as a backup interface with an up link [ 76.272967][ T7070] bridge17: entered promiscuous mode [ 76.277145][ T7070] bond3: (slave bridge17): Enslaving as a backup interface with an up link [ 76.284071][ T7070] bridge18: entered promiscuous mode [ 76.289894][ T7070] bond3: (slave bridge18): Enslaving as a backup interface with an up link [ 76.298003][ T7070] bridge19: entered promiscuous mode [ 76.300980][ T7070] bond3: (slave bridge19): Enslaving as a backup interface with an up link [ 76.310056][ T7070] bridge20: entered promiscuous mode [ 76.312612][ T7070] bond3: (slave bridge20): Enslaving as a backup interface with an up link [ 76.320335][ T7070] bridge21: entered promiscuous mode [ 76.324690][ T7070] bond3: (slave bridge21): Enslaving as a backup interface with an up link [ 76.328422][ T5808] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.334927][ T7070] bridge22: entered promiscuous mode [ 76.339913][ T7070] bond3: (slave bridge22): Enslaving as a backup interface with an up link [ 76.346354][ T7070] bridge23: entered promiscuous mode [ 76.352266][ T7070] bond3: (slave bridge23): Enslaving as a backup interface with an up link [ 76.361553][ T7070] bridge24: entered promiscuous mode [ 76.364236][ T7070] bond3: (slave bridge24): Enslaving as a backup interface with an up link [ 76.374849][ T7070] bridge25: entered promiscuous mode [ 76.379674][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.380458][ T7070] bond3: (slave bridge25): Enslaving as a backup interface with an up link [ 76.387771][ T66] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 76.388884][ T7070] bridge26: entered promiscuous mode [ 76.389365][ T5836] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 76.390425][ T5836] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.390462][ T5836] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 76.390483][ T5836] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 76.390514][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.418181][ T7070] bond3: (slave bridge26): Enslaving as a backup interface with an up link [ 76.433876][ T7070] bridge27: entered promiscuous mode [ 76.440153][ T7070] bond3: (slave bridge27): Enslaving as a backup interface with an up link [ 76.451957][ T7070] bridge28: entered promiscuous mode [ 76.458533][ T5808] usb 8-1: device descriptor read/64, error -71 [ 76.461428][ T7070] bond3: (slave bridge28): Enslaving as a backup interface with an up link [ 76.465241][ T7070] bridge29: entered promiscuous mode [ 76.467615][ T7070] bond3: (slave bridge29): Enslaving as a backup interface with an up link [ 76.476845][ T7070] bridge30: entered promiscuous mode [ 76.479647][ T7070] bond3: (slave bridge30): Enslaving as a backup interface with an up link [ 76.483417][ T7070] bridge31: entered promiscuous mode [ 76.484948][ T7070] bond3: (slave bridge31): Enslaving as a backup interface with an up link [ 76.494604][ T7070] bridge32: entered promiscuous mode [ 76.498353][ T7070] bond3: (slave bridge32): Enslaving as a backup interface with an up link [ 76.502509][ T7070] bridge33: entered promiscuous mode [ 76.504979][ T7070] bond3: (slave bridge33): Enslaving as a backup interface with an up link [ 76.515243][ T7070] bridge34: entered promiscuous mode [ 76.519565][ T7070] bond3: (slave bridge34): Enslaving as a backup interface with an up link [ 76.529621][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 76.534139][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.534162][ T25] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 76.539125][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.539138][ T25] usb 6-1: Product: syz [ 76.539145][ T25] usb 6-1: Manufacturer: syz [ 76.539152][ T25] usb 6-1: SerialNumber: syz [ 76.547452][ T66] Bluetooth: hci4: command tx timeout [ 76.567878][ T5808] usb usb8-port1: attempt power cycle [ 76.806212][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.806877][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.862602][ T6097] nvmet: Created discovery controller 2 for subsystem nqn.2014-08.org.nvmexpress.discovery for NQN nqn.2014-08.org.nvmexpress:uuid:77825de2-f945-4113-993c-eeebd391cc4e. [ 76.871232][ T7084] nvme nvme1: new ctrl: "nqn.2014-08.org.nvmexpress.discovery" [ 76.908363][ T5808] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.935393][ T5808] usb 8-1: device descriptor read/8, error -71 [ 76.950815][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.953134][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.953319][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.953474][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.953629][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.953788][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.953952][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.954152][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.954362][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.954607][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.954810][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.955009][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.955195][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.955501][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.955691][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.955873][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.956055][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.956272][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.956461][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.956774][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.956967][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.957160][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.972016][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.977764][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.978002][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.978193][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.978354][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.978501][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.978738][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.978890][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.979041][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.979200][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.979359][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.980447][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.980784][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.981147][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.981477][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.981798][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.982127][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.982440][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.982855][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.983191][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.983521][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.984194][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.984466][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.984887][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.985190][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.985547][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.985911][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.986264][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.986619][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.987004][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.987658][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.987929][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.988274][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.988577][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.988874][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.989193][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.989543][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.989891][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.990237][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.990590][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.990958][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.991340][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.991666][ T7092] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.131395][ T7097] FAT-fs (nullb0): bogus number of reserved sectors [ 77.131414][ T7097] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 77.168853][ T5808] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.189483][ T5808] usb 8-1: device descriptor read/8, error -71 [ 77.298059][ T5808] usb usb8-port1: unable to enumerate USB device [ 77.433220][ T25] usb 6-1: USB disconnect, device number 4 [ 77.539644][ T7103] tipc: Started in network mode [ 77.539661][ T7103] tipc: Node identity 2000004, cluster identity 4711 [ 77.539672][ T7103] tipc: Node number set to 33554436 [ 77.770093][ T7110] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.129244][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 78.194640][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 78.194661][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 78.255084][ T7128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 78.344177][ T7128] netlink: 'syz.1.317': attribute type 12 has an invalid length. [ 78.546771][ T7138] netlink: 11291 bytes leftover after parsing attributes in process `syz.2.320'. [ 78.629286][ T5836] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -104 [ 78.629300][ T5836] ATM dev 0: usbatm_atm_init: atm_start failed: -104! [ 78.631384][ T5836] cxacru 9-1:1.0: probe with driver cxacru failed with error -104 [ 79.030472][ T5880] usb 9-1: USB disconnect, device number 2 [ 79.095366][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 79.202381][ T7152] Could not find key with description: [syz] [ 79.202395][ T7152] process_request_key_err: No key [ 79.202430][ T7152] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 79.202441][ T7152] One or more global auth toks could not properly register; rc = [-2] [ 79.202468][ T7152] Error validating options; rc = [-2] [ 79.290513][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 79.402887][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 79.402903][ T43] audit: type=1400 audit(1789878114.472:571): avc: denied { name_bind } for pid=7159 comm="syz.2.327" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.480995][ T7163] tipc: Enabling of bearer rejected, failed to enable media [ 79.481628][ T7163] ip6tnl0: entered allmulticast mode [ 79.534238][ T43] audit: type=1400 audit(1789878114.602:572): avc: denied { map } for pid=7166 comm="syz.2.330" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.558294][ T7167] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 79.577455][ T7167] bond5: option mode: invalid value (8) [ 79.590323][ T7167] bond5 (unregistering): Released all slaves [ 79.617750][ T43] audit: type=1400 audit(1789878114.682:573): avc: denied { open } for pid=7172 comm="syz.1.332" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 79.620041][ T43] audit: type=1400 audit(1789878114.692:574): avc: denied { ioctl } for pid=7172 comm="syz.1.332" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 79.624145][ T43] audit: type=1400 audit(1789878114.692:575): avc: denied { create } for pid=7172 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.624708][ T43] audit: type=1400 audit(1789878114.692:576): avc: denied { write } for pid=7172 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 79.626330][ T7176] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 79.632819][ T7174] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 79.744486][ T43] audit: type=1400 audit(1789878114.812:577): avc: denied { ioctl } for pid=7190 comm="syz.1.334" path="socket:[15282]" dev="sockfs" ino=15282 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.766949][ T7183] veth1_macvtap: left promiscuous mode [ 79.766968][ T7183] macsec0: entered allmulticast mode [ 79.776197][ T7167] veth1_macvtap: entered promiscuous mode [ 79.776224][ T7167] veth1_macvtap: entered allmulticast mode [ 79.781458][ T7167] macsec0: left allmulticast mode [ 79.781475][ T7167] veth1_macvtap: left allmulticast mode [ 79.799496][ T7167] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 79.799510][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.330'. [ 79.800406][ T7167] dummy0: entered promiscuous mode [ 79.808907][ T43] audit: type=1400 audit(1789878114.872:578): avc: denied { getopt } for pid=7190 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.982245][ T43] audit: type=1400 audit(1789878115.052:579): avc: denied { setopt } for pid=7202 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.188539][ T7219] pimreg: entered allmulticast mode [ 80.190144][ T7218] pimreg: left allmulticast mode [ 80.302704][ T7221] netlink: 32 bytes leftover after parsing attributes in process `syz.4.343'. [ 80.441021][ T7231] only policy match revision 0 supported [ 80.441032][ T7231] unable to load match [ 80.455481][ T7235] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 80.456890][ T7235] syz_tun: entered promiscuous mode [ 80.477234][ T7235] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 80.527881][ T7243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7243 comm=syz.2.350 [ 80.582352][ T7247] netlink: 104 bytes leftover after parsing attributes in process `syz.3.352'. [ 80.713943][ T7267] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 80.747232][ T43] audit: type=1400 audit(1789878115.812:580): avc: denied { mounton } for pid=7272 comm="syz.3.359" path="/111/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 80.751306][ T7273] FAULT_INJECTION: forcing a failure. [ 80.751306][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 80.751338][ T7273] CPU: 1 UID: 0 PID: 7273 Comm: syz.3.