last executing test programs: 4.59157987s ago: executing program 2 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003b0007a737e41bcac743098701"], 0x2c}}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000086964f437633606fba9d9cbfc768d4c2775661401e95a709998eb0ebee1f3419faa133ff1bcae03474f655a22960b6f7ad395baf66e460b797532e2beb5ea7bcf881beb6a57609e8befef461b93c68142341fe6025747d5421dc6f87b0f4e7049a93c5b86cc08b475bdb4f949692c4fa814074b0afae1f3e4064aab22ec80cec17f7498f807624986a16ccc91fa11114c301943d9f827cf2762351782d9ccb5ed9ad091a27bc5cf57810722975f6500a19ffee7048df265fc499254c3d32767fb5c74b1795ba18609e2a7903854f8df100face1ad69c6fdb62f626de348d52a67e11bab5c3", @ANYRES16=r2, @ANYBLOB="0d03000000000000000007000000"], 0x14}, 0x1, 0x2000000}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@none, 0x9, 0x3, 0x9, 'G*F', 0x9, 0xe}]}}}, 0x13) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x120001) r3 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x7, 0x0, 0x8, 0x4, 0x0, 0x0, "427f4d05618664ecb7f952ed7667675bc32afc7ebbfea1deee1e2e520cc38c6a"}}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000380)={r4, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xa4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000045}, 0x440c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x70, r6, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:initrc_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x4008010) 4.490693595s ago: executing program 2 (id=201): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x700000000000000, 0x20008000}, 0x0) 4.242562247s ago: executing program 2 (id=202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100), &(0x7f0000000240)={'U-', 0x1e67}, 0x16, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) mkdir(&(0x7f00000001c0)='./file2\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) (async) rmdir(&(0x7f0000000180)='./file1\x00') (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') close_range(r1, 0xffffffffffffffff, 0x0) 4.092537606s ago: executing program 2 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2803, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0xf) recvmmsg(r3, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000c00)=""/241, 0xf1}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}], 0x5}, 0x3}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002680)=ANY=[@ANYBLOB="d40000001b00030100000000000000000a010100000000000000000000000000e000000100"/64, @ANYRES64=r4, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a001000000000000000000008001f", @ANYRES64=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) r9 = dup2(r5, r5) openat$cgroup_devices(r9, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r10 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x1, 0x0, 0x41100, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_GETVERSION(r11, 0xc0105b08, &(0x7f0000000040)) 991.069167ms ago: executing program 3 (id=274): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x1000000) 918.876352ms ago: executing program 2 (id=276): creat(&(0x7f00000002c0)='./file0\x00', 0x6) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x8) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x221, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffb, 0xa2f}, 0x20) sendto$inet(r0, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x4, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x10000, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x3, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc07, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x29, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000040)={0x7, @win={{0x1355c1d7, 0x9, 0x2, 0x81}, 0x2, 0x401, 0x0, 0xfffffffe, 0x0, 0x1}}) r7 = syz_open_dev$vim2m(&(0x7f0000019080), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0xb, 0x1, 0x0, "adbdeec74e9e4aea00000000000000a902552f08cefca462dda36c7451f8e500"}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5ffffff, 0x12, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 918.487705ms ago: executing program 3 (id=277): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0x81, 0x10000000000000) 901.26597ms ago: executing program 3 (id=278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 850.618767ms ago: executing program 3 (id=279): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000400)={0x0, "ad0edbf6cbe377c77ae933abad2bb32cff8dffe1c4cf67feec803b2c347b5247b085f0e026fd10871460bb4c019e72285cebb382b452cad7d68abdf22df7a4fe", 0x28}, 0x48, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x1}, r2) getsockopt$inet_int(r1, 0x10d, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host, 0x8}, @host, 0x0, 0x0, 0x200000100000000, 0xfffffffffffffffd, 0x0, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f00000003c0)={{@host}, 0x0, 0x9, 0x80}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000140)=0x4) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f0000006900)="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", 0x139, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 850.274286ms ago: executing program 2 (id=280): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x55b000, 0xb1, 0x5}, 0x18) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1d00c2, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x39c124a0c64cafd6, 0x9, 0x50, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0x2e, 0x2}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x2, 0x5, 0xa6, 0x8, 0x2}, 0xf, &(0x7f0000000540)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xedba3e4b5e4e1d2f, 0xc, 0x4, 0x3976}, @ptm_cap={0x3}]}, 0x4, [{0xba, &(0x7f0000000640)=@string={0xba, 0x3, "397e3f98275a31e9231b21e00f7683ba3f84a4d3e1bedb56b2c8152bb9b880cd86d714f71cd28affd115e455c7f6965410585eb4c46ad0e75905706b10c809e27e981899500c26e3fd2cd57a3d31fa97651b7ee6c790927365cfef27bdd4291867bbee870bae8ef1e9060469411e94eac108932863acda08785dc774072020708a95e8c584a54c11a744fa81bbae6b0741f55099cb274dcc7962fc443b486cedf0d6814a99e8417c7c624cf9965cf289e7fb8c4f43702e8e"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x807}}, {0x51, &(0x7f0000000700)=@string={0x51, 0x3, "ff31fe1c97290a618d065b3a186b2ab9962cb46e23561ffa84e7902fec0e03024fa1bda550874092f4ecc88f34079a7f9882f788bd97597599d7693e8cb4975b1788467ed9d184d3c78269dd14b507"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x423}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000940)={0x14, &(0x7f0000000800)={0x20, 0x3, 0xb9, {0xb9, 0x2, "ee41f9061d3eb094d8b9deaedffd01e682385ca5e7e5424c8a5338a4642b115cb667f699e3f0d1ae7885a217fd1e45a141714925ed53b8116385f6a1778594c734fcfb2f413548184130f27e774820511112000ce83f3c460dd7d06c583eb49b926e6d37cb4ac0246ba2e5e0a217439d1e6eb5ad9a4cf2c3a6825b3e175e9167a979303513abd5ef6df2ca25401e040ddb1c18033228453ac658f2d5946ac4f94ce14a32350277bd0ac85ae96e65554b539d1735915305"}}, &(0x7f00000008c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "6b4304822ed3132ce650"}}}, &(0x7f0000000b40)={0x34, &(0x7f0000000980)={0x40, 0x0, 0x72, "28c8f38a6496e733c727442971ea54fc873bbc9f3a90b4f2df5c0d322b401a374d61c31f207f9158ab8e219cc943cbbf471f219b0758db44089e334cfd4d5c04663b07638a97210496d922ae55e17edb4e4cec97800dbf87f9325fdab9b536f7d3f74bf2e5e8f7c53b3f574f2ec45d932934"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1}, &(0x7f0000000a80)={0x20, 0x0, 0x19, {0x17, "fab6169e1845e99b4ad3202226f755d4dfd69057653584"}}, &(0x7f0000000ac0)={0x20, 0x1, 0x1, 0xc0}, &(0x7f0000000b00)={0x20, 0x0, 0x1, 0xe8}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) mknodat$loop(r2, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r7, 0x4b2f, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000480)=0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) open(&(0x7f0000000200)='./file1\x00', 0x129037, 0xe0) close_range(r0, 0xffffffffffffffff, 0x0) 342.003397ms ago: executing program 1 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x8, r2, 0x0, 0x0, 0x1}}, 0x20) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 341.745625ms ago: executing program 1 (id=293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000040)={r4}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x3ec0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000080)='./file0\x00') (async) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x30}, 0x48004) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r11 = fanotify_init(0xf00, 0x0) fanotify_mark(r11, 0x105, 0x5000003a, r10, 0x0) (async) sendfile(r0, r1, &(0x7f0000000180), 0x7) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r12, &(0x7f0000000280)=[{&(0x7f0000000500)=""/196, 0xc4}], 0x1, 0x200000, 0x1) 241.344725ms ago: executing program 1 (id=294): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f0000000040)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) (async) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) (async) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) move_pages(0x0, 0x9, &(0x7f0000000140)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x2) r2 = gettid() socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001400)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r1, &(0x7f0000001400)={0x8, {"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", 0x1000}}, 0x1006) 240.762671ms ago: executing program 0 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0x81, 0x10000000000000) 239.890006ms ago: executing program 0 (id=296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @tail_call, @map_fd={0x18, 0x2}, @ldst={0x3, 0x2, 0x1, 0xa, 0x2, 0x6, 0x8}, @exit]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xa5, &(0x7f00000000c0)=""/165, 0x41100, 0x48, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x3, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={0xffffffffffffffff, r0, 0x0, r1}, 0x10) r2 = open(&(0x7f0000000380)='./file0\x00', 0x448480, 0x0) (async) lsetxattr$trusted_overlay_origin(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x2) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') (async) r3 = creat(&(0x7f0000000500)='./file0\x00', 0x0) (async, rerun: 32) r4 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) (rerun: 32) r5 = dup(r4) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000580)={0x1, 0x536bdce97474b583, 0x0, "54a09200a40f567e49f3685c6597d7da3622b0fdfd9c0e241cd222bb17b0425c", 0x34325258}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10, r5}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r6, r2, 0x0, 0x10, 0x0, @void, @value=r1}, 0x20) (async) sendfile(r5, r4, &(0x7f00000006c0)=0xd6, 0x5) (async) getsockname(r5, &(0x7f0000000700)=@pppol2tpin6, &(0x7f0000000780)=0x80) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000800)=""/185) (async) r8 = syz_open_dev$radio(&(0x7f00000008c0), 0x0, 0x2) ioctl$VIDIOC_S_MODULATOR(r8, 0x40445637, &(0x7f0000000900)={0x7, "4881fc2b9c67571182b3af664540b03afc8339152bb141b56d986f553fb99247", 0x20, 0x764, 0x101, 0x2, 0x3}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b00)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xf, 0xd, &(0x7f0000000980)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x2, 0x8, 0x0, 0xfcd, 0xef65}, @ldst={0x1, 0x3, 0x6, 0xc, 0xb, 0xffffffffffffffff}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000a00)='GPL\x00', 0x4, 0xa6, &(0x7f0000000a40)=""/166, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r2, 0x7, 0x0, &(0x7f0000000b40)=[{0x1, 0x2, 0x4, 0x8}, {0x3, 0x3, 0xd, 0x8}, {0x1, 0x3, 0x1, 0x6}, {0x3, 0x5, 0x1, 0x6}, {0x2, 0x1, 0x9, 0x5}, {0x2, 0x4, 0xb}, {0x5, 0x2, 0x10, 0xc}], 0x10, 0x3, @void, @value}, 0x94) r10 = syz_open_dev$dmmidi(&(0x7f0000000c80), 0x10001, 0x341000) tee(r10, r3, 0xf, 0x1) (async, rerun: 64) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000cc0)={0x52, 0x4, 0x0, {0xb, 0xdf}, {0x4, 0x81}, @cond=[{0x3, 0x1000, 0x7, 0x9, 0x80, 0x9e74}, {0x1, 0x5, 0x9, 0x5, 0x9, 0xff}]}) (async, rerun: 64) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r11, 0x8004745a, &(0x7f0000000d00)) (async) epoll_create(0x6) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000d40)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000d80)={{r7}, r12, 0x10, @unused=[0x8, 0x1f5, 0x2, 0x2], @name="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"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000001d80)=@arm64) 172.583951ms ago: executing program 0 (id=297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @mss, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 172.304533ms ago: executing program 0 (id=298): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x60000000) 158.546264ms ago: executing program 0 (id=299): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x8}}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000140000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 80.902728ms ago: executing program 0 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x15) dup(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080002fc00000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 80.694607ms ago: executing program 1 (id=301): mount$cgroup(0x0, &(0x7f0000000600)='.