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.751365][ T7273] Tainted: [L]=SOFTLOCKUP [ 80.751372][ T7273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.751383][ T7273] Call Trace: [ 80.751390][ T7273] [ 80.751398][ T7273] dump_stack_lvl+0x100/0x190 [ 80.751445][ T7273] should_fail_ex.cold+0x5/0xa [ 80.751474][ T7273] should_failslab+0xc2/0x120 [ 80.751506][ T7273] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.751552][ T7273] ? alloc_uid+0x13d/0x4c0 [ 80.751584][ T7273] alloc_uid+0x13d/0x4c0 [ 80.751608][ T7273] ? hook_cred_prepare+0x177/0x370 [ 80.751635][ T7273] ? __pfx_alloc_uid+0x10/0x10 [ 80.751661][ T7273] ? bpf_lsm_cred_prepare+0x9/0x10 [ 80.751688][ T7273] ? security_prepare_creds+0xa8/0x290 [ 80.751719][ T7273] __sys_setresuid+0x4f2/0x1280 [ 80.751746][ T7273] do_syscall_64+0x123/0x790 [ 80.751783][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.751803][ T7273] RIP: 0033:0x7fcb8b99e159 [ 80.751820][ T7273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.751839][ T7273] RSP: 002b:00007fcb89bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 80.751859][ T7273] RAX: ffffffffffffffda RBX: 00007fcb8bc25fa0 RCX: 00007fcb8b99e159 [ 80.751874][ T7273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 80.751887][ T7273] RBP: 00007fcb8ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 80.751900][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.751912][ T7273] R13: 00007fcb8bc26038 R14: 00007fcb8bc25fa0 R15: 00007ffcd18b54e8 [ 80.751941][ T7273] [ 80.775181][ T7267] bond3: (slave geneve2): making interface the new active one [ 80.778005][ T7267] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 80.912344][ T7279] debugfs: 'netdev:syzkaller0' already exists in 'phy8' [ 81.250590][ T7299] netlink: 'syz.1.365': attribute type 2 has an invalid length. [ 81.356460][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.356785][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.439138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.577606][ T2321] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 81.710071][ T2321] usb 8-1: device descriptor read/64, error -71 [ 81.957492][ T2321] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 82.087803][ T2321] usb 8-1: device descriptor read/64, error -71 [ 82.207915][ T2321] usb usb8-port1: attempt power cycle [ 82.547805][ T2321] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 82.568190][ T2321] usb 8-1: device descriptor read/8, error -71 [ 82.817709][ T2321] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 82.838410][ T2321] usb 8-1: device descriptor read/8, error -71 [ 82.888543][ T7352] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:21 [ 82.957770][ T2321] usb usb8-port1: unable to enumerate USB device [ 83.355339][ T7379] cgroup: fork rejected by pids controller in /syz2 [ 83.478419][ T5808] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 83.637388][ T5808] usb 9-1: Using ep0 maxpacket: 16 [ 83.637904][ T5808] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 83.638785][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.639627][ T5808] usb 9-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 83.639639][ T5808] usb 9-1: Manufacturer: syz [ 83.665071][ T5808] usb 9-1: config 0 descriptor?? [ 84.495331][ T7428] could not allocate digest TFM handle poly1305-simd [ 84.714473][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 84.714485][ T43] audit: type=1400 audit(1789878119.782:599): avc: denied { read } for pid=7434 comm="syz.3.385" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 84.749074][ T7437] CacheFiles: Failed to register: -95 [ 84.750677][ T43] audit: type=1400 audit(1789878119.822:600): avc: denied { ioctl } for pid=7434 comm="syz.3.385" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 84.769175][ T1479] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.917468][ T1479] usb 6-1: device descriptor read/64, error -71 [ 85.167800][ T1479] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 85.318977][ T1479] usb 6-1: device descriptor read/64, error -71 [ 85.428250][ T1479] usb usb6-port1: attempt power cycle [ 85.777701][ T1479] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.808472][ T1479] usb 6-1: device descriptor read/8, error -71 [ 85.824866][ T5808] usbhid 9-1:0.0: can't add hid device: -71 [ 85.824948][ T5808] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 85.828618][ T5808] usb 9-1: USB disconnect, device number 3 [ 85.905144][ T7447] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.970207][ T7447] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 86.057395][ T1479] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 86.074341][ T43] audit: type=1400 audit(1789878121.142:601): avc: denied { write } for pid=7448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.086614][ T1479] usb 6-1: device descriptor read/8, error -71 [ 86.124303][ T7454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7454 comm=syz.4.389 [ 86.187573][ T1479] usb usb6-port1: unable to enumerate USB device [ 86.288782][ T43] audit: type=1400 audit(1789878121.362:602): avc: denied { ioctl } for pid=7459 comm="syz.4.391" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 86.296609][ T43] audit: type=1400 audit(1789878121.362:603): avc: denied { write } for pid=7456 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.433592][ T7380] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 86.497013][ T7380] CPU: 3 UID: 0 PID: 7380 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.497034][ T7380] Tainted: [L]=SOFTLOCKUP [ 86.497038][ T7380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.497045][ T7380] Call Trace: [ 86.497049][ T7380] [ 86.497053][ T7380] dump_stack_lvl+0x100/0x190 [ 86.497075][ T7380] dump_header+0xfb/0x606 [ 86.497088][ T7380] oom_kill_process.cold+0xd/0x380 [ 86.497102][ T7380] out_of_memory+0x340/0x14f0 [ 86.497121][ T7380] ? __pfx_out_of_memory+0x10/0x10 [ 86.497140][ T7380] mem_cgroup_out_of_memory+0xc6/0x130 [ 86.497153][ T7380] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 86.497165][ T7380] ? find_held_lock+0x2b/0x80 [ 86.497183][ T7380] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.497198][ T7380] ? _raw_spin_unlock+0x28/0x50 [ 86.497214][ T7380] try_charge_memcg+0x783/0xf60 [ 86.497248][ T7380] ? __pfx_try_charge_memcg+0x10/0x10 [ 86.497263][ T7380] ? find_held_lock+0x2b/0x80 [ 86.497278][ T7380] ? rcu_read_unlock+0x17/0x60 [ 86.497295][ T7380] ? rcu_read_unlock+0x17/0x60 [ 86.497311][ T7380] ? find_held_lock+0x2b/0x80 [ 86.497326][ T7380] ? rcu_read_unlock+0x17/0x60 [ 86.497345][ T7380] charge_memcg+0x1ae/0x210 [ 86.497362][ T7380] __mem_cgroup_charge+0x2b/0x1c0 [ 86.497374][ T7380] shmem_alloc_and_add_folio+0x451/0xd40 [ 86.497395][ T7380] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 86.497412][ T7380] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 86.497429][ T7380] ? __lock_acquire+0x5c0/0x1f40 [ 86.497443][ T7380] shmem_get_folio_gfp+0x75b/0x1980 [ 86.497463][ T7380] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 86.497478][ T7380] ? inode_set_ctime_current+0x9c/0x850 [ 86.497494][ T7380] ? find_held_lock+0x2b/0x80 [ 86.497511][ T7380] ? timestamp_truncate+0x22e/0x2f0 [ 86.497528][ T7380] shmem_write_begin+0x1a4/0x420 [ 86.497545][ T7380] ? __pfx_shmem_write_begin+0x10/0x10 [ 86.497562][ T7380] ? inode_set_ctime_current+0x283/0x850 [ 86.497577][ T7380] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 86.497595][ T7380] ? inode_maybe_inc_iversion+0x169/0x220 [ 86.497610][ T7380] generic_perform_write+0x292/0xa40 [ 86.497624][ T7380] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.497639][ T7380] ? __pfx_generic_perform_write+0x10/0x10 [ 86.497659][ T7380] ? mnt_put_write_access_file+0x4e/0x100 [ 86.497673][ T7380] ? file_update_time_flags+0x38c/0x520 [ 86.497692][ T7380] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.497703][ T7380] shmem_file_write_iter+0x10e/0x140 [ 86.497715][ T7380] __kernel_write_iter+0x2ac/0x930 [ 86.497728][ T7380] ? __pfx___kernel_write_iter+0x10/0x10 [ 86.497739][ T7380] ? __up_read+0x333/0x980 [ 86.497757][ T7380] ? dump_user_range+0x65e/0xad0 [ 86.497769][ T7380] ? copy_mc_enhanced_fast_string+0x6/0xf [ 86.497785][ T7380] dump_user_range+0x3f9/0xad0 [ 86.497800][ T7380] ? __pfx_dump_user_range+0x10/0x10 [ 86.497816][ T7380] ? __pfx_writenote+0x10/0x10 [ 86.497828][ T7380] ? elf_core_dump+0x1f25/0x3d20 [ 86.497843][ T7380] elf_core_dump+0x2d68/0x3d20 [ 86.497863][ T7380] ? __pfx_elf_core_dump+0x10/0x10 [ 86.497874][ T7380] ? kasan_save_stack+0x3f/0x50 [ 86.497886][ T7380] ? kasan_save_stack+0x30/0x50 [ 86.497898][ T7380] ? kasan_save_track+0x14/0x30 [ 86.497910][ T7380] ? __kasan_kmalloc+0xaa/0xb0 [ 86.497921][ T7380] ? vfs_coredump+0x21f6/0x54a0 [ 86.497931][ T7380] ? get_signal+0x1f2a/0x21e0 [ 86.497943][ T7380] ? arch_do_signal_or_restart+0x91/0x7e0 [ 86.497963][ T7380] ? 0xffffffffff600000 [ 86.497989][ T7380] ? lock_acquire+0x1d1/0x380 [ 86.498000][ T7380] ? get_signal+0x1f2a/0x21e0 [ 86.498016][ T7380] ? vfs_coredump+0x281a/0x54a0 [ 86.498027][ T7380] vfs_coredump+0x281a/0x54a0 [ 86.498043][ T7380] ? __pfx_vfs_coredump+0x10/0x10 [ 86.498055][ T7380] ? __lock_acquire+0x5c0/0x1f40 [ 86.498070][ T7380] ? __lock_acquire+0x5c0/0x1f40 [ 86.498083][ T7380] ? lock_acquire+0x1d1/0x380 [ 86.498094][ T7380] ? unwind_next_frame+0xbd/0x2090 [ 86.498112][ T7380] ? lock_acquire+0x1d1/0x380 [ 86.498127][ T7380] ? bpf_ksym_find+0x128/0x1c0 [ 86.498144][ T7380] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 86.498159][ T7380] ? arch_stack_walk+0xa6/0xf0 [ 86.498178][ T7380] ? __sigqueue_free+0xbe/0x2a0 [ 86.498193][ T7380] ? stack_trace_save+0x8e/0xc0 [ 86.498203][ T7380] ? __pfx_stack_trace_save+0x10/0x10 [ 86.498214][ T7380] ? stack_depot_save_flags+0x27/0x9f0 [ 86.498229][ T7380] ? __lock_acquire+0x5c0/0x1f40 [ 86.498264][ T7380] ? proc_coredump_connector+0x2d3/0x4f0 [ 86.498283][ T7380] ? __pfx_proc_coredump_connector+0x10/0x10 [ 86.498303][ T7380] ? rcu_is_watching+0x13/0xc0 [ 86.498321][ T7380] get_signal+0x1f2a/0x21e0 [ 86.498338][ T7380] ? __pfx_get_signal+0x10/0x10 [ 86.498350][ T7380] ? __pfx_force_sig_fault+0x10/0x10 [ 86.498365][ T7380] arch_do_signal_or_restart+0x91/0x7e0 [ 86.498382][ T7380] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 86.498407][ T7380] irqentry_exit+0x402/0xa10 [ 86.498425][ T7380] asm_exc_page_fault+0x26/0x30 [ 86.498436][ T7380] RIP: 0033:0x7ffa4199e159 [ 86.498448][ T7380] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 86.498453][ T7380] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 86.498463][ T7380] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 86.498470][ T7380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.498476][ T7380] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 86.498482][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.498489][ T7380] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 86.498504][ T7380] [ 86.506501][ T7380] memory: usage 307200kB, limit 307200kB, failcnt 24063 [ 86.506513][ T7380] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 86.506520][ T7380] kmem: usage 8456kB, limit 9007199254740988kB, failcnt 0 [ 86.506526][ T7380] Memory cgroup stats for /syz2: [ 86.506616][ T7380] cache 305795072 [ 86.506622][ T7380] rss 118784 [ 86.506626][ T7380] rss_huge 0 [ 86.506629][ T7380] shmem 305635328 [ 86.506633][ T7380] mapped_file 0 [ 86.506637][ T7380] dirty 0 [ 86.506640][ T7380] writeback 0 [ 86.506644][ T7380] workingset_refault_anon 41 [ 86.506652][ T7380] workingset_refault_file 39 [ 86.506657][ T7380] swap 127995904 [ 86.506660][ T7380] swapcached 136507392 [ 86.506664][ T7380] pgpgin 128021 [ 86.506668][ T7380] pgpgout 55890 [ 86.506672][ T7380] pgfault 36715 [ 86.506676][ T7380] pgmajfault 19 [ 86.506679][ T7380] inactive_anon 148267008 [ 86.506683][ T7380] active_anon 157487104 [ 86.506687][ T7380] inactive_file 12288 [ 86.506691][ T7380] active_file 57344 [ 86.506695][ T7380] unevictable 0 [ 86.506699][ T7380] hierarchical_memory_limit 314572800 [ 86.506704][ T7380] hierarchical_memsw_limit 9223372036854771712 [ 86.506708][ T7380] total_cache 305795072 [ 86.506712][ T7380] total_rss 118784 [ 86.506716][ T7380] total_rss_huge 0 [ 86.506720][ T7380] total_shmem 305635328 [ 86.506724][ T7380] total_mapped_file 0 [ 86.506728][ T7380] total_dirty 0 [ 86.506731][ T7380] total_writeback 0 [ 86.506735][ T7380] total_workingset_refault_anon 41 [ 86.506740][ T7380] total_workingset_refault_file 39 [ 86.506744][ T7380] total_swap 127995904 [ 86.506748][ T7380] total_swapcached 136507392 [ 86.506752][ T7380] total_pgpgin 128021 [ 86.506756][ T7380] total_pgpgout 55890 [ 86.506760][ T7380] total_pgfault 36715 [ 86.506764][ T7380] total_pgmajfault 19 [ 86.506768][ T7380] total_inactive_anon 148267008 [ 86.506772][ T7380] total_active_anon 157487104 [ 86.506776][ T7380] total_inactive_file 12288 [ 86.506780][ T7380] total_active_file 57344 [ 86.506784][ T7380] total_unevictable 0 [ 86.506788][ T7380] anon_cost 0 [ 86.506792][ T7380] file_cost 0 [ 86.506796][ T7380] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7400,uid=0 [ 86.506963][ T7380] Memory cgroup out of memory: Killed process 7400 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:36864kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 86.623773][ T43] audit: type=1400 audit(1789878121.692:604): avc: denied { write } for pid=7473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.735920][ T43] audit: type=1400 audit(1789878121.802:605): avc: denied { write } for pid=7478 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.132760][ T1479] wiimote 0005:057E:0330.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 87.136019][ T1479] wiimote 0005:057E:0330.0002: New device registered [ 87.297303][ T43] audit: type=1400 audit(1789878122.362:606): avc: denied { bpf } for pid=7496 comm="syz.1.398" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.300019][ T7484] wiimote 0005:057E:0330.0002: Device removed [ 87.335322][ T7492] fido_id[7492]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.336541][ T43] audit: type=1400 audit(1789878122.402:607): avc: denied { write } for pid=7493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.420864][ T43] audit: type=1400 audit(1789878122.492:608): avc: denied { perfmon } for pid=7500 comm="syz.1.399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.451170][ T7501] devpts: Bad value for 'max' [ 87.454905][ T7501] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 87.454925][ T7501] Error validating options; rc = [-22] [ 87.492596][ T7503] __nla_validate_parse: 90 callbacks suppressed [ 87.492616][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 87.973955][ T7398] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 87.973989][ T7398] CPU: 1 UID: 0 PID: 7398 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.974015][ T7398] Tainted: [L]=SOFTLOCKUP [ 87.974022][ T7398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.974033][ T7398] Call Trace: [ 87.974040][ T7398] [ 87.974048][ T7398] dump_stack_lvl+0x100/0x190 [ 87.974080][ T7398] dump_header+0xfb/0x606 [ 87.974118][ T7398] oom_kill_process.cold+0xd/0x380 [ 87.974144][ T7398] out_of_memory+0x340/0x14f0 [ 87.974193][ T7398] ? __pfx_out_of_memory+0x10/0x10 [ 87.974226][ T7398] mem_cgroup_out_of_memory+0xc6/0x130 [ 87.974248][ T7398] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 87.974267][ T7398] ? find_held_lock+0x2b/0x80 [ 87.974298][ T7398] ? do_raw_spin_unlock+0x145/0x1e0 [ 87.974322][ T7398] ? _raw_spin_unlock+0x28/0x50 [ 87.974348][ T7398] try_charge_memcg+0x783/0xf60 [ 87.974380][ T7398] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.974404][ T7398] ? find_held_lock+0x2b/0x80 [ 87.974427][ T7398] ? rcu_read_unlock+0x17/0x60 [ 87.974453][ T7398] ? rcu_read_unlock+0x17/0x60 [ 87.974479][ T7398] ? find_held_lock+0x2b/0x80 [ 87.974504][ T7398] ? rcu_read_unlock+0x17/0x60 [ 87.974536][ T7398] charge_memcg+0x1ae/0x210 [ 87.974563][ T7398] __mem_cgroup_charge+0x2b/0x1c0 [ 87.974583][ T7398] shmem_alloc_and_add_folio+0x451/0xd40 [ 87.974617][ T7398] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 87.974646][ T7398] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 87.974679][ T7398] shmem_get_folio_gfp+0x75b/0x1980 [ 87.974712][ T7398] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 87.974740][ T7398] ? vm_normal_page+0x1d1/0x380 [ 87.974761][ T7398] ? __pfx_vm_normal_page+0x10/0x10 [ 87.974786][ T7398] shmem_write_begin+0x1a4/0x420 [ 87.974817][ T7398] ? __pfx_shmem_write_begin+0x10/0x10 [ 87.974845][ T7398] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 87.974879][ T7398] generic_perform_write+0x292/0xa40 [ 87.974902][ T7398] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.974928][ T7398] ? __pfx_generic_perform_write+0x10/0x10 [ 87.974954][ T7398] ? file_update_time_flags+0x38c/0x520 [ 87.974986][ T7398] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 87.975004][ T7398] shmem_file_write_iter+0x10e/0x140 [ 87.975026][ T7398] __kernel_write_iter+0x2ac/0x930 [ 87.975048][ T7398] ? __pfx___kernel_write_iter+0x10/0x10 [ 87.975067][ T7398] ? __up_read+0x333/0x980 [ 87.975092][ T7398] ? dump_user_range+0x65e/0xad0 [ 87.975111][ T7398] ? copy_mc_enhanced_fast_string+0x6/0xf [ 87.975138][ T7398] dump_user_range+0x3f9/0xad0 [ 87.975163][ T7398] ? __pfx_dump_user_range+0x10/0x10 [ 87.975195][ T7398] ? __pfx_writenote+0x10/0x10 [ 87.975218][ T7398] ? elf_core_dump+0x1f25/0x3d20 [ 87.975244][ T7398] elf_core_dump+0x2d68/0x3d20 [ 87.975280][ T7398] ? __pfx_elf_core_dump+0x10/0x10 [ 87.975299][ T7398] ? kasan_save_stack+0x3f/0x50 [ 87.975319][ T7398] ? kasan_save_stack+0x30/0x50 [ 87.975338][ T7398] ? kasan_save_track+0x14/0x30 [ 87.975356][ T7398] ? __kasan_kmalloc+0xaa/0xb0 [ 87.975376][ T7398] ? vfs_coredump+0x21f6/0x54a0 [ 87.975392][ T7398] ? get_signal+0x1f2a/0x21e0 [ 87.975411][ T7398] ? arch_do_signal_or_restart+0x91/0x7e0 [ 87.975445][ T7398] ? 0xffffffffff600000 [ 87.975493][ T7398] ? lock_acquire+0x1d1/0x380 [ 87.975511][ T7398] ? get_signal+0x1f2a/0x21e0 [ 87.975540][ T7398] ? vfs_coredump+0x281a/0x54a0 [ 87.975557][ T7398] vfs_coredump+0x281a/0x54a0 [ 87.975585][ T7398] ? __pfx_vfs_coredump+0x10/0x10 [ 87.975605][ T7398] ? __lock_acquire+0x5c0/0x1f40 [ 87.975630][ T7398] ? __lock_acquire+0x5c0/0x1f40 [ 87.975652][ T7398] ? lock_acquire+0x1d1/0x380 [ 87.975670][ T7398] ? unwind_next_frame+0xbd/0x2090 [ 87.975700][ T7398] ? lock_acquire+0x1d1/0x380 [ 87.975725][ T7398] ? bpf_ksym_find+0x128/0x1c0 [ 87.975753][ T7398] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 87.975779][ T7398] ? arch_stack_walk+0xa6/0xf0 [ 87.975806][ T7398] ? __sigqueue_free+0xbe/0x2a0 [ 87.975829][ T7398] ? stack_trace_save+0x8e/0xc0 [ 87.975845][ T7398] ? __pfx_stack_trace_save+0x10/0x10 [ 87.975864][ T7398] ? stack_depot_save_flags+0x27/0x9f0 [ 87.975887][ T7398] ? __lock_acquire+0x5c0/0x1f40 [ 87.975947][ T7398] ? proc_coredump_connector+0x2d3/0x4f0 [ 87.975975][ T7398] ? __pfx_proc_coredump_connector+0x10/0x10 [ 87.976008][ T7398] ? rcu_is_watching+0x13/0xc0 [ 87.976036][ T7398] get_signal+0x1f2a/0x21e0 [ 87.976090][ T7398] ? __pfx_get_signal+0x10/0x10 [ 87.976110][ T7398] ? __pfx_force_sig_fault+0x10/0x10 [ 87.976134][ T7398] arch_do_signal_or_restart+0x91/0x7e0 [ 87.976162][ T7398] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 87.976206][ T7398] irqentry_exit+0x402/0xa10 [ 87.976236][ T7398] asm_exc_page_fault+0x26/0x30 [ 87.976255][ T7398] RIP: 0033:0x7ffa4199e159 [ 87.976274][ T7398] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 87.976283][ T7398] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 87.976298][ T7398] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 87.976309][ T7398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.976319][ T7398] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 87.976330][ T7398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.976340][ T7398] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 87.976367][ T7398] [ 88.113798][ T7398] memory: usage 304724kB, limit 307200kB, failcnt 27338 [ 88.113817][ T7398] memory+swap: usage 425772kB, limit 9007199254740988kB, failcnt 0 [ 88.113829][ T7398] kmem: usage 8464kB, limit 9007199254740988kB, failcnt 0 [ 88.113840][ T7398] Memory cgroup stats for /syz2: [ 88.113972][ T7398] cache 303169536 [ 88.113980][ T7398] rss 118784 [ 88.113986][ T7398] rss_huge 0 [ 88.113992][ T7398] shmem 303165440 [ 88.113999][ T7398] mapped_file 0 [ 88.114005][ T7398] dirty 0 [ 88.114011][ T7398] writeback 0 [ 88.114017][ T7398] workingset_refault_anon 41 [ 88.114024][ T7398] workingset_refault_file 39 [ 88.114030][ T7398] swap 123953152 [ 88.114037][ T7398] swapcached 136720384 [ 88.114043][ T7398] pgpgin 129377 [ 88.114049][ T7398] pgpgout 57886 [ 88.114055][ T7398] pgfault 36801 [ 88.114061][ T7398] pgmajfault 19 [ 88.114067][ T7398] inactive_anon 178425856 [ 88.114074][ T7398] active_anon 124821504 [ 88.114079][ T7398] inactive_file 0 [ 88.114087][ T7398] active_file 4096 [ 88.114093][ T7398] unevictable 0 [ 88.114100][ T7398] hierarchical_memory_limit 314572800 [ 88.114107][ T7398] hierarchical_memsw_limit 9223372036854771712 [ 88.114114][ T7398] total_cache 303169536 [ 88.114121][ T7398] total_rss 118784 [ 88.114127][ T7398] total_rss_huge 0 [ 88.114133][ T7398] total_shmem 303165440 [ 88.114140][ T7398] total_mapped_file 0 [ 88.114146][ T7398] total_dirty 0 [ 88.114152][ T7398] total_writeback 0 [ 88.114158][ T7398] total_workingset_refault_anon 41 [ 88.114166][ T7398] total_workingset_refault_file 39 [ 88.114173][ T7398] total_swap 123953152 [ 88.114179][ T7398] total_swapcached 136720384 [ 88.114186][ T7398] total_pgpgin 129377 [ 88.114193][ T7398] total_pgpgout 57886 [ 88.114199][ T7398] total_pgfault 36801 [ 88.114205][ T7398] total_pgmajfault 19 [ 88.114211][ T7398] total_inactive_anon 178425856 [ 88.114218][ T7398] total_active_anon 124821504 [ 88.114225][ T7398] total_inactive_file 0 [ 88.114232][ T7398] total_active_file 4096 [ 88.114238][ T7398] total_unevictable 0 [ 88.114245][ T7398] anon_cost 0 [ 88.114251][ T7398] file_cost 0 [ 88.114258][ T7398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7383,uid=0 [ 88.115692][ T7398] Memory cgroup out of memory: Killed process 7383 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:36864kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 88.316123][ T30] wiimote 0005:057E:0330.0002: detected device: Nintendo Wii Remote Plus (Gen 2) [ 88.359712][ T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input11 [ 88.378462][ T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input12 [ 88.392851][ T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0002/input/input10 [ 88.513236][ T7516] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 88.732783][ T7400] syz.2.380 (7400) used greatest stack depth: 19064 bytes left [ 88.828116][ T7514] syzkaller0: entered promiscuous mode [ 88.828140][ T7514] syzkaller0: entered allmulticast mode [ 89.049418][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.406'. [ 89.364458][ T7382] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.364492][ T7382] CPU: 3 UID: 0 PID: 7382 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.364516][ T7382] Tainted: [L]=SOFTLOCKUP [ 89.364523][ T7382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.364534][ T7382] Call Trace: [ 89.364540][ T7382] [ 89.364549][ T7382] dump_stack_lvl+0x100/0x190 [ 89.364580][ T7382] dump_header+0xfb/0x606 [ 89.364603][ T7382] oom_kill_process.cold+0xd/0x380 [ 89.364626][ T7382] out_of_memory+0x340/0x14f0 [ 89.364662][ T7382] ? __pfx_out_of_memory+0x10/0x10 [ 89.364694][ T7382] mem_cgroup_out_of_memory+0xc6/0x130 [ 89.364715][ T7382] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 89.364735][ T7382] ? find_held_lock+0x2b/0x80 [ 89.364765][ T7382] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.364789][ T7382] ? _raw_spin_unlock+0x28/0x50 [ 89.364815][ T7382] try_charge_memcg+0x783/0xf60 [ 89.364849][ T7382] ? __pfx_try_charge_memcg+0x10/0x10 [ 89.364875][ T7382] ? find_held_lock+0x2b/0x80 [ 89.364898][ T7382] ? rcu_read_unlock+0x17/0x60 [ 89.364924][ T7382] ? rcu_read_unlock+0x17/0x60 [ 89.364949][ T7382] ? find_held_lock+0x2b/0x80 [ 89.364972][ T7382] ? rcu_read_unlock+0x17/0x60 [ 89.365003][ T7382] charge_memcg+0x1ae/0x210 [ 89.365030][ T7382] __mem_cgroup_charge+0x2b/0x1c0 [ 89.365049][ T7382] shmem_alloc_and_add_folio+0x451/0xd40 [ 89.365083][ T7382] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 89.365112][ T7382] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 89.365140][ T7382] ? __lock_acquire+0x5c0/0x1f40 [ 89.365163][ T7382] shmem_get_folio_gfp+0x75b/0x1980 [ 89.365197][ T7382] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 89.365222][ T7382] ? inode_set_ctime_current+0x9c/0x850 [ 89.365248][ T7382] ? find_held_lock+0x2b/0x80 [ 89.365276][ T7382] ? timestamp_truncate+0x22e/0x2f0 [ 89.365305][ T7382] shmem_write_begin+0x1a4/0x420 [ 89.365334][ T7382] ? __pfx_shmem_write_begin+0x10/0x10 [ 89.365361][ T7382] ? inode_set_ctime_current+0x283/0x850 [ 89.365386][ T7382] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 89.365415][ T7382] ? inode_maybe_inc_iversion+0x169/0x220 [ 89.365440][ T7382] generic_perform_write+0x292/0xa40 [ 89.365462][ T7382] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.365487][ T7382] ? __pfx_generic_perform_write+0x10/0x10 [ 89.365511][ T7382] ? mnt_put_write_access_file+0x4e/0x100 [ 89.365552][ T7382] ? file_update_time_flags+0x38c/0x520 [ 89.365584][ T7382] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.365602][ T7382] shmem_file_write_iter+0x10e/0x140 [ 89.365623][ T7382] __kernel_write_iter+0x2ac/0x930 [ 89.365649][ T7382] ? __pfx___kernel_write_iter+0x10/0x10 [ 89.365669][ T7382] ? __up_read+0x333/0x980 [ 89.365693][ T7382] ? dump_user_range+0x65e/0xad0 [ 89.365712][ T7382] ? copy_mc_enhanced_fast_string+0x6/0xf [ 89.365739][ T7382] dump_user_range+0x3f9/0xad0 [ 89.365763][ T7382] ? __pfx_dump_user_range+0x10/0x10 [ 89.365792][ T7382] ? __pfx_writenote+0x10/0x10 [ 89.365812][ T7382] ? elf_core_dump+0x1f25/0x3d20 [ 89.365836][ T7382] elf_core_dump+0x2d68/0x3d20 [ 89.365871][ T7382] ? __pfx_elf_core_dump+0x10/0x10 [ 89.365890][ T7382] ? kasan_save_stack+0x3f/0x50 [ 89.365910][ T7382] ? kasan_save_stack+0x30/0x50 [ 89.365929][ T7382] ? kasan_save_track+0x14/0x30 [ 89.365948][ T7382] ? __kasan_kmalloc+0xaa/0xb0 [ 89.365967][ T7382] ? vfs_coredump+0x21f6/0x54a0 [ 89.365984][ T7382] ? get_signal+0x1f2a/0x21e0 [ 89.366002][ T7382] ? arch_do_signal_or_restart+0x91/0x7e0 [ 89.366032][ T7382] ? 0xffffffffff600000 [ 89.366077][ T7382] ? lock_acquire+0x1d1/0x380 [ 89.366095][ T7382] ? get_signal+0x1f2a/0x21e0 [ 89.366123][ T7382] ? vfs_coredump+0x281a/0x54a0 [ 89.366139][ T7382] vfs_coredump+0x281a/0x54a0 [ 89.366167][ T7382] ? __pfx_vfs_coredump+0x10/0x10 [ 89.366185][ T7382] ? __lock_acquire+0x5c0/0x1f40 [ 89.366210][ T7382] ? __lock_acquire+0x5c0/0x1f40 [ 89.366231][ T7382] ? lock_acquire+0x1d1/0x380 [ 89.366249][ T7382] ? unwind_next_frame+0xbd/0x2090 [ 89.366277][ T7382] ? lock_acquire+0x1d1/0x380 [ 89.366299][ T7382] ? bpf_ksym_find+0x128/0x1c0 [ 89.366325][ T7382] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.366349][ T7382] ? arch_stack_walk+0xa6/0xf0 [ 89.366383][ T7382] ? __sigqueue_free+0xbe/0x2a0 [ 89.366407][ T7382] ? stack_trace_save+0x8e/0xc0 [ 89.366423][ T7382] ? __pfx_stack_trace_save+0x10/0x10 [ 89.366441][ T7382] ? stack_depot_save_flags+0x27/0x9f0 [ 89.366465][ T7382] ? __lock_acquire+0x5c0/0x1f40 [ 89.366530][ T7382] ? proc_coredump_connector+0x2d3/0x4f0 [ 89.366559][ T7382] ? __pfx_proc_coredump_connector+0x10/0x10 [ 89.366592][ T7382] ? rcu_is_watching+0x13/0xc0 [ 89.366620][ T7382] get_signal+0x1f2a/0x21e0 [ 89.366654][ T7382] ? __pfx_get_signal+0x10/0x10 [ 89.366673][ T7382] ? __pfx_force_sig_fault+0x10/0x10 [ 89.366696][ T7382] arch_do_signal_or_restart+0x91/0x7e0 [ 89.366721][ T7382] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.366758][ T7382] irqentry_exit+0x402/0xa10 [ 89.366788][ T7382] asm_exc_page_fault+0x26/0x30 [ 89.366805][ T7382] RIP: 0033:0x7ffa4199e159 [ 89.366825][ T7382] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 89.366833][ T7382] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 89.366848][ T7382] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 89.366859][ T7382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.366868][ T7382] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.366879][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.366889][ T7382] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 89.366915][ T7382] [ 89.366973][ T7382] memory: usage 307200kB, limit 307200kB, failcnt 32246 [ 89.366986][ T7382] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 89.366997][ T7382] kmem: usage 8028kB, limit 9007199254740988kB, failcnt 0 [ 89.367008][ T7382] Memory cgroup stats for /syz2: [ 89.367130][ T7382] cache 306274304 [ 89.367137][ T7382] rss 45056 [ 89.367143][ T7382] rss_huge 0 [ 89.367149][ T7382] shmem 306270208 [ 89.367154][ T7382] mapped_file 4096 [ 89.367160][ T7382] dirty 0 [ 89.367165][ T7382] writeback 0 [ 89.367171][ T7382] workingset_refault_anon 53 [ 89.367177][ T7382] workingset_refault_file 41 [ 89.367183][ T7382] swap 127963136 [ 89.367188][ T7382] swapcached 164843520 [ 89.367194][ T7382] pgpgin 146652 [ 89.367199][ T7382] pgpgout 74414 [ 89.367205][ T7382] pgfault 37894 [ 89.367210][ T7382] pgmajfault 29 [ 89.367216][ T7382] inactive_anon 196857856 [ 89.367223][ T7382] active_anon 109391872 [ 89.367230][ T7382] inactive_file 0 [ 89.367236][ T7382] active_file 0 [ 89.367242][ T7382] unevictable 0 [ 89.367249][ T7382] hierarchical_memory_limit 314572800 [ 89.367256][ T7382] hierarchical_memsw_limit 9223372036854771712 [ 89.367264][ T7382] total_cache 306274304 [ 89.367270][ T7382] total_rss 45056 [ 89.367277][ T7382] total_rss_huge 0 [ 89.367284][ T7382] total_shmem 306270208 [ 89.367291][ T7382] total_mapped_file 4096 [ 89.367297][ T7382] total_dirty 0 [ 89.367303][ T7382] total_writeback 0 [ 89.367310][ T7382] total_workingset_refault_anon 53 [ 89.369809][ T7382] total_workingset_refault_file 41 [ 89.369818][ T7382] total_swap 127963136 [ 89.369824][ T7382] total_swapcached 