\x00', 0x0, 0x1010044, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x24, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000f50000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) 78.851719ms ago: executing program 1 (id=302): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x8080000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @const, @union={0x5, 0x4, 0x0, 0x5, 0x1, 0x9, [{0xd, 0x2, 0x5}, {0xe, 0x5, 0x41a}, {0x6, 0x5, 0xfffffff8}, {0xf, 0x1, 0x5d8}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @int, @restrict, @func, @fwd, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}]}]}}, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.487046ms ago: executing program 1 (id=303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0118000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x700}}, 0x14}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x4e22, 0x3ff, @local, 0xa0}}}, 0x88) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0xc000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) 2.219785ms ago: executing program 3 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000003c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0x81, 0x10000000000000) 0s ago: executing program 3 (id=305): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0xff7ffd03, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7fbf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 0s ago: executing program 1 (id=306): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x108) (async) r1 = socket$packet(0x11, 0xa, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0xff) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x6) close(0x3) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0xc400, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES8=r5]) (async) read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x40000, 0xfffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x185083) (async) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600000000000000000000000000000000000000708700f87400", "2809e8dbe108598948224ad54afac11d875397bd01177d3d458dd4992861ac0000000000000000000000000000df000000000000000000000000000000efff00", "8b1c551265406c00306003d8a0f4bd00"}}) (async) waitid(0x0, 0x0, 0x0, 0x1000000, 0x0) r11 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r11, 0x2, 0x0, 0x0) (async) ioctl$LOOP_SET_FD(r8, 0x4c00, r9) (async) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) kernel console output (not intermixed with test programs): 87): avc: denied { name_bind } for pid=5883 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.091703][ T5889] cgroup: Unknown subsys name 'net' [ 42.238357][ T5889] cgroup: Unknown subsys name 'cpuset' [ 42.242483][ T5889] cgroup: Unknown subsys name 'rlimit' [ 42.463537][ T5930] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.159789][ T5889] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.068032][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 46.068046][ T40] audit: type=1400 audit(1744376322.333:105): avc: denied { execmem } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.242586][ T40] audit: type=1400 audit(1744376322.503:106): avc: denied { create } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.250061][ T40] audit: type=1400 audit(1744376322.503:107): avc: denied { read write } for pid=5939 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.258564][ T40] audit: type=1400 audit(1744376322.503:108): avc: denied { open } for pid=5939 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.266159][ T40] audit: type=1400 audit(1744376322.513:109): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="socket:[1946]" dev="sockfs" ino=1946 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.290268][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.292700][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.295053][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.295153][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.299743][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.300093][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.302805][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.304280][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.305239][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.306172][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.306367][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.306775][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.307304][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.307624][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.308148][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.310087][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.312893][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.318612][ T40] audit: type=1400 audit(1744376322.573:110): avc: denied { read } for pid=5941 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.319426][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.321025][ T40] audit: type=1400 audit(1744376322.573:111): avc: denied { open } for pid=5941 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.323466][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.326761][ T40] audit: type=1400 audit(1744376322.573:112): avc: denied { mounton } for pid=5941 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.331118][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.535432][ T40] audit: type=1400 audit(1744376322.803:113): avc: denied { module_request } for pid=5940 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.570724][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.589809][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 46.641399][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 46.725012][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 46.827384][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.829393][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.831403][ T5940] bridge_slave_0: entered allmulticast mode [ 46.834867][ T5940] bridge_slave_0: entered promiscuous mode [ 46.858114][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.860366][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.862397][ T5939] bridge_slave_0: entered allmulticast mode [ 46.865083][ T5939] bridge_slave_0: entered promiscuous mode [ 46.867879][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.869943][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.871969][ T5940] bridge_slave_1: entered allmulticast mode [ 46.874255][ T5940] bridge_slave_1: entered promiscuous mode [ 46.892907][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.895040][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.897121][ T5939] bridge_slave_1: entered allmulticast mode [ 46.899592][ T5939] bridge_slave_1: entered promiscuous mode [ 46.986645][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.991443][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.007769][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.010401][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.012988][ T5942] bridge_slave_0: entered allmulticast mode [ 47.018667][ T5942] bridge_slave_0: entered promiscuous mode [ 47.023250][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.027499][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.082163][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.085457][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.087514][ T5942] bridge_slave_1: entered allmulticast mode [ 47.089852][ T5942] bridge_slave_1: entered promiscuous mode [ 47.108113][ T5940] team0: Port device team_slave_0 added [ 47.109919][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.111769][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.113638][ T5941] bridge_slave_0: entered allmulticast mode [ 47.116152][ T5941] bridge_slave_0: entered promiscuous mode [ 47.146474][ T5940] team0: Port device team_slave_1 added [ 47.148368][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.150367][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.152322][ T5941] bridge_slave_1: entered allmulticast mode [ 47.154708][ T5941] bridge_slave_1: entered promiscuous mode [ 47.187117][ T5939] team0: Port device team_slave_0 added [ 47.225684][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.229241][ T5939] team0: Port device team_slave_1 added [ 47.253334][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.257770][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.275653][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.278199][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.287573][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.293726][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.329718][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.331628][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.339367][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.390951][ T5942] team0: Port device team_slave_0 added [ 47.393239][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.395265][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.402206][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.408905][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.410760][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.417821][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.422424][ T5941] team0: Port device team_slave_0 added [ 47.425381][ T5942] team0: Port device team_slave_1 added [ 47.449896][ T5941] team0: Port device team_slave_1 added [ 47.467549][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.469666][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.476826][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.526705][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.528650][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.535854][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.571722][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.573748][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.580683][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.587886][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.589890][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.597030][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.602709][ T5940] hsr_slave_0: entered promiscuous mode [ 47.604799][ T5940] hsr_slave_1: entered promiscuous mode [ 47.622731][ T5939] hsr_slave_0: entered promiscuous mode [ 47.624726][ T5939] hsr_slave_1: entered promiscuous mode [ 47.626520][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.628697][ T5939] Cannot create hsr debugfs directory [ 47.762392][ T5941] hsr_slave_0: entered promiscuous mode [ 47.764411][ T5941] hsr_slave_1: entered promiscuous mode [ 47.766971][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.769542][ T5941] Cannot create hsr debugfs directory [ 47.773315][ T5942] hsr_slave_0: entered promiscuous mode [ 47.775515][ T5942] hsr_slave_1: entered promiscuous mode [ 47.777356][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.779423][ T5942] Cannot create hsr debugfs directory [ 48.085407][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.090967][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.095963][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.099886][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.135860][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.146593][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.158333][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.163379][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.199390][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.206017][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.220165][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.226370][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.268935][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.273457][ T5939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.278606][ T5939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.282418][ T5939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.290323][ T5939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.305674][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.315750][ T5957] Bluetooth: hci1: command tx timeout [ 48.321755][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.323760][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.335925][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.337852][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.367936][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.397171][ T5957] Bluetooth: hci0: command tx timeout [ 48.404873][ T5957] Bluetooth: hci3: command tx timeout [ 48.404896][ T5948] Bluetooth: hci2: command tx timeout [ 48.422492][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.430560][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.435356][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.437346][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.443538][ T40] audit: type=1400 audit(1744376324.703:114): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.444090][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.451749][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.461174][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.473729][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.490561][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.492505][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.499423][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.501432][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.504569][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.513192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.515152][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.529452][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.531892][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.561381][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.621392][ T5940] veth0_vlan: entered promiscuous mode [ 48.634267][ T5940] veth1_vlan: entered promiscuous mode [ 48.656705][ T5940] veth0_macvtap: entered promiscuous mode [ 48.660826][ T5940] veth1_macvtap: entered promiscuous mode [ 48.678326][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.682101][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.687539][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.693529][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.697323][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.699752][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.702059][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.728643][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.743953][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.764117][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.767849][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.791136][ T5942] veth0_vlan: entered promiscuous mode [ 48.798484][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.801232][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.808697][ T5942] veth1_vlan: entered promiscuous mode [ 48.817514][ T5939] veth0_vlan: entered promiscuous mode [ 48.827046][ T5939] veth1_vlan: entered promiscuous mode [ 48.830958][ T5941] veth0_vlan: entered promiscuous mode [ 48.843760][ T5941] veth1_vlan: entered promiscuous mode [ 48.849991][ T5942] veth0_macvtap: entered promiscuous mode [ 48.853850][ T5942] veth1_macvtap: entered promiscuous mode [ 48.860539][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.872466][ T5939] veth0_macvtap: entered promiscuous mode [ 48.881123][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.884263][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.889676][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.893553][ T5939] veth1_macvtap: entered promiscuous mode [ 48.899745][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.903091][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.907423][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.909700][ T5941] veth0_macvtap: entered promiscuous mode [ 48.919436][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.922159][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.924516][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.927145][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.937225][ T5941] veth1_macvtap: entered promiscuous mode [ 48.944991][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.947868][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.950774][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.953681][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.957423][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.969362][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.973040][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.976016][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.978891][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.982365][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.985216][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.988135][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.990798][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.993595][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.996828][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.000322][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.005858][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.016392][ T6005] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.018877][ T6005] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.021204][ T6005] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.023537][ T6005] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.027258][ T6005] Zero length message leads to an empty skb [ 49.028396][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.031708][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.034376][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.037646][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.040973][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.043732][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.047397][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.059905][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.062756][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.072150][ T5939] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.074708][ T5939] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.077832][ T5939] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.080181][ T5939] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.088346][ T5941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.090723][ T5941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.093088][ T5941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.096106][ T5941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.113867][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.116881][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.178790][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.180982][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.186867][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.189116][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.213634][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.216315][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.233315][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.236000][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.242232][ T6016] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 49.247418][ T6016] exFAT-fs (nullb0): invalid boot record signature [ 49.249786][ T6016] exFAT-fs (nullb0): failed to read boot sector [ 49.251988][ T6016] exFAT-fs (nullb0): failed to recognize exfat type [ 49.307037][ T6024] ======================================================= [ 49.307037][ T6024] WARNING: The mand mount option has been deprecated and [ 49.307037][ T6024] and is ignored by this kernel. Remove the mand [ 49.307037][ T6024] option from the mount to silence this warning. [ 49.307037][ T6024] ======================================================= [ 49.327616][ T6022] bridge_slave_0: default FDB implementation only supports local addresses [ 49.362646][ T6030] wg1: entered promiscuous mode [ 49.364017][ T6030] wg1: entered allmulticast mode [ 49.420076][ T6040] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 49.439497][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 49.524692][ T6061] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 49.527159][ T6061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.529471][ T6061] IPv6: NLM_F_CREATE should be set when creating new route [ 49.547399][ T6065] wg1: entered promiscuous mode [ 49.549159][ T6065] wg1: entered allmulticast mode [ 49.581636][ T6067] netlink: 112 bytes leftover after parsing attributes in process `syz.3.22'. [ 49.634689][ T6074] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 49.667005][ T6074] process 'syz.0.23' launched '/dev/fd/3' with NULL argv: empty string added [ 49.929790][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 49.934228][ T6106] netlink: 112 bytes leftover after parsing attributes in process `syz.0.34'. [ 50.241549][ T6134] netlink: 112 bytes leftover after parsing attributes in process `syz.3.43'. [ 50.395754][ T5948] Bluetooth: hci1: command tx timeout [ 50.479282][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 50.481599][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.54'. [ 50.485419][ T5948] Bluetooth: hci3: command tx timeout [ 50.485434][ T5957] Bluetooth: hci0: command tx timeout [ 50.487070][ T5948] Bluetooth: hci2: command tx timeout [ 50.687372][ T6184] netlink: 'syz.2.65': attribute type 2 has an invalid length. [ 50.687414][ T6185] netlink: 'syz.2.65': attribute type 2 has an invalid length. [ 50.690288][ T6184] netlink: 'syz.2.65': attribute type 11 has an invalid length. [ 50.694116][ T6185] netlink: 'syz.2.65': attribute type 11 has an invalid length. [ 50.694133][ T6184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 50.697919][ T6185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 50.720472][ T6192] wg1: entered promiscuous mode [ 50.721967][ T6192] wg1: entered allmulticast mode [ 50.858285][ T6202] warning: `syz.2.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.027308][ T6226] vim2m vim2m.0: vidioc_s_fmt queue busy [ 51.030692][ T6226] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.100068][ T40] kauditd_printk_skb: 125 callbacks suppressed [ 51.100081][ T40] audit: type=1400 audit(1744376327.363:240): avc: denied { getopt } for pid=6225 comm="syz.3.82" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.182729][ T6251] wg1: entered promiscuous mode [ 51.184204][ T6251] wg1: entered allmulticast mode [ 51.231010][ T40] audit: type=1400 audit(1744376327.493:241): avc: denied { mount } for pid=6235 comm="syz.1.83" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.344832][ T6262] netlink: 576 bytes leftover after parsing attributes in process `syz.1.83'. [ 51.364820][ T40] audit: type=1400 audit(1744376327.623:242): avc: denied { connect } for pid=6264 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 51.404698][ T834] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.425360][ T40] audit: type=1400 audit(1744376327.693:243): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.479330][ T6265] could not allocate digest TFM handle cryptd(blake2b-160) [ 51.500456][ T40] audit: type=1400 audit(1744376327.763:244): avc: denied { mount } for pid=6274 comm="syz.1.90" name="/" dev="ramfs" ino=11310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 51.508015][ T40] audit: type=1400 audit(1744376327.773:245): avc: denied { write } for pid=6274 comm="syz.1.90" name="icmp6" dev="proc" ino=4026533088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 51.554700][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 51.557560][ T834] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 51.559777][ T834] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.562340][ T834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.565035][ T834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.571609][ T834] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.575113][ T834] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.577991][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.784860][ T6012] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.785048][ T834] usb 5-1: usb_control_msg returned -32 [ 51.789188][ T834] usbtmc 5-1:16.0: can't read capabilities [ 51.944729][ T6012] usb 6-1: Using ep0 maxpacket: 16 [ 51.948981][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.952774][ T6012] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 51.956054][ T6012] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 51.959554][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.964495][ T6012] usb 6-1: config 0 descriptor?? [ 52.137152][ T40] audit: type=1400 audit(1744376328.403:246): avc: denied { write } for pid=6245 comm="syz.0.86" name="usbtmc0" dev="devtmpfs" ino=2781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 52.155579][ T40] audit: type=1400 audit(1744376328.403:247): avc: denied { wake_alarm } for pid=6245 comm="syz.0.86" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.474796][ T5948] Bluetooth: hci1: command tx timeout [ 52.554879][ T5948] Bluetooth: hci2: command tx timeout [ 52.564732][ T5948] Bluetooth: hci0: command tx timeout [ 52.567141][ T5948] Bluetooth: hci3: command tx timeout [ 52.823119][ T40] audit: type=1400 audit(1744376329.083:248): avc: denied { connect } for pid=6309 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.828328][ T40] audit: type=1400 audit(1744376329.093:249): avc: denied { connect } for pid=6309 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.062346][ T6248] syz.3.82 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 53.083948][ T6248] CPU: 2 UID: 0 PID: 6248 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 53.083969][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.083978][ T6248] Call Trace: [ 53.083984][ T6248] [ 53.083989][ T6248] dump_stack_lvl+0x16c/0x1f0 [ 53.084031][ T6248] dump_header+0x101/0x930 [ 53.084051][ T6248] oom_kill_process+0x270/0xa60 [ 53.084067][ T6248] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 53.084090][ T6248] out_of_memory+0x350/0x1700 [ 53.084107][ T6248] ? __lock_acquire+0xaa4/0x1ba0 [ 53.084124][ T6248] ? __pfx_out_of_memory+0x10/0x10 [ 53.084148][ T6248] mem_cgroup_out_of_memory+0x205/0x270 [ 53.084169][ T6248] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 53.084195][ T6248] ? do_raw_spin_unlock+0x172/0x230 [ 53.084216][ T6248] try_charge_memcg+0x8ca/0xfa0 [ 53.084237][ T6248] ? __pfx_try_charge_memcg+0x10/0x10 [ 53.084274][ T6248] ? __print_lock_name+0xd1/0xe0 [ 53.084294][ T6248] ? rcu_read_unlock+0x17/0x60 [ 53.084320][ T6248] charge_memcg+0x8a/0x230 [ 53.084338][ T6248] __mem_cgroup_charge+0x2b/0x1e0 [ 53.084358][ T6248] shmem_alloc_and_add_folio+0x514/0xc20 [ 53.084381][ T6248] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 53.084401][ T6248] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 53.084422][ T6248] shmem_get_folio_gfp+0x687/0x1530 [ 53.084442][ T6248] ? __lock_acquire+0xaa4/0x1ba0 [ 53.084455][ T6248] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 53.084473][ T6248] ? __pte_offset_map_lock+0x155/0x2f0 [ 53.084497][ T6248] shmem_write_begin+0x160/0x300 [ 53.084516][ T6248] ? __pfx_shmem_write_begin+0x10/0x10 [ 53.084535][ T6248] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 53.084558][ T6248] ? __pfx_timestamp_truncate+0x10/0x10 [ 53.084580][ T6248] generic_perform_write+0x3cd/0x930 [ 53.084606][ T6248] ? __pfx_generic_perform_write+0x10/0x10 [ 53.084624][ T6248] ? inode_needs_update_time.part.0+0x191/0x270 [ 53.084661][ T6248] shmem_file_write_iter+0x10e/0x140 [ 53.084682][ T6248] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 53.084711][ T6248] __kernel_write_iter+0x317/0xa90 [ 53.084738][ T6248] ? __pfx___kernel_write_iter+0x10/0x10 [ 53.084761][ T6248] ? __up_read+0x1f8/0x750 [ 53.084782][ T6248] ? dump_user_range+0x73d/0xb30 [ 53.084810][ T6248] dump_user_range+0x418/0xb30 [ 53.084841][ T6248] ? __pfx_dump_user_range+0x10/0x10 [ 53.084871][ T6248] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 53.084896][ T6248] ? __pfx_writenote+0x10/0x10 [ 53.084919][ T6248] elf_core_dump+0x288a/0x3a90 [ 53.084948][ T6248] ? __pfx_elf_core_dump+0x10/0x10 [ 53.084963][ T6248] ? kasan_save_stack+0x42/0x60 [ 53.084977][ T6248] ? kasan_save_stack+0x33/0x60 [ 53.084991][ T6248] ? kasan_save_track+0x14/0x30 [ 53.085004][ T6248] ? __kasan_kmalloc+0xaa/0xb0 [ 53.085018][ T6248] ? do_coredump+0x17aa/0x4480 [ 53.085038][ T6248] ? get_signal+0x22e3/0x26d0 [ 53.085058][ T6248] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 53.085088][ T6248] ? 0xffffffffff600000 [ 53.085143][ T6248] ? do_coredump+0x3183/0x4480 [ 53.085164][ T6248] do_coredump+0x3183/0x4480 [ 53.085196][ T6248] ? __pfx_do_coredump+0x10/0x10 [ 53.085221][ T6248] ? stack_trace_save+0x8e/0xc0 [ 53.085242][ T6248] ? __pfx_stack_trace_save+0x10/0x10 [ 53.085262][ T6248] ? stack_depot_save_flags+0x28/0xa50 [ 53.085288][ T6248] ? __lock_acquire+0xaa4/0x1ba0 [ 53.085308][ T6248] ? __kasan_slab_free+0x51/0x70 [ 53.085323][ T6248] ? kmem_cache_free+0x2d4/0x4d0 [ 53.085337][ T6248] ? __sigqueue_free+0xba/0x2a0 [ 53.085349][ T6248] ? get_signal+0xcba/0x26d0 [ 53.085368][ T6248] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 53.085420][ T6248] ? proc_coredump_connector+0x2d1/0x4f0 [ 53.085439][ T6248] ? __pfx_proc_coredump_connector+0x10/0x10 [ 53.085462][ T6248] ? rcu_is_watching+0x12/0xc0 [ 53.085486][ T6248] get_signal+0x22e3/0x26d0 [ 53.085510][ T6248] ? force_sig_fault+0xc4/0x100 [ 53.085532][ T6248] ? __pfx_get_signal+0x10/0x10 [ 53.085560][ T6248] arch_do_signal_or_restart+0x8f/0x7d0 [ 53.085582][ T6248] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 53.085599][ T6248] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 53.085637][ T6248] irqentry_exit_to_user_mode+0x13f/0x280 [ 53.085659][ T6248] asm_exc_page_fault+0x26/0x30 [ 53.085673][ T6248] RIP: 0033:0x7f721dd8d171 [ 53.085685][ T6248] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 53.085700][ T6248] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 53.085713][ T6248] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 53.085723][ T6248] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 53.085732][ T6248] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 53.085740][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.085749][ T6248] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 53.085769][ T6248] [ 53.238714][ T6248] memory: usage 307200kB, limit 307200kB, failcnt 13988 [ 53.241394][ T6248] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 53.245925][ T6248] kmem: usage 5908kB, limit 9007199254740988kB, failcnt 0 [ 53.247967][ T6248] Memory cgroup stats for /syz3: [ 53.248170][ T6248] cache 308166656 [ 53.251337][ T6248] rss 270336 [ 53.252337][ T6248] rss_huge 0 [ 53.253365][ T6248] shmem 308166656 [ 53.254388][ T6248] mapped_file 0 [ 53.255508][ T6248] dirty 0 [ 53.256380][ T6248] writeback 0 [ 53.257369][ T6248] workingset_refault_anon 12 [ 53.258640][ T6248] workingset_refault_file 109 [ 53.259981][ T6248] swap 127942656 [ 53.260984][ T6248] swapcached 53248 [ 53.262032][ T6248] pgpgin 107635 [ 53.263007][ T6248] pgpgout 32327 [ 53.263985][ T6248] pgfault 8517 [ 53.265051][ T6248] pgmajfault 14 [ 53.266033][ T6248] inactive_anon 128602112 [ 53.267563][ T6248] active_anon 179793920 [ 53.269121][ T6248] inactive_file 0 [ 53.270111][ T6248] active_file 0 [ 53.271061][ T6248] unevictable 0 [ 53.272039][ T6248] hierarchical_memory_limit 314572800 [ 53.273523][ T6248] hierarchical_memsw_limit 9223372036854771712 [ 53.275316][ T6248] total_cache 308166656 [ 53.276697][ T6248] total_rss 270336 [ 53.277742][ T6248] total_rss_huge 0 [ 53.278764][ T6248] total_shmem 308166656 [ 53.279978][ T6248] total_mapped_file 0 [ 53.281079][ T6248] total_dirty 0 [ 53.282034][ T6248] total_writeback 0 [ 53.283116][ T6248] total_workingset_refault_anon 12 [ 53.284734][ T6248] total_workingset_refault_file 109 [ 53.286258][ T6248] total_swap 127942656 [ 53.287774][ T6248] total_swapcached 53248 [ 53.289228][ T6248] total_pgpgin 107635 [ 53.290389][ T6248] total_pgpgout 32327 [ 53.291499][ T6248] total_pgfault 8517 [ 53.292599][ T6248] total_pgmajfault 14 [ 53.293901][ T6248] total_inactive_anon 128602112 [ 53.295391][ T6248] total_active_anon 179793920 [ 53.296779][ T6248] total_inactive_file 0 [ 53.297946][ T6248] total_active_file 0 [ 53.299097][ T6248] total_unevictable 0 [ 53.300355][ T6248] anon_cost 0 [ 53.301291][ T6248] file_cost 0 [ 53.302225][ T6248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6248,uid=0 [ 53.306360][ T6248] Memory cgroup out of memory: Killed process 6248 (syz.3.82) total-vm:98212kB, anon-rss:944kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 53.417792][ T6260] syz.3.82 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 53.420578][ T6260] CPU: 2 UID: 0 PID: 6260 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 53.420591][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.420598][ T6260] Call Trace: [ 53.420601][ T6260] [ 53.420605][ T6260] dump_stack_lvl+0x16c/0x1f0 [ 53.420623][ T6260] dump_header+0x101/0x930 [ 53.420637][ T6260] oom_kill_process+0x270/0xa60 [ 53.420648][ T6260] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 53.420664][ T6260] out_of_memory+0x350/0x1700 [ 53.420676][ T6260] ? __lock_acquire+0xaa4/0x1ba0 [ 53.420689][ T6260] ? __pfx_out_of_memory+0x10/0x10 [ 53.420704][ T6260] mem_cgroup_out_of_memory+0x205/0x270 [ 53.420718][ T6260] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 53.420736][ T6260] ? do_raw_spin_unlock+0x172/0x230 [ 53.420749][ T6260] try_charge_memcg+0x8ca/0xfa0 [ 53.420763][ T6260] ? __pfx_try_charge_memcg+0x10/0x10 [ 53.420774][ T6260] ? __print_lock_name+0xd1/0xe0 [ 53.420787][ T6260] ? rcu_read_unlock+0x17/0x60 [ 53.420802][ T6260] charge_memcg+0x8a/0x230 [ 53.420814][ T6260] __mem_cgroup_charge+0x2b/0x1e0 [ 53.420827][ T6260] shmem_alloc_and_add_folio+0x514/0xc20 [ 53.420841][ T6260] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 53.420853][ T6260] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 53.420866][ T6260] shmem_get_folio_gfp+0x687/0x1530 [ 53.420879][ T6260] ? __lock_acquire+0xaa4/0x1ba0 [ 53.420888][ T6260] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 53.420899][ T6260] ? __pte_offset_map_lock+0x155/0x2f0 [ 53.420914][ T6260] shmem_write_begin+0x160/0x300 [ 53.420926][ T6260] ? __pfx_shmem_write_begin+0x10/0x10 [ 53.420938][ T6260] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 53.420953][ T6260] ? __pfx_timestamp_truncate+0x10/0x10 [ 53.420967][ T6260] generic_perform_write+0x3cd/0x930 [ 53.420981][ T6260] ? __pfx_generic_perform_write+0x10/0x10 [ 53.420993][ T6260] ? inode_needs_update_time.part.0+0x191/0x270 [ 53.421007][ T6260] shmem_file_write_iter+0x10e/0x140 [ 53.421021][ T6260] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 53.421034][ T6260] __kernel_write_iter+0x317/0xa90 [ 53.421051][ T6260] ? __pfx___kernel_write_iter+0x10/0x10 [ 53.421067][ T6260] ? __up_read+0x1f8/0x750 [ 53.421079][ T6260] ? dump_user_range+0x73d/0xb30 [ 53.421094][ T6260] ? copy_mc_enhanced_fast_string+0x6/0xf [ 53.421106][ T6260] dump_user_range+0x418/0xb30 [ 53.421125][ T6260] ? __pfx_dump_user_range+0x10/0x10 [ 53.421140][ T6260] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 53.421156][ T6260] ? __pfx_writenote+0x10/0x10 [ 53.421169][ T6260] elf_core_dump+0x288a/0x3a90 [ 53.421188][ T6260] ? __pfx_elf_core_dump+0x10/0x10 [ 53.421197][ T6260] ? kasan_save_stack+0x42/0x60 [ 53.421206][ T6260] ? kasan_save_stack+0x33/0x60 [ 53.421214][ T6260] ? kasan_save_track+0x14/0x30 [ 53.421222][ T6260] ? __kasan_kmalloc+0xaa/0xb0 [ 53.421231][ T6260] ? do_coredump+0x17aa/0x4480 [ 53.421244][ T6260] ? get_signal+0x22e3/0x26d0 [ 53.421257][ T6260] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 53.421275][ T6260] ? 0xffffffffff600000 [ 53.421304][ T6260] ? do_coredump+0x3183/0x4480 [ 53.421318][ T6260] do_coredump+0x3183/0x4480 [ 53.421338][ T6260] ? __pfx_do_coredump+0x10/0x10 [ 53.421353][ T6260] ? stack_trace_save+0x8e/0xc0 [ 53.421367][ T6260] ? __pfx_stack_trace_save+0x10/0x10 [ 53.421380][ T6260] ? stack_depot_save_flags+0x28/0xa50 [ 53.421392][ T6260] ? __lock_acquire+0xaa4/0x1ba0 [ 53.421403][ T6260] ? __kasan_slab_free+0x51/0x70 [ 53.421413][ T6260] ? kmem_cache_free+0x2d4/0x4d0 [ 53.421421][ T6260] ? __sigqueue_free+0xba/0x2a0 [ 53.421429][ T6260] ? get_signal+0xcba/0x26d0 [ 53.421441][ T6260] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 53.421473][ T6260] ? proc_coredump_connector+0x2d1/0x4f0 [ 53.421485][ T6260] ? __pfx_proc_coredump_connector+0x10/0x10 [ 53.421499][ T6260] ? rcu_is_watching+0x12/0xc0 [ 53.421514][ T6260] get_signal+0x22e3/0x26d0 [ 53.421530][ T6260] ? force_sig_fault+0xc4/0x100 [ 53.421544][ T6260] ? __pfx_get_signal+0x10/0x10 [ 53.421561][ T6260] arch_do_signal_or_restart+0x8f/0x7d0 [ 53.421575][ T6260] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 53.421586][ T6260] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 53.421618][ T6260] irqentry_exit_to_user_mode+0x13f/0x280 [ 53.421636][ T6260] asm_exc_page_fault+0x26/0x30 [ 53.421646][ T6260] RIP: 0033:0x7f721dd8d171 [ 53.421654][ T6260] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 53.421663][ T6260] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 53.421672][ T6260] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 53.421678][ T6260] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 53.421684][ T6260] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 53.421690][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.421695][ T6260] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 53.421708][ T6260] [ 53.421764][ T6260] memory: usage 306736kB, limit 307200kB, failcnt 15100 [ 53.564904][ T6260] memory+swap: usage 396264kB, limit 9007199254740988kB, failcnt 0 [ 53.574975][ T6260] kmem: usage 5856kB, limit 9007199254740988kB, failcnt 0 [ 53.576975][ T6260] Memory cgroup stats for /syz3: [ 53.577075][ T6260] cache 272211968 [ 53.579507][ T6260] rss 253952 [ 53.580446][ T6260] rss_huge 0 [ 53.581367][ T6260] shmem 272211968 [ 53.582394][ T6260] mapped_file 0 [ 53.583377][ T6260] dirty 0 [ 53.584214][ T6260] writeback 0 [ 53.585229][ T6260] workingset_refault_anon 12 [ 53.586519][ T6260] workingset_refault_file 109 [ 53.587823][ T6260] swap 127967232 [ 53.588838][ T6260] swapcached 28672 [ 53.589896][ T6260] pgpgin 108403 [ 53.590876][ T6260] pgpgout 41883 [ 53.591864][ T6260] pgfault 8564 [ 53.592836][ T6260] pgmajfault 15 [ 53.593822][ T6260] inactive_anon 170233856 [ 53.595603][ T6260] active_anon 98496512 [ 53.596777][ T6260] inactive_file 0 [ 53.597804][ T6260] active_file 0 [ 53.598789][ T6260] unevictable 0 [ 53.599790][ T6260] hierarchical_memory_limit 314572800 [ 53.601278][ T6260] hierarchical_memsw_limit 9223372036854771712 [ 53.602977][ T6260] total_cache 272211968 [ 53.604159][ T6260] total_rss 253952 [ 53.605314][ T6260] total_rss_huge 0 [ 53.606373][ T6260] total_shmem 272211968 [ 53.607539][ T6260] total_mapped_file 0 [ 53.608654][ T6260] total_dirty 0 [ 53.609619][ T6260] total_writeback 0 [ 53.610666][ T6260] total_workingset_refault_anon 12 [ 53.612035][ T6260] total_workingset_refault_file 109 [ 53.613465][ T6260] total_swap 127967232 [ 53.614571][ T6260] total_swapcached 28672 [ 53.615785][ T6260] total_pgpgin 108403 [ 53.616862][ T6260] total_pgpgout 41883 [ 53.617929][ T6260] total_pgfault 8564 [ 53.619031][ T6260] total_pgmajfault 15 [ 53.620078][ T6260] total_inactive_anon 170233856 [ 53.621352][ T6260] total_active_anon 98496512 [ 53.622532][ T6260] total_inactive_file 0 [ 53.623719][ T6260] total_active_file 0 [ 53.624888][ T6260] total_unevictable 0 [ 53.625915][ T6248] syz.3.82 (6248) used greatest stack depth: 19224 bytes left [ 53.625958][ T6260] anon_cost 0 [ 53.628892][ T6260] file_cost 0 [ 53.630159][ T6260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6241,uid=0 [ 53.634152][ T6260] Memory cgroup out of memory: Killed process 6241 (syz.3.82) total-vm:98212kB, anon-rss:944kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 53.649854][ T6315] capability: warning: `syz.2.102' uses deprecated v2 capabilities in a way that may be insecure [ 54.184295][ T29] usb 5-1: USB disconnect, device number 2 [ 54.316807][ T6312] syz.3.101 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 54.362264][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.3.101 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 54.362281][ T6312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.362287][ T6312] Call Trace: [ 54.362291][ T6312] [ 54.362295][ T6312] dump_stack_lvl+0x16c/0x1f0 [ 54.362312][ T6312] dump_header+0x101/0x930 [ 54.362326][ T6312] oom_kill_process+0x270/0xa60 [ 54.362337][ T6312] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 54.362353][ T6312] out_of_memory+0x350/0x1700 [ 54.362366][ T6312] ? __lock_acquire+0xaa4/0x1ba0 [ 54.362377][ T6312] ? __pfx_out_of_memory+0x10/0x10 [ 54.362392][ T6312] mem_cgroup_out_of_memory+0x205/0x270 [ 54.362407][ T6312] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 54.362424][ T6312] ? do_raw_spin_unlock+0x172/0x230 [ 54.362437][ T6312] try_charge_memcg+0x8ca/0xfa0 [ 54.362451][ T6312] ? __pfx_try_charge_memcg+0x10/0x10 [ 54.362461][ T6312] ? find_held_lock+0x2b/0x80 [ 54.362474][ T6312] ? rcu_read_unlock+0x17/0x60 [ 54.362489][ T6312] obj_cgroup_charge_pages+0x22/0x1f0 [ 54.362502][ T6312] __memcg_kmem_charge_page+0xc6/0x200 [ 54.362515][ T6312] memcg_charge_kernel_stack+0xc3/0x1f0 [ 54.362530][ T6312] copy_process+0x2ed4/0x91a0 [ 54.362545][ T6312] ? find_held_lock+0x2b/0x80 [ 54.362557][ T6312] ? page_table_check_set+0x96f/0xb50 [ 54.362570][ T6312] ? __lock_acquire+0xaa4/0x1ba0 [ 54.362582][ T6312] ? __pfx_copy_process+0x10/0x10 [ 54.362599][ T6312] ? find_held_lock+0x2b/0x80 [ 54.362610][ T6312] ? __might_fault+0xe3/0x190 [ 54.362620][ T6312] ? __might_fault+0xe3/0x190 [ 54.362629][ T6312] ? __might_fault+0x13b/0x190 [ 54.362642][ T6312] ? _copy_from_user+0x59/0xd0 [ 54.362656][ T6312] kernel_clone+0xfc/0x960 [ 54.362669][ T6312] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.362680][ T6312] ? ___pte_offset_map+0x1bc/0x540 [ 54.362693][ T6312] ? __pfx_kernel_clone+0x10/0x10 [ 54.362710][ T6312] ? __lock_acquire+0xaa4/0x1ba0 [ 54.362722][ T6312] __do_sys_clone3+0x212/0x290 [ 54.362736][ T6312] ? __pfx___do_sys_clone3+0x10/0x10 [ 54.362767][ T6312] do_syscall_64+0xcd/0x260 [ 54.362782][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.362792][ T6312] RIP: 0033:0x7f721ddc19c9 [ 54.362801][ T6312] Code: b2 08 00 48 8d 3d bc b2 08 00 e8 02 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 54.362811][ T6312] RSP: 002b:00007ffc79fedf28 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 54.362821][ T6312] RAX: ffffffffffffffda RBX: 00007f721dd43dd0 RCX: 00007f721ddc19c9 [ 54.362827][ T6312] RDX: 00007f721dd43dd0 RSI: 0000000000000058 RDI: 00007ffc79fedf70 [ 54.362833][ T6312] RBP: 00007f721eb206c0 R08: 00007f721eb206c0 R09: 00007ffc79fee057 [ 54.362838][ T6312] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8 [ 54.362844][ T6312] R13: 000000000000000b R14: 00007ffc79fedf70 R15: 00007ffc79fee058 [ 54.362856][ T6312] [ 54.362860][ T6312] memory: usage 307200kB, limit 307200kB, failcnt 18240 [ 54.449212][ T6312] memory+swap: usage 428100kB, limit 9007199254740988kB, failcnt 0 [ 54.451407][ T6312] kmem: usage 5732kB, limit 9007199254740988kB, failcnt 0 [ 54.453359][ T6312] Memory cgroup stats for /syz3: [ 54.453457][ T6312] cache 306831360 [ 54.456186][ T6312] rss 204800 [ 54.457130][ T6312] rss_huge 0 [ 54.458052][ T6312] shmem 306831360 [ 54.459088][ T6312] mapped_file 0 [ 54.460067][ T6312] dirty 0 [ 54.460905][ T6312] writeback 0 [ 54.461841][ T6312] workingset_refault_anon 12 [ 54.463123][ T6312] workingset_refault_file 109 [ 54.464434][ T6312] swap 122392576 [ 54.467246][ T6312] swapcached 4096 [ 54.468302][ T6312] pgpgin 120969 [ 54.469658][ T6312] pgpgout 46008 [ 54.470650][ T6312] pgfault 9349 [ 54.471610][ T6312] pgmajfault 15 [ 54.472604][ T6312] inactive_anon 53911552 [ 54.473785][ T6312] active_anon 252956672 [ 54.475544][ T6312] inactive_file 0 [ 54.476605][ T6312] active_file 0 [ 54.477592][ T6312] unevictable 0 [ 54.478838][ T6312] hierarchical_memory_limit 314572800 [ 54.480325][ T6312] hierarchical_memsw_limit 9223372036854771712 [ 54.482019][ T6312] total_cache 306831360 [ 54.483227][ T6312] total_rss 204800 [ 54.484326][ T6312] total_rss_huge 0 [ 54.485979][ T6312] total_shmem 306831360 [ 54.487159][ T6312] total_mapped_file 0 [ 54.488286][ T6312] total_dirty 0 [ 54.489297][ T6312] total_writeback 0 [ 54.490365][ T6312] total_workingset_refault_anon 12 [ 54.491785][ T6312] total_workingset_refault_file 109 [ 54.493231][ T6312] total_swap 122392576 [ 54.494369][ T6312] total_swapcached 4096 [ 54.497915][ T6312] total_pgpgin 120969 [ 54.499099][ T6312] total_pgpgout 46008 [ 54.500225][ T6312] total_pgfault 9349 [ 54.501337][ T6312] total_pgmajfault 15 [ 54.502454][ T6312] total_inactive_anon 53911552 [ 54.503776][ T6312] total_active_anon 252956672 [ 54.505506][ T6312] total_inactive_file 0 [ 54.506682][ T6312] total_active_file 0 [ 54.507797][ T6312] total_unevictable 0 [ 54.508944][ T6312] anon_cost 0 [ 54.509879][ T6312] file_cost 0 [ 54.510816][ T6312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6240,uid=0 [ 54.516265][ T6312] Memory cgroup out of memory: Killed process 6240 (syz.3.82) total-vm:98212kB, anon-rss:900kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 54.574747][ T5948] Bluetooth: hci1: command tx timeout [ 54.591085][ T6289] syz.3.82 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 54.594593][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 54.594607][ T6289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.594613][ T6289] Call Trace: [ 54.594617][ T6289] [ 54.594621][ T6289] dump_stack_lvl+0x16c/0x1f0 [ 54.594648][ T6289] dump_header+0x101/0x930 [ 54.594664][ T6289] oom_kill_process+0x270/0xa60 [ 54.594675][ T6289] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 54.594692][ T6289] out_of_memory+0x350/0x1700 [ 54.594704][ T6289] ? __lock_acquire+0xaa4/0x1ba0 [ 54.594715][ T6289] ? __pfx_out_of_memory+0x10/0x10 [ 54.594731][ T6289] mem_cgroup_out_of_memory+0x205/0x270 [ 54.594745][ T6289] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 54.594773][ T6289] ? do_raw_spin_unlock+0x172/0x230 [ 54.594788][ T6289] try_charge_memcg+0x8ca/0xfa0 [ 54.594801][ T6289] ? __pfx_try_charge_memcg+0x10/0x10 [ 54.594812][ T6289] ? find_held_lock+0x2b/0x80 [ 54.594825][ T6289] ? rcu_read_unlock+0x17/0x60 [ 54.594841][ T6289] obj_cgroup_charge_pages+0x22/0x1f0 [ 54.594857][ T6289] __memcg_kmem_charge_page+0xc6/0x200 [ 54.594879][ T6289] __alloc_frozen_pages_noprof+0x32c/0x23a0 [ 54.594893][ T6289] ? do_raw_spin_lock+0x12c/0x2b0 [ 54.594905][ T6289] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.594916][ T6289] ? find_held_lock+0x2b/0x80 [ 54.594928][ T6289] ? __dquot_alloc_space+0x93d/0xe20 [ 54.594941][ T6289] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 54.594953][ T6289] ? __lock_acquire+0xaa4/0x1ba0 [ 54.594967][ T6289] ? lock_acquire+0x179/0x350 [ 54.594975][ T6289] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.594987][ T6289] ? policy_nodemask+0xea/0x4e0 [ 54.595000][ T6289] alloc_pages_mpol+0x1fb/0x550 [ 54.595012][ T6289] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 54.595027][ T6289] alloc_pages_noprof+0x131/0x390 [ 54.595038][ T6289] pte_alloc_one+0x19/0x380 [ 54.595053][ T6289] do_pte_missing+0x1c0b/0x3fb0 [ 54.595071][ T6289] ? find_held_lock+0x2b/0x80 [ 54.595085][ T6289] __handle_mm_fault+0x103d/0x2a40 [ 54.595104][ T6289] ? __pfx___handle_mm_fault+0x10/0x10 [ 54.595131][ T6289] handle_mm_fault+0x3fe/0xad0 [ 54.595149][ T6289] __get_user_pages+0x771/0x36f0 [ 54.595169][ T6289] ? __pfx___get_user_pages+0x10/0x10 [ 54.595185][ T6289] ? __kernel_write_iter+0x5a5/0xa90 [ 54.595204][ T6289] get_dump_page+0x257/0x3d0 [ 54.595219][ T6289] ? __pfx_get_dump_page+0x10/0x10 [ 54.595234][ T6289] ? dump_user_range+0x73d/0xb30 [ 54.595252][ T6289] dump_user_range+0x1c3/0xb30 [ 54.595270][ T6289] ? __pfx_dump_user_range+0x10/0x10 [ 54.595286][ T6289] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 54.595302][ T6289] ? __pfx_writenote+0x10/0x10 [ 54.595314][ T6289] elf_core_dump+0x288a/0x3a90 [ 54.595331][ T6289] ? __pfx_elf_core_dump+0x10/0x10 [ 54.595339][ T6289] ? kasan_save_stack+0x42/0x60 [ 54.595348][ T6289] ? kasan_save_stack+0x33/0x60 [ 54.595356][ T6289] ? kasan_save_track+0x14/0x30 [ 54.595364][ T6289] ? __kasan_kmalloc+0xaa/0xb0 [ 54.595373][ T6289] ? do_coredump+0x17aa/0x4480 [ 54.595386][ T6289] ? get_signal+0x22e3/0x26d0 [ 54.595399][ T6289] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 54.595417][ T6289] ? 