164843520 [ 89.369829][ T7382] total_pgpgin 146652 [ 89.369834][ T7382] total_pgpgout 74414 [ 89.369839][ T7382] total_pgfault 37894 [ 89.369844][ T7382] total_pgmajfault 29 [ 89.369849][ T7382] total_inactive_anon 196857856 [ 89.369855][ T7382] total_active_anon 109391872 [ 89.369860][ T7382] total_inactive_file 0 [ 89.369865][ T7382] total_active_file 0 [ 89.369870][ T7382] total_unevictable 0 [ 89.369875][ T7382] anon_cost 0 [ 89.369880][ T7382] file_cost 0 [ 89.369885][ T7382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7398,uid=0 [ 89.369959][ T7382] Memory cgroup out of memory: Killed process 7398 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 89.551212][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 89.667694][ T7399] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.667718][ T7399] CPU: 3 UID: 0 PID: 7399 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.667733][ T7399] Tainted: [L]=SOFTLOCKUP [ 89.667737][ T7399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.667744][ T7399] Call Trace: [ 89.667752][ T7399] [ 89.667757][ T7399] dump_stack_lvl+0x100/0x190 [ 89.667777][ T7399] dump_header+0xfb/0x606 [ 89.667791][ T7399] oom_kill_process.cold+0xd/0x380 [ 89.667804][ T7399] out_of_memory+0x340/0x14f0 [ 89.667822][ T7399] ? __pfx_out_of_memory+0x10/0x10 [ 89.667841][ T7399] mem_cgroup_out_of_memory+0xc6/0x130 [ 89.667854][ T7399] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 89.667866][ T7399] ? find_held_lock+0x2b/0x80 [ 89.667884][ T7399] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.667899][ T7399] ? _raw_spin_unlock+0x28/0x50 [ 89.667915][ T7399] try_charge_memcg+0x783/0xf60 [ 89.667935][ T7399] ? __pfx_try_charge_memcg+0x10/0x10 [ 89.667950][ T7399] ? find_held_lock+0x2b/0x80 [ 89.667965][ T7399] ? rcu_read_unlock+0x17/0x60 [ 89.667981][ T7399] ? rcu_read_unlock+0x17/0x60 [ 89.667997][ T7399] ? find_held_lock+0x2b/0x80 [ 89.668013][ T7399] ? rcu_read_unlock+0x17/0x60 [ 89.668031][ T7399] charge_memcg+0x1ae/0x210 [ 89.668068][ T7399] __mem_cgroup_charge+0x2b/0x1c0 [ 89.668080][ T7399] shmem_alloc_and_add_folio+0x451/0xd40 [ 89.668100][ T7399] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 89.668118][ T7399] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 89.668138][ T7399] shmem_get_folio_gfp+0x75b/0x1980 [ 89.668158][ T7399] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 89.668175][ T7399] ? vm_normal_page+0x1d1/0x380 [ 89.668188][ T7399] ? __pfx_vm_normal_page+0x10/0x10 [ 89.668203][ T7399] shmem_write_begin+0x1a4/0x420 [ 89.668221][ T7399] ? __pfx_shmem_write_begin+0x10/0x10 [ 89.668238][ T7399] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 89.668259][ T7399] generic_perform_write+0x292/0xa40 [ 89.668273][ T7399] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.668288][ T7399] ? __pfx_generic_perform_write+0x10/0x10 [ 89.668303][ T7399] ? file_update_time_flags+0x38c/0x520 [ 89.668322][ T7399] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.668334][ T7399] shmem_file_write_iter+0x10e/0x140 [ 89.668346][ T7399] __kernel_write_iter+0x2ac/0x930 [ 89.668359][ T7399] ? __pfx___kernel_write_iter+0x10/0x10 [ 89.668371][ T7399] ? __up_read+0x333/0x980 [ 89.668385][ T7399] ? dump_user_range+0x65e/0xad0 [ 89.668398][ T7399] ? copy_mc_enhanced_fast_string+0x6/0xf [ 89.668414][ T7399] dump_user_range+0x3f9/0xad0 [ 89.668428][ T7399] ? __pfx_dump_user_range+0x10/0x10 [ 89.668444][ T7399] ? __pfx_writenote+0x10/0x10 [ 89.668456][ T7399] ? elf_core_dump+0x1f25/0x3d20 [ 89.668470][ T7399] elf_core_dump+0x2d68/0x3d20 [ 89.668490][ T7399] ? __pfx_elf_core_dump+0x10/0x10 [ 89.668502][ T7399] ? kasan_save_stack+0x3f/0x50 [ 89.668513][ T7399] ? kasan_save_stack+0x30/0x50 [ 89.668525][ T7399] ? kasan_save_track+0x14/0x30 [ 89.668536][ T7399] ? __kasan_kmalloc+0xaa/0xb0 [ 89.668548][ T7399] ? vfs_coredump+0x21f6/0x54a0 [ 89.668558][ T7399] ? get_signal+0x1f2a/0x21e0 [ 89.668570][ T7399] ? arch_do_signal_or_restart+0x91/0x7e0 [ 89.668590][ T7399] ? 0xffffffffff600000 [ 89.668616][ T7399] ? lock_acquire+0x1d1/0x380 [ 89.668627][ T7399] ? get_signal+0x1f2a/0x21e0 [ 89.668644][ T7399] ? vfs_coredump+0x281a/0x54a0 [ 89.668654][ T7399] vfs_coredump+0x281a/0x54a0 [ 89.668670][ T7399] ? __pfx_vfs_coredump+0x10/0x10 [ 89.668681][ T7399] ? __lock_acquire+0x5c0/0x1f40 [ 89.668696][ T7399] ? __lock_acquire+0x5c0/0x1f40 [ 89.668709][ T7399] ? lock_acquire+0x1d1/0x380 [ 89.668720][ T7399] ? unwind_next_frame+0xbd/0x2090 [ 89.668739][ T7399] ? lock_acquire+0x1d1/0x380 [ 89.668757][ T7399] ? bpf_ksym_find+0x128/0x1c0 [ 89.668774][ T7399] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.668790][ T7399] ? arch_stack_walk+0xa6/0xf0 [ 89.668809][ T7399] ? __sigqueue_free+0xbe/0x2a0 [ 89.668824][ T7399] ? stack_trace_save+0x8e/0xc0 [ 89.668834][ T7399] ? __pfx_stack_trace_save+0x10/0x10 [ 89.668845][ T7399] ? stack_depot_save_flags+0x27/0x9f0 [ 89.668860][ T7399] ? __lock_acquire+0x5c0/0x1f40 [ 89.668895][ T7399] ? proc_coredump_connector+0x2d3/0x4f0 [ 89.668913][ T7399] ? __pfx_proc_coredump_connector+0x10/0x10 [ 89.668933][ T7399] ? rcu_is_watching+0x13/0xc0 [ 89.668950][ T7399] get_signal+0x1f2a/0x21e0 [ 89.668968][ T7399] ? __pfx_get_signal+0x10/0x10 [ 89.668980][ T7399] ? __pfx_force_sig_fault+0x10/0x10 [ 89.668995][ T7399] arch_do_signal_or_restart+0x91/0x7e0 [ 89.669012][ T7399] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.669037][ T7399] irqentry_exit+0x402/0xa10 [ 89.669055][ T7399] asm_exc_page_fault+0x26/0x30 [ 89.669067][ T7399] RIP: 0033:0x7ffa4199e159 [ 89.669079][ T7399] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 89.669084][ T7399] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 89.669093][ T7399] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 89.669100][ T7399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.669107][ T7399] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.669113][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.669120][ T7399] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 89.669134][ T7399] [ 89.669138][ T7399] memory: usage 307200kB, limit 307200kB, failcnt 33158 [ 89.669145][ T7399] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 89.669152][ T7399] kmem: usage 8024kB, limit 9007199254740988kB, failcnt 0 [ 89.669158][ T7399] Memory cgroup stats for /syz2: [ 89.669230][ T7399] cache 306286592 [ 89.669235][ T7399] rss 49152 [ 89.669239][ T7399] rss_huge 0 [ 89.669243][ T7399] shmem 306286592 [ 89.669246][ T7399] mapped_file 0 [ 89.669250][ T7399] dirty 0 [ 89.669254][ T7399] writeback 0 [ 89.669258][ T7399] workingset_refault_anon 53 [ 89.669262][ T7399] workingset_refault_file 41 [ 89.669266][ T7399] swap 127975424 [ 89.669270][ T7399] swapcached 164843520 [ 89.669274][ T7399] pgpgin 146657 [ 89.669278][ T7399] pgpgout 74418 [ 89.669281][ T7399] pgfault 37895 [ 89.669285][ T7399] pgmajfault 30 [ 89.669289][ T7399] inactive_anon 169316352 [ 89.669293][ T7399] active_anon 137039872 [ 89.669297][ T7399] inactive_file 0 [ 89.669301][ T7399] active_file 0 [ 89.669304][ T7399] unevictable 0 [ 89.669308][ T7399] hierarchical_memory_limit 314572800 [ 89.669313][ T7399] hierarchical_memsw_limit 9223372036854771712 [ 89.669318][ T7399] total_cache 306286592 [ 89.669322][ T7399] total_rss 49152 [ 89.669326][ T7399] total_rss_huge 0 [ 89.669329][ T7399] total_shmem 306286592 [ 89.669333][ T7399] total_mapped_file 0 [ 89.669337][ T7399] total_dirty 0 [ 89.669341][ T7399] total_writeback 0 [ 89.669345][ T7399] total_workingset_refault_anon 53 [ 89.669349][ T7399] total_workingset_refault_file 41 [ 89.669354][ T7399] total_swap 127975424 [ 89.669358][ T7399] total_swapcached 164843520 [ 89.669362][ T7399] total_pgpgin 146657 [ 89.669366][ T7399] total_pgpgout 74418 [ 89.669370][ T7399] total_pgfault 37895 [ 89.669374][ T7399] total_pgmajfault 30 [ 89.669378][ T7399] total_inactive_anon 169316352 [ 89.669382][ T7399] total_active_anon 137039872 [ 89.669386][ T7399] total_inactive_file 0 [ 89.669391][ T7399] total_active_file 0 [ 89.669394][ T7399] total_unevictable 0 [ 89.669398][ T7399] anon_cost 0 [ 89.669402][ T7399] file_cost 0 [ 89.693706][ T7399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7387,uid=0 [ 89.693770][ T7399] Memory cgroup out of memory: Killed process 7387 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:30272kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 89.726679][ T7403] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.726703][ T7403] CPU: 3 UID: 0 PID: 7403 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.726718][ T7403] Tainted: [L]=SOFTLOCKUP [ 89.726722][ T7403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.726729][ T7403] Call Trace: [ 89.726733][ T7403] [ 89.726738][ T7403] dump_stack_lvl+0x100/0x190 [ 89.726759][ T7403] dump_header+0xfb/0x606 [ 89.726773][ T7403] oom_kill_process.cold+0xd/0x380 [ 89.726787][ T7403] out_of_memory+0x340/0x14f0 [ 89.726820][ T7403] ? __pfx_out_of_memory+0x10/0x10 [ 89.726839][ T7403] mem_cgroup_out_of_memory+0xc6/0x130 [ 89.726852][ T7403] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 89.726864][ T7403] ? find_held_lock+0x2b/0x80 [ 89.726882][ T7403] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.726897][ T7403] ? _raw_spin_unlock+0x28/0x50 [ 89.726913][ T7403] try_charge_memcg+0x783/0xf60 [ 89.726933][ T7403] ? __pfx_try_charge_memcg+0x10/0x10 [ 89.726949][ T7403] ? find_held_lock+0x2b/0x80 [ 89.726963][ T7403] ? rcu_read_unlock+0x17/0x60 [ 89.726979][ T7403] ? rcu_read_unlock+0x17/0x60 [ 89.726995][ T7403] ? find_held_lock+0x2b/0x80 [ 89.727011][ T7403] ? rcu_read_unlock+0x17/0x60 [ 89.727030][ T7403] charge_memcg+0x1ae/0x210 [ 89.727047][ T7403] __mem_cgroup_charge+0x2b/0x1c0 [ 89.727058][ T7403] shmem_alloc_and_add_folio+0x451/0xd40 [ 89.727079][ T7403] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 89.727096][ T7403] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 89.727113][ T7403] ? __lock_acquire+0x5c0/0x1f40 [ 89.727126][ T7403] shmem_get_folio_gfp+0x75b/0x1980 [ 89.727146][ T7403] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 89.727162][ T7403] ? inode_set_ctime_current+0x9c/0x850 [ 89.727178][ T7403] ? find_held_lock+0x2b/0x80 [ 89.727194][ T7403] ? timestamp_truncate+0x22e/0x2f0 [ 89.727211][ T7403] shmem_write_begin+0x1a4/0x420 [ 89.727229][ T7403] ? __pfx_shmem_write_begin+0x10/0x10 [ 89.727245][ T7403] ? inode_set_ctime_current+0x283/0x850 [ 89.727265][ T7403] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 89.727283][ T7403] ? inode_maybe_inc_iversion+0x169/0x220 [ 89.727298][ T7403] generic_perform_write+0x292/0xa40 [ 89.727312][ T7403] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.727327][ T7403] ? __pfx_generic_perform_write+0x10/0x10 [ 89.727342][ T7403] ? mnt_put_write_access_file+0x4e/0x100 [ 89.727356][ T7403] ? file_update_time_flags+0x38c/0x520 [ 89.727375][ T7403] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.727386][ T7403] shmem_file_write_iter+0x10e/0x140 [ 89.727399][ T7403] __kernel_write_iter+0x2ac/0x930 [ 89.727411][ T7403] ? __pfx___kernel_write_iter+0x10/0x10 [ 89.727423][ T7403] ? __up_read+0x333/0x980 [ 89.727438][ T7403] ? dump_user_range+0x65e/0xad0 [ 89.727449][ T7403] ? copy_mc_enhanced_fast_string+0x6/0xf [ 89.727465][ T7403] dump_user_range+0x3f9/0xad0 [ 89.727479][ T7403] ? __pfx_dump_user_range+0x10/0x10 [ 89.727495][ T7403] ? __pfx_writenote+0x10/0x10 [ 89.727507][ T7403] ? elf_core_dump+0x1f25/0x3d20 [ 89.727521][ T7403] elf_core_dump+0x2d68/0x3d20 [ 89.727541][ T7403] ? __pfx_elf_core_dump+0x10/0x10 [ 89.727553][ T7403] ? kasan_save_stack+0x3f/0x50 [ 89.727565][ T7403] ? kasan_save_stack+0x30/0x50 [ 89.727577][ T7403] ? kasan_save_track+0x14/0x30 [ 89.727588][ T7403] ? __kasan_kmalloc+0xaa/0xb0 [ 89.727600][ T7403] ? vfs_coredump+0x21f6/0x54a0 [ 89.727610][ T7403] ? get_signal+0x1f2a/0x21e0 [ 89.727622][ T7403] ? arch_do_signal_or_restart+0x91/0x7e0 [ 89.727642][ T7403] ? 0xffffffffff600000 [ 89.727668][ T7403] ? lock_acquire+0x1d1/0x380 [ 89.727679][ T7403] ? get_signal+0x1f2a/0x21e0 [ 89.727696][ T7403] ? vfs_coredump+0x281a/0x54a0 [ 89.727706][ T7403] vfs_coredump+0x281a/0x54a0 [ 89.727722][ T7403] ? __pfx_vfs_coredump+0x10/0x10 [ 89.727734][ T7403] ? __lock_acquire+0x5c0/0x1f40 [ 89.727750][ T7403] ? __lock_acquire+0x5c0/0x1f40 [ 89.727764][ T7403] ? lock_acquire+0x1d1/0x380 [ 89.727775][ T7403] ? unwind_next_frame+0xbd/0x2090 [ 89.727794][ T7403] ? lock_acquire+0x1d1/0x380 [ 89.727808][ T7403] ? bpf_ksym_find+0x128/0x1c0 [ 89.727825][ T7403] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.727841][ T7403] ? arch_stack_walk+0xa6/0xf0 [ 89.727860][ T7403] ? __sigqueue_free+0xbe/0x2a0 [ 89.727875][ T7403] ? stack_trace_save+0x8e/0xc0 [ 89.727885][ T7403] ? __pfx_stack_trace_save+0x10/0x10 [ 89.727896][ T7403] ? stack_depot_save_flags+0x27/0x9f0 [ 89.727911][ T7403] ? __lock_acquire+0x5c0/0x1f40 [ 89.727946][ T7403] ? proc_coredump_connector+0x2d3/0x4f0 [ 89.727964][ T7403] ? __pfx_proc_coredump_connector+0x10/0x10 [ 89.727984][ T7403] ? rcu_is_watching+0x13/0xc0 [ 89.728001][ T7403] get_signal+0x1f2a/0x21e0 [ 89.728019][ T7403] ? __pfx_get_signal+0x10/0x10 [ 89.728030][ T7403] ? __pfx_force_sig_fault+0x10/0x10 [ 89.728064][ T7403] arch_do_signal_or_restart+0x91/0x7e0 [ 89.728082][ T7403] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.728107][ T7403] irqentry_exit+0x402/0xa10 [ 89.728126][ T7403] asm_exc_page_fault+0x26/0x30 [ 89.728136][ T7403] RIP: 0033:0x7ffa4199e159 [ 89.728150][ T7403] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 89.728155][ T7403] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 89.728164][ T7403] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 89.728171][ T7403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.728177][ T7403] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.728184][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.728190][ T7403] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 89.728205][ T7403] [ 89.782164][ T7403] memory: usage 307200kB, limit 307200kB, failcnt 33487 [ 89.782177][ T7403] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 89.782184][ T7403] kmem: usage 8024kB, limit 9007199254740988kB, failcnt 0 [ 89.782190][ T7403] Memory cgroup stats for /syz2: [ 89.782256][ T7403] cache 306286592 [ 89.782261][ T7403] rss 49152 [ 89.782265][ T7403] rss_huge 0 [ 89.782268][ T7403] shmem 306286592 [ 89.782272][ T7403] mapped_file 0 [ 89.782276][ T7403] dirty 0 [ 89.782279][ T7403] writeback 0 [ 89.782283][ T7403] workingset_refault_anon 53 [ 89.782287][ T7403] workingset_refault_file 41 [ 89.782291][ T7403] swap 127975424 [ 89.782295][ T7403] swapcached 164843520 [ 89.782299][ T7403] pgpgin 146657 [ 89.782303][ T7403] pgpgout 74418 [ 89.782306][ T7403] pgfault 37895 [ 89.782310][ T7403] pgmajfault 30 [ 89.782314][ T7403] inactive_anon 169316352 [ 89.782318][ T7403] active_anon 137039872 [ 89.782322][ T7403] inactive_file 0 [ 89.782326][ T7403] active_file 0 [ 89.782330][ T7403] unevictable 0 [ 89.782333][ T7403] hierarchical_memory_limit 314572800 [ 89.782338][ T7403] hierarchical_memsw_limit 9223372036854771712 [ 89.782343][ T7403] total_cache 306286592 [ 89.782347][ T7403] total_rss 49152 [ 89.782351][ T7403] total_rss_huge 0 [ 89.782355][ T7403] total_shmem 306286592 [ 89.782359][ T7403] total_mapped_file 0 [ 89.782363][ T7403] total_dirty 0 [ 89.782366][ T7403] total_writeback 0 [ 89.782370][ T7403] total_workingset_refault_anon 53 [ 89.782375][ T7403] total_workingset_refault_file 41 [ 89.782379][ T7403] total_swap 127975424 [ 89.782383][ T7403] total_swapcached 164843520 [ 89.782387][ T7403] total_pgpgin 146657 [ 89.782391][ T7403] total_pgpgout 74418 [ 89.782395][ T7403] total_pgfault 37895 [ 89.782399][ T7403] total_pgmajfault 30 [ 89.782403][ T7403] total_inactive_anon 169316352 [ 89.782407][ T7403] total_active_anon 137039872 [ 89.782411][ T7403] total_inactive_file 0 [ 89.782415][ T7403] total_active_file 0 [ 89.782419][ T7403] total_unevictable 0 [ 89.782423][ T7403] anon_cost 0 [ 89.782427][ T7403] file_cost 0 [ 89.782431][ T7403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7392,uid=0 [ 89.782518][ T7403] Memory cgroup out of memory: Killed process 7392 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:28032kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 89.793804][ T7394] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.793825][ T7394] CPU: 3 UID: 0 PID: 7394 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.793839][ T7394] Tainted: [L]=SOFTLOCKUP [ 89.793843][ T7394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.793850][ T7394] Call Trace: [ 89.793854][ T7394] [ 89.793859][ T7394] dump_stack_lvl+0x100/0x190 [ 89.793880][ T7394] dump_header+0xfb/0x606 [ 89.793893][ T7394] oom_kill_process.cold+0xd/0x380 [ 89.793907][ T7394] out_of_memory+0x340/0x14f0 [ 89.793925][ T7394] ? __pfx_out_of_memory+0x10/0x10 [ 89.793944][ T7394] mem_cgroup_out_of_memory+0xc6/0x130 [ 89.793957][ T7394] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 89.793969][ T7394] ? find_held_lock+0x2b/0x80 [ 89.793988][ T7394] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.794003][ T7394] ? _raw_spin_unlock+0x28/0x50 [ 89.794019][ T7394] try_charge_memcg+0x783/0xf60 [ 89.794038][ T7394] ? __pfx_try_charge_memcg+0x10/0x10 [ 89.794053][ T7394] ? find_held_lock+0x2b/0x80 [ 89.794068][ T7394] ? rcu_read_unlock+0x17/0x60 [ 89.794085][ T7394] ? rcu_read_unlock+0x17/0x60 [ 89.794101][ T7394] ? find_held_lock+0x2b/0x80 [ 89.794116][ T7394] ? rcu_read_unlock+0x17/0x60 [ 89.794135][ T7394] charge_memcg+0x1ae/0x210 [ 89.794152][ T7394] __mem_cgroup_charge+0x2b/0x1c0 [ 89.794163][ T7394] shmem_alloc_and_add_folio+0x451/0xd40 [ 89.794183][ T7394] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 89.794201][ T7394] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 89.794218][ T7394] ? __lock_acquire+0x5c0/0x1f40 [ 89.794232][ T7394] shmem_get_folio_gfp+0x75b/0x1980 [ 89.794256][ T7394] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 89.794274][ T7394] ? inode_set_ctime_current+0x9c/0x850 [ 89.794290][ T7394] ? find_held_lock+0x2b/0x80 [ 89.794307][ T7394] ? timestamp_truncate+0x22e/0x2f0 [ 89.794324][ T7394] shmem_write_begin+0x1a4/0x420 [ 89.794341][ T7394] ? __pfx_shmem_write_begin+0x10/0x10 [ 89.794358][ T7394] ? inode_set_ctime_current+0x283/0x850 [ 89.794373][ T7394] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 89.794392][ T7394] ? inode_maybe_inc_iversion+0x169/0x220 [ 89.794407][ T7394] generic_perform_write+0x292/0xa40 [ 89.794421][ T7394] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.794437][ T7394] ? __pfx_generic_perform_write+0x10/0x10 [ 89.794451][ T7394] ? mnt_put_write_access_file+0x4e/0x100 [ 89.794466][ T7394] ? file_update_time_flags+0x38c/0x520 [ 89.794484][ T7394] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.794495][ T7394] shmem_file_write_iter+0x10e/0x140 [ 89.794508][ T7394] __kernel_write_iter+0x2ac/0x930 [ 89.794520][ T7394] ? __pfx___kernel_write_iter+0x10/0x10 [ 89.794532][ T7394] ? __up_read+0x333/0x980 [ 89.794546][ T7394] ? dump_user_range+0x65e/0xad0 [ 89.794561][ T7394] dump_user_range+0x3f9/0xad0 [ 89.794575][ T7394] ? __pfx_dump_user_range+0x10/0x10 [ 89.794592][ T7394] ? __pfx_writenote+0x10/0x10 [ 89.794604][ T7394] ? elf_core_dump+0x1f25/0x3d20 [ 89.794618][ T7394] elf_core_dump+0x2d68/0x3d20 [ 89.794638][ T7394] ? __pfx_elf_core_dump+0x10/0x10 [ 89.794649][ T7394] ? kasan_save_stack+0x3f/0x50 [ 89.794661][ T7394] ? kasan_save_stack+0x30/0x50 [ 89.794672][ T7394] ? kasan_save_track+0x14/0x30 [ 89.794684][ T7394] ? __kasan_kmalloc+0xaa/0xb0 [ 89.794696][ T7394] ? vfs_coredump+0x21f6/0x54a0 [ 89.794705][ T7394] ? get_signal+0x1f2a/0x21e0 [ 89.794717][ T7394] ? arch_do_signal_or_restart+0x91/0x7e0 [ 89.794737][ T7394] ? 0xffffffffff600000 [ 89.794762][ T7394] ? lock_acquire+0x1d1/0x380 [ 89.794775][ T7394] ? get_signal+0x1f2a/0x21e0 [ 89.794791][ T7394] ? vfs_coredump+0x281a/0x54a0 [ 89.794802][ T7394] vfs_coredump+0x281a/0x54a0 [ 89.794818][ T7394] ? __pfx_vfs_coredump+0x10/0x10 [ 89.794830][ T7394] ? __lock_acquire+0x5c0/0x1f40 [ 89.794844][ T7394] ? __lock_acquire+0x5c0/0x1f40 [ 89.794857][ T7394] ? lock_acquire+0x1d1/0x380 [ 89.794868][ T7394] ? unwind_next_frame+0xbd/0x2090 [ 89.794886][ T7394] ? lock_acquire+0x1d1/0x380 [ 89.794901][ T7394] ? bpf_ksym_find+0x128/0x1c0 [ 89.794919][ T7394] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.794934][ T7394] ? arch_stack_walk+0xa6/0xf0 [ 89.794953][ T7394] ? __sigqueue_free+0xbe/0x2a0 [ 89.794968][ T7394] ? stack_trace_save+0x8e/0xc0 [ 89.794977][ T7394] ? __pfx_stack_trace_save+0x10/0x10 [ 89.794988][ T7394] ? stack_depot_save_flags+0x27/0x9f0 [ 89.795003][ T7394] ? __lock_acquire+0x5c0/0x1f40 [ 89.795038][ T7394] ? proc_coredump_connector+0x2d3/0x4f0 [ 89.795056][ T7394] ? __pfx_proc_coredump_connector+0x10/0x10 [ 89.795078][ T7394] ? rcu_is_watching+0x13/0xc0 [ 89.795095][ T7394] get_signal+0x1f2a/0x21e0 [ 89.795114][ T7394] ? __pfx_get_signal+0x10/0x10 [ 89.795126][ T7394] ? __pfx_force_sig_fault+0x10/0x10 [ 89.795141][ T7394] arch_do_signal_or_restart+0x91/0x7e0 [ 89.795158][ T7394] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.795183][ T7394] irqentry_exit+0x402/0xa10 [ 89.795202][ T7394] asm_exc_page_fault+0x26/0x30 [ 89.795214][ T7394] RIP: 0033:0x7ffa4199e159 [ 89.795227][ T7394] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 89.795232][ T7394] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 89.795243][ T7394] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 89.795254][ T7394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.795260][ T7394] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.795267][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.795273][ T7394] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 89.795288][ T7394] [ 89.795292][ T7394] memory: usage 307200kB, limit 307200kB, failcnt 33506 [ 89.795299][ T7394] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 89.795306][ T7394] kmem: usage 8024kB, limit 9007199254740988kB, failcnt 0 [ 89.795312][ T7394] Memory cgroup stats for /syz2: [ 89.795407][ T7394] cache 306286592 [ 89.795412][ T7394] rss 49152 [ 89.795416][ T7394] rss_huge 0 [ 89.795419][ T7394] shmem 306286592 [ 89.795423][ T7394] mapped_file 0 [ 89.795428][ T7394] dirty 0 [ 89.795432][ T7394] writeback 0 [ 89.795435][ T7394] workingset_refault_anon 53 [ 89.795440][ T7394] workingset_refault_file 41 [ 89.795444][ T7394] swap 127975424 [ 89.795448][ T7394] swapcached 164843520 [ 89.795451][ T7394] pgpgin 146657 [ 89.795455][ T7394] pgpgout 74418 [ 89.795459][ T7394] pgfault 37895 [ 89.795463][ T7394] pgmajfault 30 [ 89.795466][ T7394] inactive_anon 169316352 [ 89.795470][ T7394] active_anon 137039872 [ 89.795474][ T7394] inactive_file 0 [ 89.795478][ T7394] active_file 0 [ 89.795482][ T7394] unevictable 0 [ 89.795486][ T7394] hierarchical_memory_limit 314572800 [ 89.795490][ T7394] hierarchical_memsw_limit 9223372036854771712 [ 89.795495][ T7394] total_cache 306286592 [ 89.795499][ T7394] total_rss 49152 [ 89.795503][ T7394] total_rss_huge 0 [ 89.795506][ T7394] total_shmem 306286592 [ 89.795510][ T7394] total_mapped_file 0 [ 89.795514][ T7394] total_dirty 0 [ 89.795518][ T7394] total_writeback 0 [ 89.795522][ T7394] total_workingset_refault_anon 53 [ 89.795526][ T7394] total_workingset_refault_file 41 [ 89.795531][ T7394] total_swap 127975424 [ 89.795534][ T7394] total_swapcached 164843520 [ 89.795539][ T7394] total_pgpgin 146657 [ 89.795542][ T7394] total_pgpgout 74418 [ 89.795546][ T7394] total_pgfault 37895 [ 89.795550][ T7394] total_pgmajfault 30 [ 89.795554][ T7394] total_inactive_anon 169316352 [ 89.795558][ T7394] total_active_anon 137039872 [ 89.795562][ T7394] total_inactive_file 0 [ 89.795566][ T7394] total_active_file 0 [ 89.795570][ T7394] total_unevictable 0 [ 89.795574][ T7394] anon_cost 0 [ 89.795578][ T7394] file_cost 0 [ 89.795582][ T7394] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7396,uid=0 [ 89.795730][ T7394] Memory cgroup out of memory: Killed process 7396 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:27392kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 89.815709][ T7393] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.815741][ T7393] CPU: 0 UID: 0 PID: 7393 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.815765][ T7393] Tainted: [L]=SOFTLOCKUP [ 89.815772][ T7393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.815782][ T7393] Call Trace: [ 89.815789][ T7393] [ 89.815797][ T7393] dump_stack_lvl+0x100/0x190 [ 89.815828][ T7393] dump_header+0xfb/0x606 [ 89.815851][ T7393] oom_kill_process.cold+0xd/0x380 [ 89.815874][ T7393] out_of_memory+0x340/0x14f0 [ 89.815904][ T7393] ? __pfx_out_of_memory+0x10/0x10 [ 89.815936][ T7393] mem_cgroup_out_of_memory+0xc6/0x130 [ 89.815958][ T7393] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 89.815977][ T7393] ? find_held_lock+0x2b/0x80 [ 89.816008][ T7393] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.816032][ T7393] ? _raw_spin_unlock+0x28/0x50 [ 89.816083][ T7393] try_charge_memcg+0x783/0xf60 [ 89.816119][ T7393] ? __pfx_try_charge_memcg+0x10/0x10 [ 89.816144][ T7393] ? find_held_lock+0x2b/0x80 [ 89.816168][ T7393] ? rcu_read_unlock+0x17/0x60 [ 89.816195][ T7393] ? rcu_read_unlock+0x17/0x60 [ 89.816221][ T7393] ? find_held_lock+0x2b/0x80 [ 89.816247][ T7393] ? rcu_read_unlock+0x17/0x60 [ 89.816280][ T7393] charge_memcg+0x1ae/0x210 [ 89.816308][ T7393] __mem_cgroup_charge+0x2b/0x1c0 [ 89.816326][ T7393] shmem_alloc_and_add_folio+0x451/0xd40 [ 89.816359][ T7393] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 89.816389][ T7393] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 89.816422][ T7393] shmem_get_folio_gfp+0x75b/0x1980 [ 89.816455][ T7393] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 89.816483][ T7393] ? vm_normal_page+0x1d1/0x380 [ 89.816503][ T7393] ? __pfx_vm_normal_page+0x10/0x10 [ 89.816528][ T7393] shmem_write_begin+0x1a4/0x420 [ 89.816557][ T7393] ? __pfx_shmem_write_begin+0x10/0x10 [ 89.816585][ T7393] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 89.816617][ T7393] generic_perform_write+0x292/0xa40 [ 89.816640][ T7393] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.816666][ T7393] ? __pfx_generic_perform_write+0x10/0x10 [ 89.816691][ T7393] ? file_update_time_flags+0x38c/0x520 [ 89.816722][ T7393] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.816739][ T7393] shmem_file_write_iter+0x10e/0x140 [ 89.816760][ T7393] __kernel_write_iter+0x2ac/0x930 [ 89.816782][ T7393] ? __pfx___kernel_write_iter+0x10/0x10 [ 89.816800][ T7393] ? __up_read+0x333/0x980 [ 89.816839][ T7393] ? dump_user_range+0x65e/0xad0 [ 89.816866][ T7393] dump_user_range+0x3f9/0xad0 [ 89.816890][ T7393] ? __pfx_dump_user_range+0x10/0x10 [ 89.816917][ T7393] ? __pfx_writenote+0x10/0x10 [ 89.816936][ T7393] ? elf_core_dump+0x1f25/0x3d20 [ 89.816961][ T7393] elf_core_dump+0x2d68/0x3d20 [ 89.816994][ T7393] ? __pfx_elf_core_dump+0x10/0x10 [ 89.817013][ T7393] ? kasan_save_stack+0x3f/0x50 [ 89.817032][ T7393] ? kasan_save_stack+0x30/0x50 [ 89.817051][ T7393] ? kasan_save_track+0x14/0x30 [ 89.817070][ T7393] ? __kasan_kmalloc+0xaa/0xb0 [ 89.817090][ T7393] ? vfs_coredump+0x21f6/0x54a0 [ 89.817107][ T7393] ? get_signal+0x1f2a/0x21e0 [ 89.817128][ T7393] ? arch_do_signal_or_restart+0x91/0x7e0 [ 89.817160][ T7393] ? 