0xffffffffff600000 [ 54.595447][ T6289] ? do_coredump+0x3183/0x4480 [ 54.595461][ T6289] do_coredump+0x3183/0x4480 [ 54.595481][ T6289] ? __pfx_do_coredump+0x10/0x10 [ 54.595497][ T6289] ? stack_trace_save+0x8e/0xc0 [ 54.595510][ T6289] ? __pfx_stack_trace_save+0x10/0x10 [ 54.595523][ T6289] ? stack_depot_save_flags+0x28/0xa50 [ 54.595535][ T6289] ? __lock_acquire+0xaa4/0x1ba0 [ 54.595547][ T6289] ? __kasan_slab_free+0x51/0x70 [ 54.595556][ T6289] ? kmem_cache_free+0x2d4/0x4d0 [ 54.595564][ T6289] ? __sigqueue_free+0xba/0x2a0 [ 54.595572][ T6289] ? get_signal+0xcba/0x26d0 [ 54.595584][ T6289] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 54.595617][ T6289] ? proc_coredump_connector+0x2d1/0x4f0 [ 54.595630][ T6289] ? __pfx_proc_coredump_connector+0x10/0x10 [ 54.595644][ T6289] ? rcu_is_watching+0x12/0xc0 [ 54.595659][ T6289] get_signal+0x22e3/0x26d0 [ 54.595675][ T6289] ? force_sig_fault+0xc4/0x100 [ 54.595689][ T6289] ? __pfx_get_signal+0x10/0x10 [ 54.595706][ T6289] arch_do_signal_or_restart+0x8f/0x7d0 [ 54.595720][ T6289] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 54.595732][ T6289] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 54.595755][ T6289] irqentry_exit_to_user_mode+0x13f/0x280 [ 54.595770][ T6289] asm_exc_page_fault+0x26/0x30 [ 54.595779][ T6289] RIP: 0033:0x7f721dd8d171 [ 54.595788][ T6289] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 54.595797][ T6289] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 54.595805][ T6289] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 54.595811][ T6289] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 54.595817][ T6289] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 54.595822][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.595827][ T6289] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 54.595840][ T6289] [ 54.736080][ T6289] memory: usage 298124kB, limit 307200kB, failcnt 18398 [ 54.737297][ T5948] Bluetooth: hci0: command tx timeout [ 54.737319][ T5295] Bluetooth: hci3: command tx timeout [ 54.737349][ T5295] Bluetooth: hci2: command tx timeout [ 54.738203][ T6289] memory+swap: usage 404056kB, limit 9007199254740988kB, failcnt 0 [ 54.741119][ T6371] __nla_validate_parse: 2 callbacks suppressed [ 54.741127][ T6371] netlink: 112 bytes leftover after parsing attributes in process `syz.3.101'. [ 54.741173][ T6289] kmem: usage 5452kB, limit 9007199254740988kB, failcnt 0 [ 54.751174][ T6289] Memory cgroup stats for /syz3: [ 54.751273][ T6289] cache 301613056 [ 54.753734][ T6289] rss 323584 [ 54.754906][ T6289] rss_huge 0 [ 54.755874][ T6289] shmem 301350912 [ 54.757263][ T6289] mapped_file 69632 [ 54.758443][ T6289] dirty 8192 [ 54.759444][ T6289] writeback 0 [ 54.760537][ T6289] workingset_refault_anon 16 [ 54.761996][ T6289] workingset_refault_file 173 [ 54.771064][ T6289] swap 108994560 [ 54.772196][ T6289] swapcached 4096 [ 54.773318][ T6289] pgpgin 125561 [ 54.774337][ T6289] pgpgout 51768 [ 54.775704][ T6289] pgfault 9692 [ 54.776892][ T6289] pgmajfault 21 [ 54.777903][ T6289] inactive_anon 46313472 [ 54.779232][ T6289] active_anon 254472192 [ 54.780473][ T6289] inactive_file 0 [ 54.781568][ T6289] active_file 262144 [ 54.782736][ T6289] unevictable 0 [ 54.783753][ T6289] hierarchical_memory_limit 314572800 [ 54.785802][ T6289] hierarchical_memsw_limit 9223372036854771712 [ 54.787633][ T6289] total_cache 301613056 [ 54.788890][ T6289] total_rss 323584 [ 54.790022][ T6289] total_rss_huge 0 [ 54.791157][ T6289] total_shmem 301350912 [ 54.792399][ T6289] total_mapped_file 69632 [ 54.793696][ T6289] total_dirty 8192 [ 54.795890][ T6289] total_writeback 0 [ 54.797087][ T6289] total_workingset_refault_anon 16 [ 54.798613][ T6289] total_workingset_refault_file 173 [ 54.800187][ T6289] total_swap 108994560 [ 54.801425][ T6289] total_swapcached 4096 [ 54.802674][ T6289] total_pgpgin 125561 [ 54.803868][ T6289] total_pgpgout 51768 [ 54.806217][ T6289] total_pgfault 9692 [ 54.807412][ T6289] total_pgmajfault 21 [ 54.808624][ T6289] total_inactive_anon 46313472 [ 54.810042][ T6289] total_active_anon 254472192 [ 54.811444][ T6289] total_inactive_file 0 [ 54.812693][ T6289] total_active_file 262144 [ 54.814016][ T6289] total_unevictable 0 [ 54.815667][ T6289] anon_cost 0 [ 54.816651][ T6289] file_cost 0 [ 54.817670][ T6289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6263,uid=0 [ 54.821934][ T6289] Memory cgroup out of memory: Killed process 6263 (syz.3.82) total-vm:98212kB, anon-rss:944kB, file-rss:53248kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 54.916008][ T6379] tmpfs: Bad value for 'mpol' [ 54.957652][ T6240] syz.3.82 (6240) used greatest stack depth: 19096 bytes left [ 55.063667][ T5987] usb 6-1: USB disconnect, device number 2 [ 55.365765][ T6398] QAT: failed to copy from user cfg_data. [ 55.437265][ T6404] capability: warning: `syz.2.125' uses 32-bit capabilities (legacy support in use) [ 55.608269][ T6412] netlink: 112 bytes leftover after parsing attributes in process `syz.0.131'. [ 55.676411][ T6260] syz.3.82 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 55.679147][ T6260] CPU: 2 UID: 0 PID: 6260 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 55.679160][ T6260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.679166][ T6260] Call Trace: [ 55.679170][ T6260] [ 55.679174][ T6260] dump_stack_lvl+0x16c/0x1f0 [ 55.679191][ T6260] dump_header+0x101/0x930 [ 55.679205][ T6260] oom_kill_process+0x270/0xa60 [ 55.679216][ T6260] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 55.679233][ T6260] out_of_memory+0x350/0x1700 [ 55.679245][ T6260] ? __lock_acquire+0xaa4/0x1ba0 [ 55.679257][ T6260] ? __pfx_out_of_memory+0x10/0x10 [ 55.679272][ T6260] mem_cgroup_out_of_memory+0x205/0x270 [ 55.679287][ T6260] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 55.679304][ T6260] ? do_raw_spin_unlock+0x172/0x230 [ 55.679318][ T6260] try_charge_memcg+0x8ca/0xfa0 [ 55.679331][ T6260] ? __pfx_try_charge_memcg+0x10/0x10 [ 55.679343][ T6260] ? __print_lock_name+0xd1/0xe0 [ 55.679356][ T6260] ? rcu_read_unlock+0x17/0x60 [ 55.679371][ T6260] charge_memcg+0x8a/0x230 [ 55.679382][ T6260] __mem_cgroup_charge+0x2b/0x1e0 [ 55.679396][ T6260] shmem_alloc_and_add_folio+0x514/0xc20 [ 55.679410][ T6260] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 55.679425][ T6260] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 55.679441][ T6260] shmem_get_folio_gfp+0x687/0x1530 [ 55.679454][ T6260] ? __lock_acquire+0xaa4/0x1ba0 [ 55.679463][ T6260] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 55.679474][ T6260] ? __pte_offset_map_lock+0x155/0x2f0 [ 55.679489][ T6260] shmem_write_begin+0x160/0x300 [ 55.679502][ T6260] ? __pfx_shmem_write_begin+0x10/0x10 [ 55.679513][ T6260] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 55.679529][ T6260] ? __pfx_timestamp_truncate+0x10/0x10 [ 55.679542][ T6260] generic_perform_write+0x3cd/0x930 [ 55.679557][ T6260] ? __pfx_generic_perform_write+0x10/0x10 [ 55.679569][ T6260] ? inode_needs_update_time.part.0+0x191/0x270 [ 55.679584][ T6260] shmem_file_write_iter+0x10e/0x140 [ 55.679598][ T6260] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 55.679610][ T6260] __kernel_write_iter+0x317/0xa90 [ 55.679628][ T6260] ? __pfx___kernel_write_iter+0x10/0x10 [ 55.679643][ T6260] ? __up_read+0x1f8/0x750 [ 55.679655][ T6260] ? dump_user_range+0x73d/0xb30 [ 55.679674][ T6260] dump_user_range+0x418/0xb30 [ 55.679692][ T6260] ? __pfx_dump_user_range+0x10/0x10 [ 55.679708][ T6260] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 55.679724][ T6260] ? __pfx_writenote+0x10/0x10 [ 55.679737][ T6260] elf_core_dump+0x288a/0x3a90 [ 55.679753][ T6260] ? __pfx_elf_core_dump+0x10/0x10 [ 55.679762][ T6260] ? kasan_save_stack+0x42/0x60 [ 55.679771][ T6260] ? kasan_save_stack+0x33/0x60 [ 55.679779][ T6260] ? kasan_save_track+0x14/0x30 [ 55.679788][ T6260] ? __kasan_kmalloc+0xaa/0xb0 [ 55.679796][ T6260] ? do_coredump+0x17aa/0x4480 [ 55.679810][ T6260] ? get_signal+0x22e3/0x26d0 [ 55.679827][ T6260] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 55.679845][ T6260] ? 0xffffffffff600000 [ 55.679874][ T6260] ? do_coredump+0x3183/0x4480 [ 55.679888][ T6260] do_coredump+0x3183/0x4480 [ 55.679908][ T6260] ? __pfx_do_coredump+0x10/0x10 [ 55.679924][ T6260] ? stack_trace_save+0x8e/0xc0 [ 55.679938][ T6260] ? __pfx_stack_trace_save+0x10/0x10 [ 55.679951][ T6260] ? stack_depot_save_flags+0x28/0xa50 [ 55.679963][ T6260] ? __lock_acquire+0xaa4/0x1ba0 [ 55.679975][ T6260] ? __kasan_slab_free+0x51/0x70 [ 55.679984][ T6260] ? kmem_cache_free+0x2d4/0x4d0 [ 55.679993][ T6260] ? __sigqueue_free+0xba/0x2a0 [ 55.680001][ T6260] ? get_signal+0xcba/0x26d0 [ 55.680013][ T6260] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 55.680045][ T6260] ? proc_coredump_connector+0x2d1/0x4f0 [ 55.680057][ T6260] ? __pfx_proc_coredump_connector+0x10/0x10 [ 55.680072][ T6260] ? rcu_is_watching+0x12/0xc0 [ 55.680087][ T6260] get_signal+0x22e3/0x26d0 [ 55.680103][ T6260] ? force_sig_fault+0xc4/0x100 [ 55.680117][ T6260] ? __pfx_get_signal+0x10/0x10 [ 55.680134][ T6260] arch_do_signal_or_restart+0x8f/0x7d0 [ 55.680148][ T6260] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 55.680160][ T6260] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 55.680183][ T6260] irqentry_exit_to_user_mode+0x13f/0x280 [ 55.680198][ T6260] asm_exc_page_fault+0x26/0x30 [ 55.680208][ T6260] RIP: 0033:0x7f721dd8d171 [ 55.680230][ T6260] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 55.680241][ T6260] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 55.680250][ T6260] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 55.680256][ T6260] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 55.680262][ T6260] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 55.680267][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.680273][ T6260] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 55.680285][ T6260] [ 55.680289][ T6260] memory: usage 307200kB, limit 307200kB, failcnt 21770 [ 55.818882][ T6260] memory+swap: usage 432168kB, limit 9007199254740988kB, failcnt 0 [ 55.821073][ T6260] kmem: usage 5148kB, limit 9007199254740988kB, failcnt 0 [ 55.823024][ T6260] Memory cgroup stats for /syz3: [ 55.823107][ T6260] cache 309096448 [ 55.825916][ T6260] rss 204800 [ 55.826853][ T6260] rss_huge 0 [ 55.827770][ T6260] shmem 309092352 [ 55.828807][ T6260] mapped_file 0 [ 55.829817][ T6260] dirty 0 [ 55.830649][ T6260] writeback 0 [ 55.831588][ T6260] workingset_refault_anon 21 [ 55.832886][ T6260] workingset_refault_file 253 [ 55.834193][ T6260] swap 127967232 [ 55.835375][ T6260] swapcached 28672 [ 55.836445][ T6260] pgpgin 153974 [ 55.837435][ T6260] pgpgout 78461 [ 55.838431][ T6260] pgfault 10976 [ 55.839393][ T6260] pgmajfault 37 [ 55.840333][ T6260] inactive_anon 47165440 [ 55.841519][ T6260] active_anon 262131712 [ 55.842687][ T6260] inactive_file 0 [ 55.843723][ T6260] active_file 4096 [ 55.844846][ T6260] unevictable 0 [ 55.845839][ T6260] hierarchical_memory_limit 314572800 [ 55.847338][ T6260] hierarchical_memsw_limit 9223372036854771712 [ 55.849093][ T6260] total_cache 309096448 [ 55.849850][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.134'. [ 55.850245][ T6260] total_rss 204800 [ 55.850251][ T6260] total_rss_huge 0 [ 55.850255][ T6260] total_shmem 309092352 [ 55.850259][ T6260] total_mapped_file 0 [ 55.850263][ T6260] total_dirty 0 [ 55.850267][ T6260] total_writeback 0 [ 55.850271][ T6260] total_workingset_refault_anon 21 [ 55.850275][ T6260] total_workingset_refault_file 253 [ 55.850280][ T6260] total_swap 127967232 [ 55.852751][ T6420] netlink: 92 bytes leftover after parsing attributes in process `syz.2.134'. [ 55.853776][ T6260] total_swapcached 28672 [ 55.866920][ T6260] total_pgpgin 153974 [ 55.868038][ T6260] total_pgpgout 78461 [ 55.869222][ T6260] total_pgfault 10976 [ 55.870342][ T6260] total_pgmajfault 37 [ 55.871460][ T6260] total_inactive_anon 47165440 [ 55.872835][ T6260] total_active_anon 262131712 [ 55.874144][ T6260] total_inactive_file 0 [ 55.875353][ T6260] total_active_file 4096 [ 55.876548][ T6260] total_unevictable 0 [ 55.877666][ T6260] anon_cost 0 [ 55.878617][ T6260] file_cost 0 [ 55.879577][ T6260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6292,uid=0 [ 55.884922][ T6260] Memory cgroup out of memory: Killed process 6292 (syz.3.82) total-vm:98212kB, anon-rss:944kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 56.025688][ T6261] syz.3.82 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 56.037634][ T6428] random: crng reseeded on system resumption [ 56.060111][ T6261] CPU: 2 UID: 0 PID: 6261 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 56.060127][ T6261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.060133][ T6261] Call Trace: [ 56.060136][ T6261] [ 56.060140][ T6261] dump_stack_lvl+0x16c/0x1f0 [ 56.060157][ T6261] dump_header+0x101/0x930 [ 56.060172][ T6261] oom_kill_process+0x270/0xa60 [ 56.060183][ T6261] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 56.060200][ T6261] out_of_memory+0x350/0x1700 [ 56.060212][ T6261] ? __lock_acquire+0xaa4/0x1ba0 [ 56.060243][ T6261] ? __pfx_out_of_memory+0x10/0x10 [ 56.060258][ T6261] mem_cgroup_out_of_memory+0x205/0x270 [ 56.060273][ T6261] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 56.060290][ T6261] ? do_raw_spin_unlock+0x172/0x230 [ 56.060304][ T6261] try_charge_memcg+0x8ca/0xfa0 [ 56.060318][ T6261] ? __pfx_try_charge_memcg+0x10/0x10 [ 56.060329][ T6261] ? __print_lock_name+0xd1/0xe0 [ 56.060342][ T6261] ? rcu_read_unlock+0x17/0x60 [ 56.060357][ T6261] charge_memcg+0x8a/0x230 [ 56.060369][ T6261] __mem_cgroup_charge+0x2b/0x1e0 [ 56.060382][ T6261] shmem_alloc_and_add_folio+0x514/0xc20 [ 56.060396][ T6261] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 56.060408][ T6261] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 56.060422][ T6261] shmem_get_folio_gfp+0x687/0x1530 [ 56.060434][ T6261] ? __lock_acquire+0xaa4/0x1ba0 [ 56.060452][ T6261] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 56.060465][ T6261] ? __pte_offset_map_lock+0x155/0x2f0 [ 56.060481][ T6261] shmem_write_begin+0x160/0x300 [ 56.060493][ T6261] ? __pfx_shmem_write_begin+0x10/0x10 [ 56.060505][ T6261] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 56.060520][ T6261] ? __pfx_timestamp_truncate+0x10/0x10 [ 56.060534][ T6261] generic_perform_write+0x3cd/0x930 [ 56.060549][ T6261] ? __pfx_generic_perform_write+0x10/0x10 [ 56.060561][ T6261] ? inode_needs_update_time.part.0+0x191/0x270 [ 56.060576][ T6261] shmem_file_write_iter+0x10e/0x140 [ 56.060590][ T6261] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 56.060602][ T6261] __kernel_write_iter+0x317/0xa90 [ 56.060620][ T6261] ? __pfx___kernel_write_iter+0x10/0x10 [ 56.060635][ T6261] ? __up_read+0x1f8/0x750 [ 56.060648][ T6261] ? dump_user_range+0x73d/0xb30 [ 56.060663][ T6261] ? copy_mc_enhanced_fast_string+0x6/0xf [ 56.060676][ T6261] dump_user_range+0x418/0xb30 [ 56.060695][ T6261] ? __pfx_dump_user_range+0x10/0x10 [ 56.060711][ T6261] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 56.060727][ T6261] ? __pfx_writenote+0x10/0x10 [ 56.060740][ T6261] elf_core_dump+0x288a/0x3a90 [ 56.060756][ T6261] ? __pfx_elf_core_dump+0x10/0x10 [ 56.060765][ T6261] ? kasan_save_stack+0x42/0x60 [ 56.060775][ T6261] ? kasan_save_stack+0x33/0x60 [ 56.060783][ T6261] ? kasan_save_track+0x14/0x30 [ 56.060791][ T6261] ? __kasan_kmalloc+0xaa/0xb0 [ 56.060800][ T6261] ? do_coredump+0x17aa/0x4480 [ 56.060818][ T6261] ? get_signal+0x22e3/0x26d0 [ 56.060831][ T6261] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 56.060850][ T6261] ? 