0xffffffffff600000 [ 89.817206][ T7393] ? lock_acquire+0x1d1/0x380 [ 89.817224][ T7393] ? get_signal+0x1f2a/0x21e0 [ 89.817252][ T7393] ? vfs_coredump+0x281a/0x54a0 [ 89.817269][ T7393] vfs_coredump+0x281a/0x54a0 [ 89.817296][ T7393] ? __pfx_vfs_coredump+0x10/0x10 [ 89.817315][ T7393] ? __lock_acquire+0x5c0/0x1f40 [ 89.817340][ T7393] ? __lock_acquire+0x5c0/0x1f40 [ 89.817361][ T7393] ? lock_acquire+0x1d1/0x380 [ 89.817378][ T7393] ? unwind_next_frame+0xbd/0x2090 [ 89.817409][ T7393] ? lock_acquire+0x1d1/0x380 [ 89.817433][ T7393] ? bpf_ksym_find+0x128/0x1c0 [ 89.817460][ T7393] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.817486][ T7393] ? arch_stack_walk+0xa6/0xf0 [ 89.817518][ T7393] ? __sigqueue_free+0xbe/0x2a0 [ 89.817543][ T7393] ? stack_trace_save+0x8e/0xc0 [ 89.817559][ T7393] ? __pfx_stack_trace_save+0x10/0x10 [ 89.817576][ T7393] ? stack_depot_save_flags+0x27/0x9f0 [ 89.817599][ T7393] ? __lock_acquire+0x5c0/0x1f40 [ 89.817662][ T7393] ? proc_coredump_connector+0x2d3/0x4f0 [ 89.817692][ T7393] ? __pfx_proc_coredump_connector+0x10/0x10 [ 89.817726][ T7393] ? rcu_is_watching+0x13/0xc0 [ 89.817754][ T7393] get_signal+0x1f2a/0x21e0 [ 89.817783][ T7393] ? __pfx_get_signal+0x10/0x10 [ 89.817802][ T7393] ? __pfx_force_sig_fault+0x10/0x10 [ 89.817827][ T7393] arch_do_signal_or_restart+0x91/0x7e0 [ 89.817856][ T7393] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.817898][ T7393] irqentry_exit+0x402/0xa10 [ 89.817928][ T7393] asm_exc_page_fault+0x26/0x30 [ 89.817945][ T7393] RIP: 0033:0x7ffa4199e159 [ 89.817967][ T7393] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 89.817975][ T7393] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 89.817991][ T7393] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 89.818003][ T7393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.818013][ T7393] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.818024][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.818034][ T7393] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 89.818060][ T7393] [ 89.822115][ T7393] memory: usage 307200kB, limit 307200kB, failcnt 33536 [ 89.822129][ T7393] memory+swap: usage 432176kB, limit 9007199254740988kB, failcnt 0 [ 89.822141][ T7393] kmem: usage 8024kB, limit 9007199254740988kB, failcnt 0 [ 89.822151][ T7393] Memory cgroup stats for /syz2: [ 89.822252][ T7393] cache 306286592 [ 89.822261][ T7393] rss 49152 [ 89.822267][ T7393] rss_huge 0 [ 89.822273][ T7393] shmem 306286592 [ 89.822279][ T7393] mapped_file 0 [ 89.822285][ T7393] dirty 0 [ 89.822290][ T7393] writeback 0 [ 89.822296][ T7393] workingset_refault_anon 53 [ 89.822303][ T7393] workingset_refault_file 41 [ 89.822309][ T7393] swap 127975424 [ 89.822315][ T7393] swapcached 164843520 [ 89.822322][ T7393] pgpgin 146657 [ 89.822328][ T7393] pgpgout 74418 [ 89.822334][ T7393] pgfault 37895 [ 89.822340][ T7393] pgmajfault 30 [ 89.822346][ T7393] inactive_anon 169316352 [ 89.822353][ T7393] active_anon 137039872 [ 89.822359][ T7393] inactive_file 0 [ 89.822366][ T7393] active_file 0 [ 89.822372][ T7393] unevictable 0 [ 89.822378][ T7393] hierarchical_memory_limit 314572800 [ 89.822386][ T7393] hierarchical_memsw_limit 9223372036854771712 [ 89.822394][ T7393] total_cache 306286592 [ 89.822401][ T7393] total_rss 49152 [ 89.822407][ T7393] total_rss_huge 0 [ 89.822414][ T7393] total_shmem 306286592 [ 89.822420][ T7393] total_mapped_file 0 [ 89.822427][ T7393] total_dirty 0 [ 89.822433][ T7393] total_writeback 0 [ 89.822480][ T7393] total_workingset_refault_anon 53 [ 89.822488][ T7393] total_workingset_refault_file 41 [ 89.822496][ T7393] total_swap 127975424 [ 89.822502][ T7393] total_swapcached 164843520 [ 89.822509][ T7393] total_pgpgin 146657 [ 89.822515][ T7393] total_pgpgout 74418 [ 89.822522][ T7393] total_pgfault 37895 [ 89.822528][ T7393] total_pgmajfault 30 [ 89.822534][ T7393] total_inactive_anon 169316352 [ 89.822541][ T7393] total_active_anon 137039872 [ 89.822548][ T7393] total_inactive_file 0 [ 89.822555][ T7393] total_active_file 0 [ 89.822561][ T7393] total_unevictable 0 [ 89.822567][ T7393] anon_cost 0 [ 89.822573][ T7393] file_cost 0 [ 89.822579][ T7393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7382,uid=0 [ 89.823586][ T7393] Memory cgroup out of memory: Killed process 7382 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:26048kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:1000 [ 89.836490][ T7391] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.836519][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.836543][ T7391] Tainted: [L]=SOFTLOCKUP [ 89.836549][ T7391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.836560][ T7391] Call Trace: [ 89.836567][ T7391] [ 89.836574][ T7391] dump_stack_lvl+0x100/0x190 [ 89.836606][ T7391] dump_header+0xfb/0x606 [ 89.836627][ T7391] oom_kill_process.cold+0xd/0x380 [ 89.836650][ T7391] out_of_memory+0x340/0x14f0 [ 89.836679][ T7391] ? __pfx_out_of_memory+0x10/0x10 [ 89.836711][ T7391] mem_cgroup_out_of_memory+0xc6/0x130 [ 89.836731][ T7391] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 89.836750][ T7391] ? find_held_lock+0x2b/0x80 [ 89.836781][ T7391] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.836805][ T7391] ? _raw_spin_unlock+0x28/0x50 [ 89.836830][ T7391] try_charge_memcg+0x783/0xf60 [ 89.836861][ T7391] ? __pfx_try_charge_memcg+0x10/0x10 [ 89.836885][ T7391] ? find_held_lock+0x2b/0x80 [ 89.836909][ T7391] ? rcu_read_unlock+0x17/0x60 [ 89.836936][ T7391] ? rcu_read_unlock+0x17/0x60 [ 89.836963][ T7391] ? find_held_lock+0x2b/0x80 [ 89.836989][ T7391] ? rcu_read_unlock+0x17/0x60 [ 89.837021][ T7391] charge_memcg+0x1ae/0x210 [ 89.837049][ T7391] __mem_cgroup_charge+0x2b/0x1c0 [ 89.837069][ T7391] shmem_alloc_and_add_folio+0x451/0xd40 [ 89.837102][ T7391] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 89.837135][ T7391] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 89.837167][ T7391] shmem_get_folio_gfp+0x75b/0x1980 [ 89.837199][ T7391] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 89.837228][ T7391] ? vm_normal_page+0x1d1/0x380 [ 89.837248][ T7391] ? __pfx_vm_normal_page+0x10/0x10 [ 89.837273][ T7391] shmem_write_begin+0x1a4/0x420 [ 89.837303][ T7391] ? __pfx_shmem_write_begin+0x10/0x10 [ 89.837347][ T7391] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 89.837381][ T7391] generic_perform_write+0x292/0xa40 [ 89.837405][ T7391] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.837431][ T7391] ? __pfx_generic_perform_write+0x10/0x10 [ 89.837458][ T7391] ? file_update_time_flags+0x38c/0x520 [ 89.837490][ T7391] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.837508][ T7391] shmem_file_write_iter+0x10e/0x140 [ 89.837530][ T7391] __kernel_write_iter+0x2ac/0x930 [ 89.837552][ T7391] ? __pfx___kernel_write_iter+0x10/0x10 [ 89.837571][ T7391] ? __up_read+0x333/0x980 [ 89.837596][ T7391] ? dump_user_range+0x65e/0xad0 [ 89.837620][ T7391] dump_user_range+0x3f9/0xad0 [ 89.837644][ T7391] ? __pfx_dump_user_range+0x10/0x10 [ 89.837672][ T7391] ? __pfx_writenote+0x10/0x10 [ 89.837691][ T7391] ? elf_core_dump+0x1f25/0x3d20 [ 89.837715][ T7391] elf_core_dump+0x2d68/0x3d20 [ 89.837749][ T7391] ? __pfx_elf_core_dump+0x10/0x10 [ 89.837768][ T7391] ? kasan_save_stack+0x3f/0x50 [ 89.837788][ T7391] ? kasan_save_stack+0x30/0x50 [ 89.837806][ T7391] ? kasan_save_track+0x14/0x30 [ 89.837825][ T7391] ? __kasan_kmalloc+0xaa/0xb0 [ 89.837844][ T7391] ? vfs_coredump+0x21f6/0x54a0 [ 89.837860][ T7391] ? get_signal+0x1f2a/0x21e0 [ 89.837878][ T7391] ? arch_do_signal_or_restart+0x91/0x7e0 [ 89.837911][ T7391] ? 0xffffffffff600000 [ 89.837957][ T7391] ? lock_acquire+0x1d1/0x380 [ 89.837976][ T7391] ? get_signal+0x1f2a/0x21e0 [ 89.838005][ T7391] ? vfs_coredump+0x281a/0x54a0 [ 89.838022][ T7391] vfs_coredump+0x281a/0x54a0 [ 89.838050][ T7391] ? __pfx_vfs_coredump+0x10/0x10 [ 89.838069][ T7391] ? __lock_acquire+0x5c0/0x1f40 [ 89.838094][ T7391] ? __lock_acquire+0x5c0/0x1f40 [ 89.838121][ T7391] ? lock_acquire+0x1d1/0x380 [ 89.838139][ T7391] ? unwind_next_frame+0xbd/0x2090 [ 89.838170][ T7391] ? lock_acquire+0x1d1/0x380 [ 89.838196][ T7391] ? bpf_ksym_find+0x128/0x1c0 [ 89.838224][ T7391] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.838252][ T7391] ? arch_stack_walk+0xa6/0xf0 [ 89.838283][ T7391] ? __sigqueue_free+0xbe/0x2a0 [ 89.838307][ T7391] ? stack_trace_save+0x8e/0xc0 [ 89.838322][ T7391] ? __pfx_stack_trace_save+0x10/0x10 [ 89.838340][ T7391] ? stack_depot_save_flags+0x27/0x9f0 [ 89.838364][ T7391] ? __lock_acquire+0x5c0/0x1f40 [ 89.838427][ T7391] ? proc_coredump_connector+0x2d3/0x4f0 [ 89.838456][ T7391] ? __pfx_proc_coredump_connector+0x10/0x10 [ 89.838490][ T7391] ? rcu_is_watching+0x13/0xc0 [ 89.838519][ T7391] get_signal+0x1f2a/0x21e0 [ 89.838550][ T7391] ? __pfx_get_signal+0x10/0x10 [ 89.838569][ T7391] ? __pfx_force_sig_fault+0x10/0x10 [ 89.838595][ T7391] arch_do_signal_or_restart+0x91/0x7e0 [ 89.838623][ T7391] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.838666][ T7391] irqentry_exit+0x402/0xa10 [ 89.838696][ T7391] asm_exc_page_fault+0x26/0x30 [ 89.838713][ T7391] RIP: 0033:0x7ffa4199e159 [ 89.838732][ T7391] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 89.838740][ T7391] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 89.838754][ T7391] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 89.838766][ T7391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.838776][ T7391] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.838786][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.838797][ T7391] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 89.838822][ T7391] [ 89.844596][ T7391] memory: usage 307200kB, limit 307200kB, failcnt 33597 [ 89.844610][ T7391] memory+swap: usage 432168kB, limit 9007199254740988kB, failcnt 0 [ 89.844621][ T7391] kmem: usage 8020kB, limit 9007199254740988kB, failcnt 0 [ 89.844632][ T7391] Memory cgroup stats for /syz2: [ 89.844751][ T7391] cache 306290688 [ 89.844759][ T7391] rss 49152 [ 89.844765][ T7391] rss_huge 0 [ 89.844772][ T7391] shmem 306290688 [ 89.844778][ T7391] mapped_file 0 [ 89.844785][ T7391] dirty 0 [ 89.844790][ T7391] writeback 0 [ 89.844795][ T7391] workingset_refault_anon 53 [ 89.844802][ T7391] workingset_refault_file 41 [ 89.844809][ T7391] swap 127967232 [ 89.844815][ T7391] swapcached 164843520 [ 89.844821][ T7391] pgpgin 146749 [ 89.844827][ T7391] pgpgout 74509 [ 89.844832][ T7391] pgfault 37901 [ 89.844838][ T7391] pgmajfault 30 [ 89.844844][ T7391] inactive_anon 168984576 [ 89.844851][ T7391] active_anon 137375744 [ 89.844858][ T7391] inactive_file 0 [ 89.844864][ T7391] active_file 0 [ 89.844870][ T7391] unevictable 0 [ 89.844877][ T7391] hierarchical_memory_limit 314572800 [ 89.844884][ T7391] hierarchical_memsw_limit 9223372036854771712 [ 89.844892][ T7391] total_cache 306290688 [ 89.844899][ T7391] total_rss 49152 [ 89.844905][ T7391] total_rss_huge 0 [ 89.844911][ T7391] total_shmem 306290688 [ 89.844918][ T7391] total_mapped_file 0 [ 89.844924][ T7391] total_dirty 0 [ 89.844930][ T7391] total_writeback 0 [ 89.844937][ T7391] total_workingset_refault_anon 53 [ 89.844944][ T7391] total_workingset_refault_file 41 [ 89.844951][ T7391] total_swap 127967232 [ 89.844958][ T7391] total_swapcached 164843520 [ 89.844964][ T7391] total_pgpgin 146749 [ 89.844971][ T7391] total_pgpgout 74509 [ 89.844977][ T7391] total_pgfault 37901 [ 89.844984][ T7391] total_pgmajfault 30 [ 89.844990][ T7391] total_inactive_anon 168984576 [ 89.844997][ T7391] total_active_anon 137375744 [ 89.845004][ T7391] total_inactive_file 0 [ 89.845010][ T7391] total_active_file 0 [ 89.845016][ T7391] total_unevictable 0 [ 89.845024][ T7391] anon_cost 0 [ 89.845030][ T7391] file_cost 0 [ 89.845036][ T7391] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7393,uid=0 [ 89.845122][ T7391] Memory cgroup out of memory: Killed process 7393 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:25472kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:1000 [ 89.866710][ T7399] syz.2.380 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 89.866741][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.2.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.866765][ T7399] Tainted: [L]=SOFTLOCKUP [ 89.866772][ T7399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.866783][ T7399] Call Trace: [ 89.866790][ T7399] [ 89.866798][ T7399] dump_stack_lvl+0x100/0x190 [ 89.866830][ T7399] dump_header+0xfb/0x606 [ 89.866853][ T7399] oom_kill_process.cold+0xd/0x380 [ 89.866876][ T7399] out_of_memory+0x340/0x14f0 [ 89.866906][ T7399] ? __pfx_out_of_memory+0x10/0x10 [ 89.866938][ T7399] mem_cgroup_out_of_memory+0xc6/0x130 [ 89.866959][ T7399] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 89.866978][ T7399] ? find_held_lock+0x2b/0x80 [ 89.867010][ T7399] ? do_raw_spin_unlock+0x145/0x1e0 [ 89.867034][ T7399] ? _raw_spin_unlock+0x28/0x50 [ 89.867060][ T7399] try_charge_memcg+0x783/0xf60 [ 89.867092][ T7399] ? __pfx_try_charge_memcg+0x10/0x10 [ 89.867122][ T7399] ? find_held_lock+0x2b/0x80 [ 89.867147][ T7399] ? rcu_read_unlock+0x17/0x60 [ 89.867174][ T7399] ? rcu_read_unlock+0x17/0x60 [ 89.867201][ T7399] ? find_held_lock+0x2b/0x80 [ 89.867227][ T7399] ? rcu_read_unlock+0x17/0x60 [ 89.867259][ T7399] charge_memcg+0x1ae/0x210 [ 89.867287][ T7399] __mem_cgroup_charge+0x2b/0x1c0 [ 89.867307][ T7399] shmem_alloc_and_add_folio+0x451/0xd40 [ 89.867357][ T7399] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 89.867387][ T7399] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 89.867421][ T7399] shmem_get_folio_gfp+0x75b/0x1980 [ 89.867455][ T7399] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 89.867483][ T7399] ? vm_normal_page+0x1d1/0x380 [ 89.867502][ T7399] ? __pfx_vm_normal_page+0x10/0x10 [ 89.867528][ T7399] shmem_write_begin+0x1a4/0x420 [ 89.867557][ T7399] ? __pfx_shmem_write_begin+0x10/0x10 [ 89.867586][ T7399] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 89.867619][ T7399] generic_perform_write+0x292/0xa40 [ 89.867642][ T7399] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.867669][ T7399] ? __pfx_generic_perform_write+0x10/0x10 [ 89.867695][ T7399] ? file_update_time_flags+0x38c/0x520 [ 89.867726][ T7399] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 89.867744][ T7399] shmem_file_write_iter+0x10e/0x140 [ 89.867765][ T7399] __kernel_write_iter+0x2ac/0x930 [ 89.867787][ T7399] ? __pfx___kernel_write_iter+0x10/0x10 [ 89.867806][ T7399] ? __up_read+0x333/0x980 [ 89.867831][ T7399] ? dump_user_range+0x65e/0xad0 [ 89.867850][ T7399] ? copy_mc_enhanced_fast_string+0x6/0xf [ 89.867877][ T7399] dump_user_range+0x3f9/0xad0 [ 89.867901][ T7399] ? __pfx_dump_user_range+0x10/0x10 [ 89.867929][ T7399] ? __pfx_writenote+0x10/0x10 [ 89.867949][ T7399] ? elf_core_dump+0x1f25/0x3d20 [ 89.867974][ T7399] elf_core_dump+0x2d68/0x3d20 [ 89.868010][ T7399] ? __pfx_elf_core_dump+0x10/0x10 [ 89.868029][ T7399] ? kasan_save_stack+0x3f/0x50 [ 89.868070][ T7399] ? kasan_save_stack+0x30/0x50 [ 89.868089][ T7399] ? kasan_save_track+0x14/0x30 [ 89.868113][ T7399] ? __kasan_kmalloc+0xaa/0xb0 [ 89.868133][ T7399] ? vfs_coredump+0x21f6/0x54a0 [ 89.868149][ T7399] ? get_signal+0x1f2a/0x21e0 [ 89.868168][ T7399] ? arch_do_signal_or_restart+0x91/0x7e0 [ 89.868201][ T7399] ? 0xffffffffff600000 [ 89.868249][ T7399] ? lock_acquire+0x1d1/0x380 [ 89.868267][ T7399] ? get_signal+0x1f2a/0x21e0 [ 89.868296][ T7399] ? vfs_coredump+0x281a/0x54a0 [ 89.868313][ T7399] vfs_coredump+0x281a/0x54a0 [ 89.868342][ T7399] ? __pfx_vfs_coredump+0x10/0x10 [ 89.868361][ T7399] ? __lock_acquire+0x5c0/0x1f40 [ 89.868386][ T7399] ? __lock_acquire+0x5c0/0x1f40 [ 89.868409][ T7399] ? lock_acquire+0x1d1/0x380 [ 89.868427][ T7399] ? unwind_next_frame+0xbd/0x2090 [ 89.868457][ T7399] ? lock_acquire+0x1d1/0x380 [ 89.868482][ T7399] ? bpf_ksym_find+0x128/0x1c0 [ 89.868510][ T7399] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.868536][ T7399] ? arch_stack_walk+0xa6/0xf0 [ 89.868569][ T7399] ? __sigqueue_free+0xbe/0x2a0 [ 89.868593][ T7399] ? stack_trace_save+0x8e/0xc0 [ 89.868610][ T7399] ? __pfx_stack_trace_save+0x10/0x10 [ 89.868628][ T7399] ? stack_depot_save_flags+0x27/0x9f0 [ 89.868653][ T7399] ? __lock_acquire+0x5c0/0x1f40 [ 89.868719][ T7399] ? proc_coredump_connector+0x2d3/0x4f0 [ 89.868749][ T7399] ? __pfx_proc_coredump_connector+0x10/0x10 [ 89.868784][ T7399] ? rcu_is_watching+0x13/0xc0 [ 89.868813][ T7399] get_signal+0x1f2a/0x21e0 [ 89.868844][ T7399] ? __pfx_get_signal+0x10/0x10 [ 89.868874][ T7399] ? __pfx_force_sig_fault+0x10/0x10 [ 89.868901][ T7399] arch_do_signal_or_restart+0x91/0x7e0 [ 89.868930][ T7399] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 89.868973][ T7399] irqentry_exit+0x402/0xa10 [ 89.869003][ T7399] asm_exc_page_fault+0x26/0x30 [ 89.869020][ T7399] RIP: 0033:0x7ffa4199e159 [ 89.869040][ T7399] Code: Unable to access opcode bytes at 0x7ffa4199e12f. [ 89.869048][ T7399] RSP: 002b:00007ffa42900fd8 EFLAGS: 00010246 [ 89.869063][ T7399] RAX: 0000000000000000 RBX: 00007ffa41c26180 RCX: 00007ffa4199e159 [ 89.869075][ T7399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.869086][ T7399] RBP: 00007ffa41a3506b R08: 0000000000000000 R09: 0000000000000000 [ 89.869097][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.869107][ T7399] R13: 00007ffa41c26218 R14: 00007ffa41c26180 R15: 00007ffd74dd6e98 [ 89.869137][ T7399] [ 89.872234][ T7399] memory: usage 307168kB, limit 307200kB, failcnt 33699 [ 89.872248][ T7399] memory+swap: usage 432100kB, limit 9007199254740988kB, failcnt 0 [ 89.872259][ T7399] kmem: usage 7956kB, limit 9007199254740988kB, failcnt 0 [ 89.872270][ T7399] Memory cgroup stats for /syz2: [ 89.872387][ T7399] cache 306319360 [ 89.872396][ T7399] rss 53248 [ 89.872402][ T7399] rss_huge 0 [ 89.872408][ T7399] shmem 306319360 [ 89.872415][ T7399] mapped_file 0 [ 89.872421][ T7399] dirty 0 [ 89.872427][ T7399] writeback 0 [ 89.872433][ T7399] workingset_refault_anon 53 [ 89.872440][ T7399] workingset_refault_file 41 [ 89.872447][ T7399] swap 127930368 [ 89.872454][ T7399] swapcached 164843520 [ 89.872460][ T7399] pgpgin 146904 [ 89.872467][ T7399] pgpgout 74656 [ 89.872473][ T7399] pgfault 37912 [ 89.872479][ T7399] pgmajfault 31 [ 89.872486][ T7399] inactive_anon 168771584 [ 89.872493][ T7399] active_anon 137592832 [ 89.872500][ T7399] inactive_file 0 [ 89.872506][ T7399] active_file 0 [ 89.872513][ T7399] unevictable 0 [ 89.872519][ T7399] hierarchical_memory_limit 314572800 [ 89.872527][ T7399] hierarchical_memsw_limit 9223372036854771712 [ 89.872535][ T7399] total_cache 306319360 [ 89.872542][ T7399] total_rss 53248 [ 89.872548][ T7399] total_rss_huge 0 [ 89.872554][ T7399] total_shmem 306319360 [ 89.872561][ T7399] total_mapped_file 0 [ 89.872567][ T7399] total_dirty 0 [ 89.872573][ T7399] total_writeback 0 [ 89.872579][ T7399] total_workingset_refault_anon 53 [ 89.872587][ T7399] total_workingset_refault_file 41 [ 89.872594][ T7399] total_swap 127930368 [ 89.872601][ T7399] total_swapcached 164843520 [ 89.872607][ T7399] total_pgpgin 146904 [ 89.872613][ T7399] total_pgpgout 74656 [ 89.872620][ T7399] total_pgfault 37912 [ 89.872626][ T7399] total_pgmajfault 31 [ 89.872632][ T7399] total_inactive_anon 168771584 [ 89.872640][ T7399] total_active_anon 137592832 [ 89.872647][ T7399] total_inactive_file 0 [ 89.872653][ T7399] total_active_file 0 [ 89.872660][ T7399] total_unevictable 0 [ 89.872667][ T7399] anon_cost 0 [ 89.872673][ T7399] file_cost 0 [ 89.872680][ T7399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.380,pid=7380,uid=0 [ 89.872776][ T7399] Memory cgroup out of memory: Killed process 7380 (syz.2.380) total-vm:49268kB, anon-rss:0kB, file-rss:25344kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:1000 [ 90.853577][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 90.853592][ T43] audit: type=1400 audit(1789878125.922:620): avc: denied { getopt } for pid=7543 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.142284][ T43] audit: type=1400 audit(1789878126.212:621): avc: denied { write } for pid=7550 comm="syz.3.412" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 91.237527][ T7380] syz.2.380 (7380) used greatest stack depth: 17752 bytes left [ 91.590306][ T43] audit: type=1400 audit(1789878126.662:622): avc: denied { listen } for pid=7557 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.590671][ T43] audit: type=1400 audit(1789878126.662:623): avc: denied { accept } for pid=7557 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.717902][ T43] audit: type=1400 audit(1789878126.782:624): avc: denied { unmount } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.919703][ T7389] syz.2.380 (7389) used greatest stack depth: 17744 bytes left [ 91.946750][ T43] audit: type=1400 audit(1789878127.012:625): avc: denied { module_request } for pid=7562 comm="syz.3.417" kmod=6E65746465762DA39414964196C33251287531ECF460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 92.214194][ T7401] syz.2.380 (7401) used greatest stack depth: 17632 bytes left [ 92.764894][ T7394] syz.2.380 (7394) used greatest stack depth: 17472 bytes left [ 93.446117][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 93.446361][ T7563] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 93.510821][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 93.515802][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.419'. [ 93.537535][ T7570] netlink: 340 bytes leftover after parsing attributes in process `syz.2.419'. [ 93.702275][ T7586] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 93.753021][ T43] audit: type=1400 audit(1789878128.822:626): avc: denied { write } for pid=7587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.769240][ T43] audit: type=1400 audit(1789878128.832:627): avc: denied { write } for pid=7589 comm="syz.3.423" name="/" dev="9p" ino=75267639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.770184][ T43] audit: type=1400 audit(1789878128.842:628): avc: denied { add_name } for pid=7589 comm="syz.3.423" name="blkio.throttle.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.770229][ T43] audit: type=1400 audit(1789878128.842:629): avc: denied { associate } for pid=7589 comm="syz.3.423" name="blkio.throttle.io_service_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.877521][ T5836] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 94.019840][ T5836] usb 6-1: device descriptor read/64, error -71 [ 94.081243][ T7606] sctp: [Deprecated]: syz.3.425 (pid 7606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.081243][ T7606] Use struct sctp_sack_info instead [ 94.125827][ T7607] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 94.257933][ T5836] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 94.400057][ T5836] usb 6-1: device descriptor read/64, error -71 [ 94.411041][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.412613][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.517933][ T5836] usb usb6-port1: attempt power cycle [ 94.539290][ T7615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.549037][ T7615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.797808][ T5837] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.799259][ T5837] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.799298][ T5837] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.799332][ T5837] netdevsim netdevsim2 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.885920][ T5836] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 94.898392][ T5836] usb 6-1: device descriptor read/8, error -71 [ 94.907182][ T7628] netlink: 'syz.4.430': attribute type 2 has an invalid length. [ 94.951256][ T7631] FAT-fs (mtdblock0): invalid media value (0x2c) [ 94.951278][ T7631] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 94.958867][ T7636] FAT-fs (mtdblock0): invalid media value (0x2c) [ 94.958885][ T7636] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 95.148285][ T5836] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 95.170240][ T5836] usb 6-1: device descriptor read/8, error -71 [ 95.196435][ T7657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.434'. [ 95.200153][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.281528][ T5836] usb usb6-port1: unable to enumerate USB device [ 95.531507][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 95.631950][ T7685] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 95.632416][ T7684] [U] J"—E:ÀÆ" [ 95.876708][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 95.876732][ T43] audit: type=1400 audit(1789878130.942:656): avc: denied { write } for pid=7700 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.983859][ T43] audit: type=1400 audit(1789878131.052:657): avc: denied { write } for pid=7709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.082763][ T43] audit: type=1400 audit(1789878131.152:658): avc: denied { write } for pid=7715 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.116966][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 96.117311][ T7720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.212190][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.232635][ T43] audit: type=1400 audit(1789878131.302:659): avc: denied { write } for pid=7723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.307001][ T43] audit: type=1400 audit(1789878131.372:660): avc: denied { set_context_mgr } for pid=7726 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 96.316571][ T7729] binder: 7726:7729 ioctl c0845657 200000000200 returned -22 [ 96.356824][ T43] audit: type=1400 audit(1789878131.422:661): avc: denied { write } for pid=7733 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.495829][ T43] audit: type=1400 audit(1789878131.562:662): avc: denied { ioctl } for pid=7740 comm="syz.4.450" path="socket:[21119]" dev="sockfs" ino=21119 ioctlcmd=0x6e8b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.551794][ T43] audit: type=1804 audit(1789878131.622:663): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.449" name="/newroot/135/file0" dev="fuse" ino=1 res=1 errno=0 [ 96.629752][ T7745] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 96.629752][ T7745] The task syz.4.451 (7745) triggered the difference, watch for misbehavior. [ 96.641184][ T7745] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 96.641224][ T7745] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 96.641263][ T7745] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 96.644048][ T7745] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.662452][ T7745] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.689096][ T43] audit: type=1400 audit(1789878131.762:664): avc: denied { ioctl } for pid=7746 comm="syz.1.452" path="/dev/input/mouse1" dev="devtmpfs" ino=1315 ioctlcmd=0xae8c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 96.820871][ T7754] program syz.1.455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.821107][ T7755] program syz.1.455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.097358][ T7762] macvlan1: entered promiscuous mode [ 97.097372][ T7762] erspan0: entered promiscuous mode [ 97.100062][ T7762] erspan0: left promiscuous mode [ 97.231189][ T43] audit: type=1400 audit(1789878132.302:665): avc: denied { read } for pid=7767 comm="syz.2.459" dev="nsfs" ino=4026533124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 97.387561][ T30] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 97.467432][ T5816] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 97.513509][ T7779] syz_tun: entered allmulticast mode [ 97.516386][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.463'. [ 97.538422][ T30] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 97.539250][ T30] usb 8-1: config 0 has an invalid interface number: 205 but max is 0 [ 97.539263][ T30] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 97.539273][ T30] usb 8-1: config 0 has no interface number 0 [ 97.539285][ T30] usb 8-1: config 0 interface 205 has no altsetting 0 [ 97.541110][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.541122][ T30] usb 8-1: Product: syz [ 97.541129][ T30] usb 8-1: Manufacturer: syz [ 97.541136][ T30] usb 8-1: SerialNumber: syz [ 97.542816][ T30] usb 8-1: config 0 descriptor?? [ 97.569952][ T30] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 97.569977][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 97.591508][ T30] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 97.592457][ T30] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 97.592483][ T30] usb 8-1: media controller created [ 97.593115][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.597042][ T30] dvb-usb: bulk message failed: -22 (6/0) [ 97.597074][ T30] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 97.616145][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input13 [ 97.617562][ T5816] usb 7-1: Using ep0 maxpacket: 32 [ 97.623558][ T30] dvb-usb: schedule remote query interval to 150 msecs. [ 97.623595][ T30] dvb-usb: bulk message failed: -22 (3/0) [ 97.624652][ T5816] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.624688][ T5816] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 97.626192][ T5816] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 97.626208][ T5816] usb 7-1: can't read configurations, error -71 [ 97.642401][ T30] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 97.747686][ T30] usb 8-1: USB disconnect, device number 11 [ 97.769437][ T30] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 98.291812][ T7776] syz_tun: left allmulticast mode [ 98.411942][ T7809] netlink: 56 bytes leftover after parsing attributes in process `syz.4.471'. [ 98.525898][ T7828] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.528062][ T7828] ªªªªª): renamed from hsr0 (while UP) [ 98.546265][ T7828] FAULT_INJECTION: forcing a failure. [ 98.546265][ T7828] name failslab, interval 1, probability 0, space 0, times 0 [ 98.546287][ T7828] CPU: 1 UID: 0 PID: 7828 Comm: syz.3.477 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.546303][ T7828] Tainted: [L]=SOFTLOCKUP [ 98.546307][ T7828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.546314][ T7828] Call Trace: [ 98.546318][ T7828] [ 98.546323][ T7828] dump_stack_lvl+0x100/0x190 [ 98.546354][ T7828] should_fail_ex.cold+0x5/0xa [ 98.546372][ T7828] should_failslab+0xc2/0x120 [ 98.546407][ T7828] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 98.546423][ T7828] ? sock_alloc_inode+0x26/0x2c0 [ 98.546445][ T7828] ? __pfx_sock_alloc_inode+0x10/0x10 [ 98.546461][ T7828] sock_alloc_inode+0x26/0x2c0 [ 98.546477][ T7828] ? __pfx_sock_alloc_inode+0x10/0x10 [ 98.546492][ T7828] alloc_inode+0x68/0x250 [ 98.546503][ T7828] sock_alloc+0x44/0x280 [ 98.546518][ T7828] ? security_socket_create+0x7f/0x250 [ 98.546537][ T7828] __sock_create+0xc2/0x860 [ 98.546557][ T7828] __sys_socket+0x14d/0x260 [ 98.546568][ T7828] ? __pfx___sys_socket+0x10/0x10 [ 98.546583][ T7828] __x64_sys_socket+0x72/0xb0 [ 98.546598][ T7828] ? lockdep_hardirqs_on+0x7d/0x110 [ 98.546619][ T7828] do_syscall_64+0x123/0x790 [ 98.546639][ T7828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.546652][ T7828] RIP: 0033:0x7fcb8b99e159 [ 98.546662][ T7828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.546674][ T7828] RSP: 002b:00007fcb89bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 98.546688][ T7828] RAX: ffffffffffffffda RBX: 00007fcb8bc25fa0 RCX: 00007fcb8b99e159 [ 98.546696][ T7828] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 000000000000001d [ 98.546704][ T7828] RBP: 00007fcb8ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 98.546713][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.546722][ T7828] R13: 00007fcb8bc26038 R14: 00007fcb8bc25fa0 R15: 00007ffcd18b54e8 [ 98.546744][ T7828] [ 98.546781][ T7828] socket: no more sockets [ 98.560400][ T7823] netlink: 128 bytes leftover after parsing attributes in process `syz.1.473'. [ 98.663128][ T7844] xt_MASQUERADE: bad MAP_IPS. [ 98.663719][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 98.663743][ T7844] netlink: 'syz.3.478': attribute type 2 has an invalid length. [ 98.715252][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 98.715282][ T7849] netlink: 'syz.3.478': attribute type 2 has an invalid length. [ 98.735071][ T66] Bluetooth: hci3: Invalid handle: 0xed88 > 0x0eff [ 99.359219][ T66] Bluetooth: hci3: link tx timeout [ 99.359309][ T66] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 99.635174][ T7900] openvswitch: netlink: IP tunnel dst address not specified [ 99.737213][ T7907] netlink: 'syz.4.492': attribute type 3 has an invalid length. [ 99.737232][ T7907] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 99.794647][ T7907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.492'. [ 100.011301][ T7932] vim2m vim2m.0: vidioc_s_fmt queue busy [ 100.052658][ T7936] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 100.082835][ T7936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.085218][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 100.085236][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 100.110955][ T7937] netlink: 'syz.1.496': attribute type 10 has an invalid length. [ 100.110969][ T7937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.496'. [ 100.113169][ T7937] dummy0: entered promiscuous mode [ 100.164547][ T7948] jffs2: notice: (7948) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 100.210027][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 100.211901][ T7959] netlink: 20 bytes leftover after parsing attributes in process `syz.4.499'. [ 100.231039][ T7961] netlink: 44 bytes leftover after parsing attributes in process `syz.1.500'. [ 100.358008][ T7969] gadgetfs: bound to dummy_udc driver [ 100.417409][ T30] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 100.577448][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 100.580207][ T30] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 100.581113][ T30] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 100.581128][ T30] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 100.583838][ T30] usb 7-1: string descriptor 0 read error: -22 [ 100.583891][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.590899][ T7947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.599251][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.599275][ T30] usb 7-1: MIDIStreaming interface descriptor not found [ 100.602619][ T5809] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 100.605465][ C3] gadgetfs: connected [ 100.609402][ T5808] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 100.612838][ T5809] gadgetfs: disconnected [ 100.668340][ T7955] jffs2: warning: (7955) jffs2_sum_write_sumnode: Empty summary info!!! [ 100.668658][ T7955] ------------[ cut here ]------------ [ 100.668667][ T7955] kernel BUG at fs/jffs2/summary.c:868! [ 100.668685][ T7955] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 100.679602][ T7955] CPU: 3 UID: 0 PID: 7955 Comm: jffs2_gcd_mtd0 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.685630][ T7955] Tainted: [L]=SOFTLOCKUP [ 100.687392][ T7955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.691491][ T7955] RIP: 0010:jffs2_sum_write_sumnode.cold+0x4e/0x174 [ 100.694196][ T7955] Code: 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 2c 01 00 00 8b b3 40 06 00 00 48 c7 c2 c0 92 33 8c 48 c7 c7 c0 8e 33 8c e8 cd 6d f8 ff 90 <0f> 0b e8 05 44 e2 00 65 4c 8b 3d 65 c4 62 13 b8 ff ff 37 00 48 c1 [ 100.702177][ T7955] RSP: 0018:ffffc9000d0d76e0 EFLAGS: 00010286 [ 100.704721][ T7955] RAX: 0000000000000045 RBX: ffff888030d32580 RCX: 0000000000000000 [ 100.708034][ T7955] RDX: 0000000000000045 RSI: ffffffff81ea1339 RDI: fffff52001a1aecd [ 100.711401][ T7955] RBP: ffffc9000d0d7860 R08: 0000000000000007 R09: 0000000000000000 [ 100.714684][ T7955] R10: 8000000000000000 R11: 0000000000000001 R12: ffff888037636080 [ 100.717978][ T7955] R13: 0000000000000000 R14: 0000000000000f40 R15: 0000000000000000 [ 100.721256][ T7955] FS: 0000000000000000(0000) GS:ffff8880d5e56000(0000) knlGS:0000000000000000 [ 100.724963][ T7955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.727787][ T7955] CR2: 00007f942061c73c CR3: 000000003c6d1000 CR4: 0000000000352ef0 [ 100.731111][ T7955] Call Trace: [ 100.732545][ T7955] [ 100.733810][ T7955] ? __pfx_jffs2_sum_write_sumnode+0x10/0x10 [ 100.736316][ T7955] ? __lock_acquire+0x5c0/0x1f40 [ 100.738402][ T7955] ? lock_acquire+0x1d1/0x380 [ 100.740383][ T7955] ? jffs2_do_reserve_space+0xb94/0xf70 [ 100.742689][ T7955] jffs2_do_reserve_space+0xb94/0xf70 [ 100.744985][ T7955] jffs2_reserve_space_gc+0x6b/0xf0 [ 100.747214][ T7955] jffs2_garbage_collect_pristine+0x103/0x870 [ 100.749752][ T7955] ? lock_acquire+0x1d1/0x380 [ 100.751729][ T7955] ? __pfx_jffs2_garbage_collect_pristine+0x10/0x10 [ 100.754496][ T7955] ? do_raw_spin_lock+0x128/0x260 [ 100.756629][ T7955] ? find_held_lock+0x2b/0x80 [ 100.758632][ T7955] ? jffs2_garbage_collect_live+0x15d/0x36b0 [ 100.761154][ T7955] ? jffs2_garbage_collect_live+0x15d/0x36b0 [ 100.763655][ T7955] jffs2_garbage_collect_live+0x1471/0x36b0 [ 100.766160][ T7955] ? __pfx_jffs2_garbage_collect_live+0x10/0x10 [ 100.768799][ T7955] ? is_bad_inode+0xd/0x40 [ 100.770671][ T7955] ? jffs2_gc_fetch_inode+0x109/0x310 [ 100.772939][ T7955] ? __pfx_jffs2_gc_fetch_inode+0x10/0x10 [ 100.775322][ T7955] ? find_held_lock+0x2b/0x80 [ 100.777341][ T7955] ? jffs2_garbage_collect_pass+0xac9/0x1b40 [ 100.779846][ T7955] ? jffs2_garbage_collect_pass+0xac9/0x1b40 [ 100.782359][ T7955] jffs2_garbage_collect_pass+0xb28/0x1b40 [ 100.784845][ T7955] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10 [ 100.787429][ T7955] ? _raw_spin_unlock_irq+0x2e/0x50 [ 100.789612][ T7955] ? sigprocmask+0x1c8/0x320 [ 100.791530][ T7955] ? __pfx_sigprocmask+0x10/0x10 [ 100.793606][ T7955] ? jffs2_garbage_collect_thread+0x518/0x690 [ 100.796165][ T7955] ? jffs2_garbage_collect_thread+0x518/0x690 [ 100.798675][ T7955] jffs2_garbage_collect_thread+0x28d/0x690 [ 100.801163][ T7955] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10 [ 100.803858][ T7955] ? __kthread_parkme+0xbb/0x230 [ 100.805952][ T7955] ? rcu_is_watching+0x13/0xc0 [ 100.807960][ T7955] ? __kthread_parkme+0x18f/0x230 [ 100.810102][ T7955] ? kthread+0x13a/0x450 [ 100.811904][ T7955] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10 [ 100.814599][ T7955] kthread+0x373/0x450 [ 100.816353][ T7955] ? __pfx_kthread+0x10/0x10 [ 100.818306][ T7955] ret_from_fork+0x730/0xd60 [ 100.820253][ T7955] ? __pfx_ret_from_fork+0x10/0x10 [ 100.822408][ T7955] ? rcu_is_watching+0x13/0xc0 [ 100.824453][ T7955] ? __switch_to+0x800/0x10f0 [ 100.826448][ T7955] ? __pfx_kthread+0x10/0x10 [ 100.828371][ T7955] ret_from_fork_asm+0x1a/0x30 [ 100.830360][ T7955] [ 100.831649][ T7955] Modules linked in: [ 100.833687][ T7955] ---[ end trace 0000000000000000 ]--- [ 100.840339][ T7955] RIP: 0010:jffs2_sum_write_sumnode.cold+0x4e/0x174 [ 100.840365][ T7955] Code: 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 2c 01 00 00 8b b3 40 06 00 00 48 c7 c2 c0 92 33 8c 48 c7 c7 c0 8e 33 8c e8 cd 6d f8 ff 90 <0f> 0b e8 05 44 e2 00 65 4c 8b 3d 65 c4 62 13 b8 ff ff 37 00 48 c1 [ 100.840384][ T7955] RSP: 0018:ffffc9000d0d76e0 EFLAGS: 00010286 [ 100.840400][ T7955] RAX: 0000000000000045 RBX: ffff888030d32580 RCX: 0000000000000000 [ 100.840412][ T7955] RDX: 0000000000000045 RSI: ffffffff81ea1339 RDI: fffff52001a1aecd [ 100.840423][ T7955] RBP: ffffc9000d0d7860 R08: 0000000000000007 R09: 0000000000000000 [ 100.840435][ T7955] R10: 8000000000000000 R11: 0000000000000001 R12: ffff888037636080 [ 100.840447][ T7955] R13: 0000000000000000 R14: 0000000000000f40 R15: 0000000000000000 [ 100.840458][ T7955] FS: 0000000000000000(0000) GS:ffff8880d5e56000(0000) knlGS:0000000000000000 [ 100.840494][ T7955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.840507][ T7955] CR2: 00007f942061c73c CR3: 000000003764c000 CR4: 0000000000352ef0 [ 100.840521][ T7955] Kernel panic - not syncing: Fatal exception [ 100.882629][ T7955] Kernel Offset: disabled [ 100.884469][ T7955] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:22:15 Registers: info registers vcpu 0 CPU#0 RAX=000000000006369c RBX=ffffffff8ea91580 RCX=ffffffff8bd16185 RDX=0000000000000001 RSI=ffffffff8c623500 RDI=ffffffff81e0730e RBP=fffffbfff1d522b0 RSP=ffffffff8ea07cf0 R8 =0000000000000000 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=ffffffff81d74be9 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bd146bf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005654c31a45f0 CR3=0000000027020000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa4275d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd74dd7386 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd74dd7386 00007ffd74dd738c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa41a3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa41a3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa41a357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa41a35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa41bf2600 00007ffa41bf25e0 00007ffa41bf25e8 00007ffa41bf2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa41bf25f8 00007ffa41bf25c8 00007ffa41bf2600 00007ffa41bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4bd6de7f52450582 872fc859746e0aa1 334ae72d4f03b11a 6a0c09e56dea542d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3fc4693184038100 85b74af3932fc461 3347418751f0a43c 21d86919c31d9916 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 475ea786fa7e732c 33ebdf07a97146a9 0b4d2863449f65e0 a6975884bb8b0f0f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea90384a3517990a e46cfa6c6fb22e5f c4063bc8583fdf86 e6170e5de699dab9 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636260319a786fb7 9c019d168995ab21 7c258ca7b6b58a8a db7e564bd6de7f52 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffff520006a1cd8 RBX=ffffc9000350eb38 RCX=ffffc9000350eb38 RDX=0000000000000000 RSI=ffff88803540c000 RDI=ffff888035dc0000 RBP=dffffc0000000000 RSP=ffffc9000350e640 R8 =ffffc9000350e7f8 R9 =0000000000000002 R10=0000000000000000 R11=ffffc9000350f138 R12=ffffc9000350e7f8 R13=1ffff920006a1cd8 R14=ffff88803540c000 R15=ffffc9000350e7f8 RIP=ffffffff8a7f3fb3 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f731d8596c0 ffffffff 00c00000 GS =0000 ffff8880d5c56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f731d838d58 CR3=000000003ce11000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99299f2e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99299f2e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556b4d4a08 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000000080606 013ef40000000000 0000000000000000 30726e01ffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005b00348100010 0317000800000000 0000000000000002 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000080606016ca0 04c0a483a8080005 e00300100005d003 00100005c0030210 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005800401 000000080606016c a004c0a483a80800 05e00300100005d0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300100005c00302 100005b003481000 1003170008000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 0003010020000000 243e080680030680 040003000405a003 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000590030fff ffffffffff040580 032010001f80041e 1000060102861a80 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffff88806a628500 RCX=ffffffff821475df RDX=0000000000000000 RSI=ffffffff8c623500 RDI=ffffffff8bd44bc2 RBP=0000000000000287 RSP=ffffc9000062fd28 R8 =0000000000000000 R9 =fffffbfff228a84b R10=0000000000000000 R11=0000000000000001 R12=0000000000000100 R13=0000000000000008 R14=8000000000000100 R15=0000000000000002 RIP=ffffffff8bd44ba1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5d56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f731d837ff8 CR3=000000000eb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e7c06d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4e7c06d6 00007ffe4e7c06dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f731ca3564e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f731ca3568e ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f731ca357f2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f731ca35680 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f731cbf25f8 00007f731cbf25c8 00007f731cbf2600 00007f731cbf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30e331a1bf77d4f2 a48af6e3a48f1570 b0a7ed21c6a896bd a60d0c8cbaf8973a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3217c2c40ad469db 02c321d160dc6ebc 5ec958903a7d6c41 4f63ffe25d1ea2f5 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3fecdedb6f55062b 25c3fd0700e1e2e5 1231f1f4a7bb7b2a 4911f58c2a9eb6eb ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 72807bdf107aa27e c3a84d0db883a0c7 94f9871f8f2a2288 a71d000100000100 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b0fdd5 RDI=ffffffff9bc6eea0 RBP=ffffffff9bc6ee60 RSP=ffffc9000d0d6e88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000003a555043 R12=0000000000000000 R13=0000000000000020 R14=0000000000000009 R15=ffffc9000d0d71a0 RIP=ffffffff85b0fdff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5e56000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f942061c73c CR3=000000003c6d1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f981f000 Opmask01=0000000000000001 Opmask02=000000003f07ffbf Opmask03=0000000000000000 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000b2ef4a0b f3f41fe77ca9d750 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000bf6aa7e9 599ac33532d63400 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8f242df7 b5ce92e86971a524 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000075cf1524f 5297648d00007000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001db710640 b4e5b025f7011641 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f941fea742d 0000000000696469 6d5f7165735f646e 733d524556495244 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000042941fd74910 0000000000545954 505f4c584e5f5953 4e00524556495244 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f312d372f376273 752f322e6463685f 796d6d75642f6d72 6f6674616c702f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a5f393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33515f4350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000