0xffffffffff600000 [ 56.060882][ T6261] ? do_coredump+0x3183/0x4480 [ 56.060895][ T6261] do_coredump+0x3183/0x4480 [ 56.060915][ T6261] ? __pfx_do_coredump+0x10/0x10 [ 56.060931][ T6261] ? stack_trace_save+0x8e/0xc0 [ 56.060945][ T6261] ? __pfx_stack_trace_save+0x10/0x10 [ 56.060958][ T6261] ? stack_depot_save_flags+0x28/0xa50 [ 56.060970][ T6261] ? __lock_acquire+0xaa4/0x1ba0 [ 56.060982][ T6261] ? __kasan_slab_free+0x51/0x70 [ 56.060991][ T6261] ? kmem_cache_free+0x2d4/0x4d0 [ 56.060999][ T6261] ? __sigqueue_free+0xba/0x2a0 [ 56.061007][ T6261] ? get_signal+0xcba/0x26d0 [ 56.061019][ T6261] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 56.061053][ T6261] ? proc_coredump_connector+0x2d1/0x4f0 [ 56.061065][ T6261] ? __pfx_proc_coredump_connector+0x10/0x10 [ 56.061080][ T6261] ? rcu_is_watching+0x12/0xc0 [ 56.061095][ T6261] get_signal+0x22e3/0x26d0 [ 56.061111][ T6261] ? force_sig_fault+0xc4/0x100 [ 56.061125][ T6261] ? __pfx_get_signal+0x10/0x10 [ 56.061142][ T6261] arch_do_signal_or_restart+0x8f/0x7d0 [ 56.061157][ T6261] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 56.061169][ T6261] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 56.061192][ T6261] irqentry_exit_to_user_mode+0x13f/0x280 [ 56.061207][ T6261] asm_exc_page_fault+0x26/0x30 [ 56.061217][ T6261] RIP: 0033:0x7f721dd8d171 [ 56.061225][ T6261] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 56.061234][ T6261] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 56.061242][ T6261] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 56.061249][ T6261] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 56.061254][ T6261] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 56.061260][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.061265][ T6261] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 56.061278][ T6261] [ 56.181901][ T6261] memory: usage 307200kB, limit 307200kB, failcnt 22854 [ 56.244705][ T6261] memory+swap: usage 412932kB, limit 9007199254740988kB, failcnt 0 [ 56.247034][ T6261] kmem: usage 5036kB, limit 9007199254740988kB, failcnt 0 [ 56.248978][ T6261] Memory cgroup stats for /syz3: [ 56.249060][ T6261] cache 291274752 [ 56.251451][ T6261] rss 225280 [ 56.252492][ T6261] rss_huge 0 [ 56.253491][ T6261] shmem 291258368 [ 56.254534][ T6261] mapped_file 0 [ 56.266083][ T6292] syz.3.82 (6292) used greatest stack depth: 18376 bytes left [ 56.274999][ T6261] dirty 0 [ 56.275975][ T6261] writeback 0 [ 56.277079][ T6261] workingset_refault_anon 21 [ 56.278432][ T6261] workingset_refault_file 335 [ 56.279905][ T6261] swap 124264448 [ 56.281341][ T6261] swapcached 28672 [ 56.282499][ T6261] pgpgin 156171 [ 56.283495][ T6261] pgpgout 84987 [ 56.284476][ T6261] pgfault 11069 [ 56.285382][ T6261] pgmajfault 41 [ 56.286410][ T6261] inactive_anon 240500736 [ 56.287676][ T6261] active_anon 50507776 [ 56.288886][ T6261] inactive_file 0 [ 56.289985][ T6261] active_file 12288 [ 56.291133][ T6261] unevictable 0 [ 56.292130][ T6261] hierarchical_memory_limit 314572800 [ 56.293669][ T6261] hierarchical_memsw_limit 9223372036854771712 [ 56.299015][ T6261] total_cache 291274752 [ 56.300261][ T6261] total_rss 225280 [ 56.301373][ T6261] total_rss_huge 0 [ 56.302484][ T6261] total_shmem 291258368 [ 56.303698][ T6261] total_mapped_file 0 [ 56.304902][ T6261] total_dirty 0 [ 56.305922][ T6261] total_writeback 0 [ 56.307080][ T6261] total_workingset_refault_anon 21 [ 56.308573][ T6261] total_workingset_refault_file 335 [ 56.310065][ T6261] total_swap 124264448 [ 56.311274][ T6261] total_swapcached 28672 [ 56.312519][ T6261] total_pgpgin 156171 [ 56.313691][ T6261] total_pgpgout 84987 [ 56.314921][ T6261] total_pgfault 11069 [ 56.316185][ T6261] total_pgmajfault 41 [ 56.317379][ T6261] total_inactive_anon 240500736 [ 56.318801][ T6261] total_active_anon 50507776 [ 56.320153][ T6261] total_inactive_file 0 [ 56.321884][ T6261] total_active_file 12288 [ 56.323161][ T6261] total_unevictable 0 [ 56.324383][ T6261] anon_cost 0 [ 56.326099][ T6261] file_cost 0 [ 56.327073][ T6261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6290,uid=0 [ 56.331684][ T6261] Memory cgroup out of memory: Killed process 6290 (syz.3.82) total-vm:98212kB, anon-rss:944kB, file-rss:53388kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 56.387449][ T6434] syz.1.138: attempt to access beyond end of device [ 56.387449][ T6434] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 56.390815][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 56.390823][ T40] audit: type=1400 audit(1744376332.653:290): avc: denied { bind } for pid=6426 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.391267][ T6434] vxfs: unable to read disk superblock at 1 [ 56.404875][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 56.411894][ T40] audit: type=1400 audit(1744376332.673:291): avc: denied { execute } for pid=6435 comm="syz.0.139" path="/32/net_prio.prioidx" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.435322][ T6434] syz.1.138: attempt to access beyond end of device [ 56.435322][ T6434] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 56.450682][ T6434] vxfs: unable to read disk superblock at 8 [ 56.452489][ T6434] vxfs: can't find superblock. [ 56.740412][ T6284] syz.3.82 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 56.743069][ T6284] CPU: 0 UID: 0 PID: 6284 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 56.743083][ T6284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.743089][ T6284] Call Trace: [ 56.743093][ T6284] [ 56.743100][ T6284] dump_stack_lvl+0x16c/0x1f0 [ 56.743116][ T6284] dump_header+0x101/0x930 [ 56.743130][ T6284] oom_kill_process+0x270/0xa60 [ 56.743142][ T6284] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 56.743159][ T6284] out_of_memory+0x350/0x1700 [ 56.743170][ T6284] ? __lock_acquire+0xaa4/0x1ba0 [ 56.743182][ T6284] ? __pfx_out_of_memory+0x10/0x10 [ 56.743197][ T6284] mem_cgroup_out_of_memory+0x205/0x270 [ 56.743212][ T6284] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 56.743229][ T6284] ? do_raw_spin_unlock+0x172/0x230 [ 56.743242][ T6284] try_charge_memcg+0x8ca/0xfa0 [ 56.743256][ T6284] ? __pfx_try_charge_memcg+0x10/0x10 [ 56.743267][ T6284] ? __print_lock_name+0xd1/0xe0 [ 56.743292][ T6284] ? rcu_read_unlock+0x17/0x60 [ 56.743307][ T6284] charge_memcg+0x8a/0x230 [ 56.743319][ T6284] __mem_cgroup_charge+0x2b/0x1e0 [ 56.743332][ T6284] shmem_alloc_and_add_folio+0x514/0xc20 [ 56.743346][ T6284] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 56.743359][ T6284] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 56.743372][ T6284] shmem_get_folio_gfp+0x687/0x1530 [ 56.743385][ T6284] ? __lock_acquire+0xaa4/0x1ba0 [ 56.743394][ T6284] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 56.743405][ T6284] ? __pte_offset_map_lock+0x155/0x2f0 [ 56.743421][ T6284] shmem_write_begin+0x160/0x300 [ 56.743433][ T6284] ? __pfx_shmem_write_begin+0x10/0x10 [ 56.743445][ T6284] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 56.743460][ T6284] ? __pfx_timestamp_truncate+0x10/0x10 [ 56.743471][ T6284] ? ns_to_timespec64+0x59/0xc0 [ 56.743487][ T6284] generic_perform_write+0x3cd/0x930 [ 56.743502][ T6284] ? __pfx_generic_perform_write+0x10/0x10 [ 56.743514][ T6284] ? inode_needs_update_time.part.0+0x191/0x270 [ 56.743529][ T6284] shmem_file_write_iter+0x10e/0x140 [ 56.743543][ T6284] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 56.743555][ T6284] __kernel_write_iter+0x317/0xa90 [ 56.743573][ T6284] ? __pfx___kernel_write_iter+0x10/0x10 [ 56.743588][ T6284] ? __up_read+0x1f8/0x750 [ 56.743601][ T6284] ? dump_user_range+0x73d/0xb30 [ 56.743616][ T6284] ? copy_mc_enhanced_fast_string+0x6/0xf [ 56.743629][ T6284] dump_user_range+0x418/0xb30 [ 56.743647][ T6284] ? __pfx_dump_user_range+0x10/0x10 [ 56.743663][ T6284] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 56.743679][ T6284] ? __pfx_writenote+0x10/0x10 [ 56.743691][ T6284] elf_core_dump+0x288a/0x3a90 [ 56.743708][ T6284] ? __pfx_elf_core_dump+0x10/0x10 [ 56.743717][ T6284] ? kasan_save_stack+0x42/0x60 [ 56.743726][ T6284] ? kasan_save_stack+0x33/0x60 [ 56.743734][ T6284] ? kasan_save_track+0x14/0x30 [ 56.743742][ T6284] ? __kasan_kmalloc+0xaa/0xb0 [ 56.743751][ T6284] ? do_coredump+0x17aa/0x4480 [ 56.743766][ T6284] ? get_signal+0x22e3/0x26d0 [ 56.743783][ T6284] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 56.743807][ T6284] ? 0xffffffffff600000 [ 56.743838][ T6284] ? do_coredump+0x3183/0x4480 [ 56.743852][ T6284] do_coredump+0x3183/0x4480 [ 56.743872][ T6284] ? __pfx_do_coredump+0x10/0x10 [ 56.743888][ T6284] ? stack_trace_save+0x8e/0xc0 [ 56.743901][ T6284] ? __pfx_stack_trace_save+0x10/0x10 [ 56.743914][ T6284] ? stack_depot_save_flags+0x28/0xa50 [ 56.743926][ T6284] ? __lock_acquire+0xaa4/0x1ba0 [ 56.743938][ T6284] ? __kasan_slab_free+0x51/0x70 [ 56.743947][ T6284] ? kmem_cache_free+0x2d4/0x4d0 [ 56.743959][ T6284] ? __sigqueue_free+0xba/0x2a0 [ 56.743971][ T6284] ? get_signal+0xcba/0x26d0 [ 56.743988][ T6284] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 56.744021][ T6284] ? proc_coredump_connector+0x2d1/0x4f0 [ 56.744035][ T6284] ? __pfx_proc_coredump_connector+0x10/0x10 [ 56.744049][ T6284] ? rcu_is_watching+0x12/0xc0 [ 56.744064][ T6284] get_signal+0x22e3/0x26d0 [ 56.744080][ T6284] ? force_sig_fault+0xc4/0x100 [ 56.744097][ T6284] ? __pfx_get_signal+0x10/0x10 [ 56.744115][ T6284] arch_do_signal_or_restart+0x8f/0x7d0 [ 56.744129][ T6284] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 56.744141][ T6284] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 56.744164][ T6284] irqentry_exit_to_user_mode+0x13f/0x280 [ 56.744179][ T6284] asm_exc_page_fault+0x26/0x30 [ 56.744189][ T6284] RIP: 0033:0x7f721dd8d171 [ 56.744198][ T6284] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 56.744221][ T6284] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 56.744231][ T6284] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 56.744237][ T6284] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 56.744243][ T6284] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 56.744248][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.744254][ T6284] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 56.744267][ T6284] [ 56.744364][ T6284] memory: usage 307200kB, limit 307200kB, failcnt 23770 [ 56.770706][ T40] audit: type=1400 audit(1744376333.033:292): avc: denied { bind } for pid=6449 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.775402][ T6284] memory+swap: usage 432168kB, limit 9007199254740988kB, failcnt 0 [ 56.784727][ T40] audit: type=1400 audit(1744376333.043:293): avc: denied { write } for pid=6449 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.788143][ T6284] kmem: usage 5052kB, limit 9007199254740988kB, failcnt 0 [ 56.824972][ T6453] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 56.839316][ T6284] Memory cgroup stats for [ 56.845133][ T6453] netlink: 232 bytes leftover after parsing attributes in process `syz.0.144'. [ 56.846669][ T6284] /syz3 [ 56.854813][ T40] audit: type=1400 audit(1744376333.103:294): avc: denied { map } for pid=6456 comm="syz.2.147" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.857272][ T6284] : [ 56.858012][ T40] audit: type=1400 audit(1744376333.103:295): avc: denied { execute } for pid=6456 comm="syz.2.147" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.859864][ T6284] cache 294924288 [ 56.873734][ T6453] kvm: kvm [6452]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x200000000000 [ 56.887384][ T6284] rss 303104 [ 56.961907][ T40] audit: type=1400 audit(1744376333.223:296): avc: denied { read } for pid=6452 comm="syz.0.144" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 56.963668][ T6284] rss_huge 0 [ 56.974795][ T40] audit: type=1400 audit(1744376333.223:297): avc: denied { open } for pid=6452 comm="syz.0.144" path="/34/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 56.976024][ T6461] block device autoloading is deprecated and will be removed. [ 56.976382][ T6284] shmem 294920192 [ 56.976392][ T6284] mapped_file 0 [ 56.976398][ T6284] dirty 0 [ 56.976404][ T6284] writeback 0 [ 56.976410][ T6284] workingset_refault_anon 22 [ 56.976417][ T6284] workingset_refault_file 859 [ 56.976423][ T6284] swap 124952576 [ 56.976429][ T6284] swapcached 57344 [ 56.976436][ T6284] pgpgin 163939 [ 56.976441][ T6284] pgpgout 91855 [ 56.976447][ T6284] pgfault 11386 [ 56.976453][ T6284] pgmajfault 46 [ 56.976459][ T6284] inactive_anon 193478656 [ 56.976466][ T6284] active_anon 100114432 [ 56.976470][ T6284] inactive_file 0 [ 56.976474][ T6284] active_file 4096 [ 56.976479][ T6284] unevictable 0 [ 56.976485][ T6284] hierarchical_memory_limit 314572800 [ 56.976492][ T6284] hierarchical_memsw_limit 9223372036854771712 [ 56.976499][ T6284] total_cache 294924288 [ 56.976505][ T6284] total_rss 303104 [ 56.976511][ T6284] total_rss_huge 0 [ 56.976517][ T6284] total_shmem 294920192 [ 56.976524][ T6284] total_mapped_file 0 [ 56.976530][ T6284] total_dirty 0 [ 56.976536][ T6284] total_writeback 0 [ 56.976542][ T6284] total_workingset_refault_anon 22 [ 56.976549][ T6284] total_workingset_refault_file 859 [ 56.976554][ T6284] total_swap 124952576 [ 56.976558][ T6284] total_swapcached 57344 [ 56.976562][ T6284] total_pgpgin 163939 [ 56.976568][ T6284] total_pgpgout 91855 [ 56.976574][ T6284] total_pgfault 11386 [ 56.976581][ T6284] total_pgmajfault 46 [ 56.976587][ T6284] total_inactive_anon 193478656 [ 56.976593][ T6284] total_active_anon 100114432 [ 56.976600][ T6284] total_inactive_file 0 [ 56.976606][ T6284] total_active_file 4096 [ 56.976612][ T6284] total_unevictable 0 [ 56.976618][ T6284] anon_cost 0 [ 56.976624][ T6284] file_cost 0 [ 56.976630][ T6284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6254,uid=0 [ 56.976732][ T6284] Memory cgroup out of memory: Killed process 6254 (syz.3.82) total-vm:98212kB, anon-rss:944kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 56.991252][ T6462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 57.004170][ T6453] md: md2 stopped. [ 57.013965][ T40] audit: type=1400 audit(1744376333.263:298): avc: denied { ioctl } for pid=6452 comm="syz.0.144" path="/34/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 57.034814][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 57.077616][ T6462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 57.080806][ T6462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 57.134737][ T40] audit: type=1400 audit(1744376333.363:299): avc: denied { setopt } for pid=6463 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.614494][ T6284] syz.3.82 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 57.626582][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 57.626599][ T6284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.626605][ T6284] Call Trace: [ 57.626609][ T6284] [ 57.626613][ T6284] dump_stack_lvl+0x16c/0x1f0 [ 57.626630][ T6284] dump_header+0x101/0x930 [ 57.626644][ T6284] oom_kill_process+0x270/0xa60 [ 57.626655][ T6284] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 57.626671][ T6284] out_of_memory+0x350/0x1700 [ 57.626683][ T6284] ? __lock_acquire+0xaa4/0x1ba0 [ 57.626695][ T6284] ? __pfx_out_of_memory+0x10/0x10 [ 57.626711][ T6284] mem_cgroup_out_of_memory+0x205/0x270 [ 57.626725][ T6284] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 57.626742][ T6284] ? do_raw_spin_unlock+0x172/0x230 [ 57.626756][ T6284] try_charge_memcg+0x8ca/0xfa0 [ 57.626769][ T6284] ? __pfx_try_charge_memcg+0x10/0x10 [ 57.626780][ T6284] ? __print_lock_name+0xd1/0xe0 [ 57.626794][ T6284] ? rcu_read_unlock+0x17/0x60 [ 57.626809][ T6284] charge_memcg+0x8a/0x230 [ 57.626820][ T6284] __mem_cgroup_charge+0x2b/0x1e0 [ 57.626833][ T6284] shmem_alloc_and_add_folio+0x514/0xc20 [ 57.626848][ T6284] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 57.626860][ T6284] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 57.626873][ T6284] shmem_get_folio_gfp+0x687/0x1530 [ 57.626885][ T6284] ? __lock_acquire+0xaa4/0x1ba0 [ 57.626894][ T6284] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 57.626906][ T6284] ? __pte_offset_map_lock+0x155/0x2f0 [ 57.626921][ T6284] shmem_write_begin+0x160/0x300 [ 57.626933][ T6284] ? __pfx_shmem_write_begin+0x10/0x10 [ 57.626945][ T6284] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 57.626960][ T6284] ? __pfx_timestamp_truncate+0x10/0x10 [ 57.626973][ T6284] generic_perform_write+0x3cd/0x930 [ 57.626988][ T6284] ? __pfx_generic_perform_write+0x10/0x10 [ 57.627000][ T6284] ? inode_needs_update_time.part.0+0x191/0x270 [ 57.627015][ T6284] shmem_file_write_iter+0x10e/0x140 [ 57.627029][ T6284] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 57.627041][ T6284] __kernel_write_iter+0x317/0xa90 [ 57.627063][ T6284] ? __pfx___kernel_write_iter+0x10/0x10 [ 57.627079][ T6284] ? __up_read+0x1f8/0x750 [ 57.627091][ T6284] ? dump_user_range+0x73d/0xb30 [ 57.627109][ T6284] dump_user_range+0x418/0xb30 [ 57.627127][ T6284] ? __pfx_dump_user_range+0x10/0x10 [ 57.627143][ T6284] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 57.627159][ T6284] ? __pfx_writenote+0x10/0x10 [ 57.627172][ T6284] elf_core_dump+0x288a/0x3a90 [ 57.627188][ T6284] ? __pfx_elf_core_dump+0x10/0x10 [ 57.627196][ T6284] ? kasan_save_stack+0x42/0x60 [ 57.627205][ T6284] ? kasan_save_stack+0x33/0x60 [ 57.627213][ T6284] ? kasan_save_track+0x14/0x30 [ 57.627222][ T6284] ? __kasan_kmalloc+0xaa/0xb0 [ 57.627230][ T6284] ? do_coredump+0x17aa/0x4480 [ 57.627244][ T6284] ? get_signal+0x22e3/0x26d0 [ 57.627257][ T6284] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 57.627275][ T6284] ? 0xffffffffff600000 [ 57.627304][ T6284] ? do_coredump+0x3183/0x4480 [ 57.627318][ T6284] do_coredump+0x3183/0x4480 [ 57.627337][ T6284] ? __pfx_do_coredump+0x10/0x10 [ 57.627353][ T6284] ? stack_trace_save+0x8e/0xc0 [ 57.627367][ T6284] ? __pfx_stack_trace_save+0x10/0x10 [ 57.627389][ T6284] ? stack_depot_save_flags+0x28/0xa50 [ 57.627403][ T6284] ? __lock_acquire+0xaa4/0x1ba0 [ 57.627414][ T6284] ? __kasan_slab_free+0x51/0x70 [ 57.627424][ T6284] ? kmem_cache_free+0x2d4/0x4d0 [ 57.627432][ T6284] ? __sigqueue_free+0xba/0x2a0 [ 57.627440][ T6284] ? get_signal+0xcba/0x26d0 [ 57.627452][ T6284] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 57.627485][ T6284] ? proc_coredump_connector+0x2d1/0x4f0 [ 57.627498][ T6284] ? __pfx_proc_coredump_connector+0x10/0x10 [ 57.627512][ T6284] ? rcu_is_watching+0x12/0xc0 [ 57.627527][ T6284] get_signal+0x22e3/0x26d0 [ 57.627543][ T6284] ? force_sig_fault+0xc4/0x100 [ 57.627557][ T6284] ? __pfx_get_signal+0x10/0x10 [ 57.627574][ T6284] arch_do_signal_or_restart+0x8f/0x7d0 [ 57.627589][ T6284] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 57.627600][ T6284] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 57.627623][ T6284] irqentry_exit_to_user_mode+0x13f/0x280 [ 57.627639][ T6284] asm_exc_page_fault+0x26/0x30 [ 57.627648][ T6284] RIP: 0033:0x7f721dd8d171 [ 57.627657][ T6284] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 57.627666][ T6284] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 57.627675][ T6284] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 57.627681][ T6284] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 57.627687][ T6284] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 57.627693][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.627698][ T6284] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 57.627711][ T6284] [ 57.628257][ T6284] memory: usage 306780kB, limit 307200kB, failcnt 25222 [ 57.832423][ T6284] memory+swap: usage 377892kB, limit 9007199254740988kB, failcnt 0 [ 57.835404][ T6284] kmem: usage 4344kB, limit 9007199254740988kB, failcnt 0 [ 57.838102][ T6284] Memory cgroup stats for /syz3: [ 57.838233][ T6284] cache 267030528 [ 57.889991][ T6284] rss 147456 [ 57.891320][ T6284] rss_huge 0 [ 57.893316][ T6284] shmem 267030528 [ 57.898348][ T6284] mapped_file 0 [ 57.900190][ T6284] dirty 0 [ 57.901181][ T6284] writeback 0 [ 57.902156][ T6284] workingset_refault_anon 23 [ 57.903462][ T6284] workingset_refault_file 1706 [ 57.906236][ T6284] swap 115494912 [ 57.927962][ T6284] swapcached 65536 [ 57.929121][ T6284] pgpgin 179904 [ 57.930156][ T6284] pgpgout 114666 [ 57.932755][ T6284] pgfault 11953 [ 57.941741][ T6284] pgmajfault 50 [ 57.942805][ T6284] inactive_anon 78647296 [ 57.944087][ T6284] active_anon 185778176 [ 57.947803][ T6284] inactive_file 0 [ 57.949073][ T6284] active_file 0 [ 57.950090][ T6284] unevictable 0 [ 57.951080][ T6284] hierarchical_memory_limit 314572800 [ 57.952601][ T6284] hierarchical_memsw_limit 9223372036854771712 [ 57.954320][ T6284] total_cache 267030528 [ 57.955985][ T6284] total_rss 147456 [ 57.957087][ T6284] total_rss_huge 0 [ 57.958145][ T6284] total_shmem 267030528 [ 57.959411][ T6284] total_mapped_file 0 [ 57.960765][ T6284] total_dirty 0 [ 57.961780][ T6284] total_writeback 0 [ 57.962856][ T6284] total_workingset_refault_anon 23 [ 57.964364][ T6284] total_workingset_refault_file 1706 [ 57.968735][ T6284] total_swap 115494912 [ 57.969979][ T6284] total_swapcached 65536 [ 57.971172][ T6284] total_pgpgin 179904 [ 57.972367][ T6284] total_pgpgout 114666 [ 57.973518][ T6284] total_pgfault 11953 [ 57.975038][ T6284] total_pgmajfault 50 [ 57.976177][ T6284] total_inactive_anon 78647296 [ 57.977531][ T6284] total_active_anon 185778176 [ 57.979403][ T6284] total_inactive_file 0 [ 57.980608][ T6284] total_active_file 0 [ 57.981752][ T6284] total_unevictable 0 [ 57.982866][ T6284] anon_cost 0 [ 57.983832][ T6284] file_cost 0 [ 57.986078][ T6284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6244,uid=0 [ 57.990254][ T6284] Memory cgroup out of memory: Killed process 6244 (syz.3.82) total-vm:98212kB, anon-rss:944kB, file-rss:54652kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 58.077177][ T6490] tmpfs: Unknown parameter 'usrquota`' [ 58.328976][ T6526] trusted_key: encrypted_key: hex blob is missing [ 58.356678][ T6520] syz.2.167: attempt to access beyond end of device [ 58.356678][ T6520] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 58.360627][ T6520] XFS (nbd2): SB validate failed with error -5. [ 58.614437][ T6249] syz.3.82 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 58.645016][ T6249] CPU: 2 UID: 0 PID: 6249 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 58.645033][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.645039][ T6249] Call Trace: [ 58.645043][ T6249] [ 58.645047][ T6249] dump_stack_lvl+0x16c/0x1f0 [ 58.645065][ T6249] dump_header+0x101/0x930 [ 58.645079][ T6249] oom_kill_process+0x270/0xa60 [ 58.645090][ T6249] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 58.645106][ T6249] out_of_memory+0x350/0x1700 [ 58.645119][ T6249] ? __lock_acquire+0xaa4/0x1ba0 [ 58.645130][ T6249] ? __pfx_out_of_memory+0x10/0x10 [ 58.645145][ T6249] mem_cgroup_out_of_memory+0x205/0x270 [ 58.645160][ T6249] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 58.645177][ T6249] ? do_raw_spin_unlock+0x172/0x230 [ 58.645193][ T6249] try_charge_memcg+0x8ca/0xfa0 [ 58.645210][ T6249] ? __pfx_try_charge_memcg+0x10/0x10 [ 58.645221][ T6249] ? __print_lock_name+0xd1/0xe0 [ 58.645235][ T6249] ? rcu_read_unlock+0x17/0x60 [ 58.645250][ T6249] charge_memcg+0x8a/0x230 [ 58.645261][ T6249] __mem_cgroup_charge+0x2b/0x1e0 [ 58.645275][ T6249] shmem_alloc_and_add_folio+0x514/0xc20 [ 58.645289][ T6249] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 58.645301][ T6249] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 58.645314][ T6249] shmem_get_folio_gfp+0x687/0x1530 [ 58.645327][ T6249] ? __lock_acquire+0xaa4/0x1ba0 [ 58.645336][ T6249] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 58.645347][ T6249] ? __pte_offset_map_lock+0x155/0x2f0 [ 58.645362][ T6249] shmem_write_begin+0x160/0x300 [ 58.645374][ T6249] ? __pfx_shmem_write_begin+0x10/0x10 [ 58.645386][ T6249] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 58.645401][ T6249] ? __pfx_timestamp_truncate+0x10/0x10 [ 58.645414][ T6249] generic_perform_write+0x3cd/0x930 [ 58.645430][ T6249] ? __pfx_generic_perform_write+0x10/0x10 [ 58.645441][ T6249] ? inode_needs_update_time.part.0+0x191/0x270 [ 58.645456][ T6249] shmem_file_write_iter+0x10e/0x140 [ 58.645470][ T6249] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 58.645482][ T6249] __kernel_write_iter+0x317/0xa90 [ 58.645499][ T6249] ? __pfx___kernel_write_iter+0x10/0x10 [ 58.645515][ T6249] ? __up_read+0x1f8/0x750 [ 58.645527][ T6249] ? dump_user_range+0x73d/0xb30 [ 58.645545][ T6249] dump_user_range+0x418/0xb30 [ 58.645563][ T6249] ? __pfx_dump_user_range+0x10/0x10 [ 58.645579][ T6249] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 58.645595][ T6249] ? __pfx_writenote+0x10/0x10 [ 58.645608][ T6249] elf_core_dump+0x288a/0x3a90 [ 58.645624][ T6249] ? __pfx_elf_core_dump+0x10/0x10 [ 58.645632][ T6249] ? kasan_save_stack+0x42/0x60 [ 58.645641][ T6249] ? kasan_save_stack+0x33/0x60 [ 58.645650][ T6249] ? kasan_save_track+0x14/0x30 [ 58.645658][ T6249] ? __kasan_kmalloc+0xaa/0xb0 [ 58.645666][ T6249] ? do_coredump+0x17aa/0x4480 [ 58.645680][ T6249] ? get_signal+0x22e3/0x26d0 [ 58.645693][ T6249] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 58.645711][ T6249] ? 0xffffffffff600000 [ 58.645740][ T6249] ? do_coredump+0x3183/0x4480 [ 58.645754][ T6249] do_coredump+0x3183/0x4480 [ 58.645774][ T6249] ? __pfx_do_coredump+0x10/0x10 [ 58.645789][ T6249] ? stack_trace_save+0x8e/0xc0 [ 58.645803][ T6249] ? __pfx_stack_trace_save+0x10/0x10 [ 58.645819][ T6249] ? stack_depot_save_flags+0x28/0xa50 [ 58.645831][ T6249] ? __lock_acquire+0xaa4/0x1ba0 [ 58.645843][ T6249] ? __kasan_slab_free+0x51/0x70 [ 58.645852][ T6249] ? kmem_cache_free+0x2d4/0x4d0 [ 58.645861][ T6249] ? __sigqueue_free+0xba/0x2a0 [ 58.645869][ T6249] ? get_signal+0xcba/0x26d0 [ 58.645881][ T6249] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 58.645924][ T6249] ? proc_coredump_connector+0x2d1/0x4f0 [ 58.645938][ T6249] ? __pfx_proc_coredump_connector+0x10/0x10 [ 58.645953][ T6249] ? rcu_is_watching+0x12/0xc0 [ 58.645967][ T6249] get_signal+0x22e3/0x26d0 [ 58.645984][ T6249] ? force_sig_fault+0xc4/0x100 [ 58.645997][ T6249] ? __pfx_get_signal+0x10/0x10 [ 58.646015][ T6249] arch_do_signal_or_restart+0x8f/0x7d0 [ 58.646029][ T6249] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 58.646041][ T6249] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 58.646064][ T6249] irqentry_exit_to_user_mode+0x13f/0x280 [ 58.646079][ T6249] asm_exc_page_fault+0x26/0x30 [ 58.646089][ T6249] RIP: 0033:0x7f721dd8d171 [ 58.646105][ T6249] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 58.646117][ T6249] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 58.646126][ T6249] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 58.646132][ T6249] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 58.646138][ T6249] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 58.646144][ T6249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.646150][ T6249] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 58.646163][ T6249] [ 58.647164][ T6249] memory: usage 306016kB, limit 307200kB, failcnt 26582 [ 58.786052][ T6249] memory+swap: usage 392956kB, limit 9007199254740988kB, failcnt 0 [ 58.788244][ T6249] kmem: usage 4200kB, limit 9007199254740988kB, failcnt 0 [ 58.790196][ T6249] Memory cgroup stats for /syz3: [ 58.790277][ T6249] cache 272871424 [ 58.792698][ T6249] rss 143360 [ 58.793619][ T6249] rss_huge 0 [ 58.794543][ T6249] shmem 272871424 [ 58.795822][ T6249] mapped_file 0 [ 58.796966][ T6249] dirty 0 [ 58.797799][ T6249] writeback 0 [ 58.798740][ T6249] workingset_refault_anon 28 [ 58.800110][ T6249] workingset_refault_file 2287 [ 58.801437][ T6249] swap 125042688 [ 58.802438][ T6249] swapcached 40960 [ 58.803482][ T6249] pgpgin 195573 [ 58.804508][ T6249] pgpgout 128899 [ 58.805618][ T6249] pgfault 12312 [ 58.806608][ T6249] pgmajfault 65 [ 58.807684][ T6249] inactive_anon 28655616 [ 58.808890][ T6249] active_anon 243400704 [ 58.810041][ T6249] inactive_file 0 [ 58.811063][ T6249] active_file 0 [ 58.812044][ T6249] unevictable 0 [ 58.813028][ T6249] hierarchical_memory_limit 314572800 [ 58.814489][ T6249] hierarchical_memsw_limit 9223372036854771712 [ 58.816255][ T6249] total_cache 272871424 [ 58.817466][ T6249] total_rss 143360 [ 58.818511][ T6249] total_rss_huge 0 [ 58.819566][ T6249] total_shmem 272871424 [ 58.820727][ T6249] total_mapped_file 0 [ 58.821841][ T6249] total_dirty 0 [ 58.822823][ T6249] total_writeback 0 [ 58.822948][ T6556] tun0: tun_chr_ioctl cmd 1074025678 [ 58.823885][ T6249] total_workingset_refault_anon 28 [ 58.826920][ T6556] tun0: group set to 0 [ 58.827383][ T6249] total_workingset_refault_file 2287 [ 58.827390][ T6249] total_swap 125042688 [ 58.831595][ T6249] total_swapcached 40960 [ 58.832774][ T6249] total_pgpgin 195573 [ 58.833934][ T6249] total_pgpgout 128899 [ 58.835165][ T6249] total_pgfault 12312 [ 58.836295][ T6249] total_pgmajfault 65 [ 58.837405][ T6249] total_inactive_anon 28655616 [ 58.838749][ T6249] total_active_anon 243400704 [ 58.840071][ T6249] total_inactive_file 0 [ 58.841244][ T6249] total_active_file 0 [ 58.842355][ T6249] total_unevictable 0 [ 58.843474][ T6249] anon_cost 0 [ 58.844421][ T6249] file_cost 0 [ 58.854705][ T6249] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6261,uid=0 [ 58.858853][ T6249] Memory cgroup out of memory: Killed process 6261 (syz.3.82) total-vm:98212kB, anon-rss:1072kB, file-rss:55360kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 59.083964][ T6571] mmap: syz.1.186 (6571) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.360638][ T6269] syz.3.82 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 59.363351][ T6269] CPU: 2 UID: 0 PID: 6269 Comm: syz.3.82 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 59.363365][ T6269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.363372][ T6269] Call Trace: [ 59.363376][ T6269] [ 59.363380][ T6269] dump_stack_lvl+0x16c/0x1f0 [ 59.363399][ T6269] dump_header+0x101/0x930 [ 59.363414][ T6269] oom_kill_process+0x270/0xa60 [ 59.363425][ T6269] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 59.363441][ T6269] out_of_memory+0x350/0x1700 [ 59.363453][ T6269] ? __lock_acquire+0xaa4/0x1ba0 [ 59.363465][ T6269] ? __pfx_out_of_memory+0x10/0x10 [ 59.363480][ T6269] mem_cgroup_out_of_memory+0x205/0x270 [ 59.363495][ T6269] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 59.363513][ T6269] ? do_raw_spin_unlock+0x172/0x230 [ 59.363526][ T6269] try_charge_memcg+0x8ca/0xfa0 [ 59.363540][ T6269] ? __pfx_try_charge_memcg+0x10/0x10 [ 59.363551][ T6269] ? __print_lock_name+0xd1/0xe0 [ 59.363564][ T6269] ? rcu_read_unlock+0x17/0x60 [ 59.363579][ T6269] charge_memcg+0x8a/0x230 [ 59.363591][ T6269] __mem_cgroup_charge+0x2b/0x1e0 [ 59.363604][ T6269] shmem_alloc_and_add_folio+0x514/0xc20 [ 59.363618][ T6269] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 59.363630][ T6269] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 59.363644][ T6269] shmem_get_folio_gfp+0x687/0x1530 [ 59.363656][ T6269] ? __lock_acquire+0xaa4/0x1ba0 [ 59.363665][ T6269] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 59.363676][ T6269] ? __pte_offset_map_lock+0x155/0x2f0 [ 59.363692][ T6269] shmem_write_begin+0x160/0x300 [ 59.363704][ T6269] ? __pfx_shmem_write_begin+0x10/0x10 [ 59.363716][ T6269] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 59.363731][ T6269] ? __pfx_timestamp_truncate+0x10/0x10 [ 59.363744][ T6269] generic_perform_write+0x3cd/0x930 [ 59.363760][ T6269] ? __pfx_generic_perform_write+0x10/0x10 [ 59.363771][ T6269] ? inode_needs_update_time.part.0+0x191/0x270 [ 59.363787][ T6269] shmem_file_write_iter+0x10e/0x140 [ 59.363801][ T6269] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 59.363813][ T6269] __kernel_write_iter+0x317/0xa90 [ 59.363835][ T6269] ? __pfx___kernel_write_iter+0x10/0x10 [ 59.363850][ T6269] ? __up_read+0x1f8/0x750 [ 59.363863][ T6269] ? dump_user_range+0x73d/0xb30 [ 59.363881][ T6269] dump_user_range+0x418/0xb30 [ 59.363899][ T6269] ? __pfx_dump_user_range+0x10/0x10 [ 59.363916][ T6269] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 59.363931][ T6269] ? __pfx_writenote+0x10/0x10 [ 59.363944][ T6269] elf_core_dump+0x288a/0x3a90 [ 59.363960][ T6269] ? __pfx_elf_core_dump+0x10/0x10 [ 59.363969][ T6269] ? kasan_save_stack+0x42/0x60 [ 59.363978][ T6269] ? kasan_save_stack+0x33/0x60 [ 59.363986][ T6269] ? kasan_save_track+0x14/0x30 [ 59.363995][ T6269] ? __kasan_kmalloc+0xaa/0xb0 [ 59.364003][ T6269] ? do_coredump+0x17aa/0x4480 [ 59.364017][ T6269] ? get_signal+0x22e3/0x26d0 [ 59.364030][ T6269] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 59.364048][ T6269] ? 0xffffffffff600000 [ 59.364078][ T6269] ? do_coredump+0x3183/0x4480 [ 59.364092][ T6269] do_coredump+0x3183/0x4480 [ 59.364111][ T6269] ? __pfx_do_coredump+0x10/0x10 [ 59.364127][ T6269] ? stack_trace_save+0x8e/0xc0 [ 59.364141][ T6269] ? __pfx_stack_trace_save+0x10/0x10 [ 59.364154][ T6269] ? stack_depot_save_flags+0x28/0xa50 [ 59.364166][ T6269] ? __lock_acquire+0xaa4/0x1ba0 [ 59.364177][ T6269] ? __kasan_slab_free+0x51/0x70 [ 59.364202][ T6269] ? kmem_cache_free+0x2d4/0x4d0 [ 59.364211][ T6269] ? __sigqueue_free+0xba/0x2a0 [ 59.364219][ T6269] ? get_signal+0xcba/0x26d0 [ 59.364231][ T6269] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 59.364264][ T6269] ? proc_coredump_connector+0x2d1/0x4f0 [ 59.364276][ T6269] ? __pfx_proc_coredump_connector+0x10/0x10 [ 59.364291][ T6269] ? rcu_is_watching+0x12/0xc0 [ 59.364305][ T6269] get_signal+0x22e3/0x26d0 [ 59.364322][ T6269] ? force_sig_fault+0xc4/0x100 [ 59.364336][ T6269] ? __pfx_get_signal+0x10/0x10 [ 59.364353][ T6269] arch_do_signal_or_restart+0x8f/0x7d0 [ 59.364367][ T6269] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 59.364379][ T6269] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 59.364402][ T6269] irqentry_exit_to_user_mode+0x13f/0x280 [ 59.364418][ T6269] asm_exc_page_fault+0x26/0x30 [ 59.364428][ T6269] RIP: 0033:0x7f721dd8d171 [ 59.364436][ T6269] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 59.364447][ T6269] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 59.364455][ T6269] RAX: 0000000000000000 RBX: 00007f721dfa6080 RCX: 00007f721dd8d169 [ 59.364461][ T6269] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 59.364467][ T6269] RBP: 00007f721de0e990 R08: 0000000000000000 R09: 0000000000000000 [ 59.364473][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.364478][ T6269] R13: 0000000000000000 R14: 00007f721dfa6080 R15: 00007ffc79fee058 [ 59.364491][ T6269] [ 59.364494][ T6269] memory: usage 307200kB, limit 307200kB, failcnt 28131 [ 59.484722][ T34] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 59.492432][ T6269] memory+swap: usage 420452kB, limit 9007199254740988kB, failcnt 0 [ 59.525472][ T6269] kmem: usage 3972kB, limit 9007199254740988kB, failcnt 0 [ 59.527465][ T6269] Memory cgroup stats for /syz3: [ 59.527545][ T6269] cache 293224448 [ 59.529975][ T6269] rss 135168 [ 59.530894][ T6269] rss_huge 0 [ 59.531812][ T6269] shmem 293199872 [ 59.532879][ T6269] mapped_file 0 [ 59.533867][ T6269] dirty 0 [ 59.534975][ T6269] writeback 0 [ 59.535915][ T6269] workingset_refault_anon 29 [ 59.537209][ T6269] workingset_refault_file 3193 [ 59.538596][ T6269] swap 121470976 [ 59.539654][ T6269] swapcached 40960 [ 59.540722][ T6269] pgpgin 211130 [ 59.541712][ T6269] pgpgout 139506 [ 59.542723][ T6269] pgfault 12728 [ 59.543712][ T6269] pgmajfault 81 [ 59.544802][ T6269] inactive_anon 184840192 [ 59.546132][ T6269] active_anon 107802624 [ 59.547377][ T6269] inactive_file 0 [ 59.548555][ T6269] active_file 24576 [ 59.549653][ T6269] unevictable 0 [ 59.550647][ T6269] hierarchical_memory_limit 314572800 [ 59.552147][ T6269] hierarchical_memsw_limit 9223372036854771712 [ 59.553137][ T6601] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 59.553859][ T6269] total_cache 293224448 [ 59.553866][ T6269] total_rss 135168 [ 59.553870][ T6269] total_rss_huge 0 [ 59.553874][ T6269] total_shmem 293199872 [ 59.553878][ T6269] total_mapped_file 0 [ 59.553882][ T6269] total_dirty 0 [ 59.553886][ T6269] total_writeback 0 [ 59.553890][ T6269] total_workingset_refault_anon 29 [ 59.553895][ T6269] total_workingset_refault_file 3193 [ 59.553899][ T6269] total_swap 121470976 [ 59.584715][ T6269] total_swapcached 40960 [ 59.585928][ T6269] total_pgpgin 211130 [ 59.587111][ T6269] total_pgpgout 139506 [ 59.588288][ T6269] total_pgfault 12728 [ 59.589413][ T6269] total_pgmajfault 81 [ 59.590528][ T6269] total_inactive_anon 184840192 [ 59.591875][ T6269] total_active_anon 107802624 [ 59.593193][ T6269] total_inactive_file 0 [ 59.594424][ T6269] total_active_file 24576 [ 59.614741][ T6269] total_unevictable 0 [ 59.615890][ T6269] anon_cost 0 [ 59.616837][ T6269] file_cost 0 [ 59.617773][ T6269] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.82,pid=6284,uid=0 [ 59.621877][ T6269] Memory cgroup out of memory: Killed process 6284 (syz.3.82) total-vm:98212kB, anon-rss:1072kB, file-rss:53660kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 59.635914][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 59.638046][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 59.640806][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 59.643571][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 59.647248][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 59.650853][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 59.652980][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 59.656223][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 59.659023][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 59.662072][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 59.666467][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 59.668554][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 59.671485][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 59.674246][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 59.677594][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 59.682789][ T34] usb 6-1: string descriptor 0 read error: -22 [ 59.684688][ T34] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 59.687172][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.694540][ T34] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 59.776238][ T6606] __nla_validate_parse: 6 callbacks suppressed [ 59.776250][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.168'. [ 59.780433][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.168'. [ 59.782853][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.168'. [ 59.792751][ T6606] netlink: 36 bytes leftover after parsing attributes in process `syz.3.168'. [ 59.824839][ T6012] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 59.857335][ T6611] overlayfs: failed to resolve './file0': -2 [ 59.897498][ T34] usb 6-1: USB disconnect, device number 3 [ 59.985848][ T6012] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 59.988000][ T6012] usb 5-1: config 0 has no interface number 0 [ 59.989656][ T6012] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.992452][ T6012] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 59.995567][ T6012] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 59.998924][ T6012] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 60.001944][ T6012] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 60.004993][ T6012] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 60.009080][ T6012] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 60.011550][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.025114][ T6012] usb 5-1: config 0 descriptor?? [ 60.027336][ T6603] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 60.029597][ T6603] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 60.034464][ T6012] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 60.068204][ T6616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.203'. [ 60.240552][ T6603] ldusb 5-1:0.55: Write buffer overflow, 3 bytes dropped [ 60.244936][ T34] usb 5-1: USB disconnect, device number 3 [ 60.248525][ T34] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 60.334767][ T834] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 60.506459][ T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.509418][ T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8224, setting to 64 [ 60.512510][ T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.516226][ T834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.518963][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.726228][ T834] usb 7-1: usb_control_msg returned -32 [ 60.729764][ T834] usbtmc 7-1:16.0: can't read capabilities [ 60.737568][ T5949] udevd[5949]: failed to send result of seq 13695 to main daemon: Connection refused [ 60.914095][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.217'. [ 60.916781][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.217'. [ 60.919321][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.217'. [ 60.921756][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.217'. [ 61.442912][ T6661] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 61.448776][ T6662] cgroup: Unknown subsys name './file0' [ 61.531420][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 61.531430][ T40] audit: type=1400 audit(1744376337.793:339): avc: denied { setopt } for pid=6677 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.538545][ T40] audit: type=1400 audit(1744376337.793:340): avc: denied { bind } for pid=6677 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.543743][ T40] audit: type=1400 audit(1744376337.793:341): avc: denied { node_bind } for pid=6677 comm="syz.3.227" saddr=172.20.20.18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 61.737314][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 61.799462][ T6713] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.823972][ T40] audit: type=1400 audit(1744376338.083:342): avc: denied { create } for pid=6714 comm="syz.3.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 61.830557][ T6717] futex_wake_op: syz.3.241 tries to shift op by 32; fix this program [ 61.830595][ T6716] futex_wake_op: syz.3.241 tries to shift op by 32; fix this program [ 61.836271][ T40] audit: type=1400 audit(1744376338.093:343): avc: denied { ioctl } for pid=6714 comm="syz.3.241" path="socket:[10873]" dev="sockfs" ino=10873 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.387215][ T40] audit: type=1400 audit(1744376338.653:344): avc: denied { write } for pid=6737 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.443537][ T40] audit: type=1400 audit(1744376338.703:345): avc: denied { ioctl } for pid=6737 comm="syz.1.249" path="socket:[11751]" dev="sockfs" ino=11751 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.523120][ T6742] syz_tun: entered allmulticast mode [ 62.534149][ T6743] syz_tun: left allmulticast mode [ 62.626287][ T40] audit: type=1400 audit(1744376338.893:346): avc: denied { append } for pid=6753 comm="syz.1.253" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.628142][ T6754] xt_CONNSECMARK: invalid mode: 0 [ 62.639489][ T6754] misc userio: Invalid payload size [ 62.704282][ T6759] ./file0: Can't lookup blockdev [ 62.721869][ T40] audit: type=1400 audit(1744376338.983:347): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.746902][ T40] audit: type=1400 audit(1744376339.013:348): avc: denied { setopt } for pid=6763 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.887651][ T6780] 9pnet_virtio: no channels available for device syz [ 63.021367][ T6012] usb 7-1: USB disconnect, device number 2 [ 63.138492][ T6802] Bluetooth: MGMT ver 1.23 [ 63.187196][ T6811] input: syz0 as /devices/virtual/input/input5 [ 63.359362][ T6831] syzkaller1: entered allmulticast mode [ 63.514940][ T65] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.676075][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 63.680485][ T65] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 45014, setting to 1024 [ 63.683607][ T65] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 63.687420][ T65] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.691048][ T65] usb 7-1: config 1 interface 0 has no altsetting 0 [ 63.694620][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 63.699352][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.701614][ T65] usb 7-1: Product: ㇿ᳾⦗愊ڍ㩛欘뤪Ⲗ溴嘣﨟⾐໬ȃꅏꖽ蝐鉀迈ܴ羚芘裷鞽留힙㹩뒌宗蠗繆퇙펄苇디 [ 63.705667][ T65] usb 7-1: Manufacturer: ࠇ [ 63.706974][ T65] usb 7-1: SerialNumber: У [ 63.711643][ T6822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.713745][ T6822] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.880811][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.883093][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.885958][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.888130][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.890663][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.892915][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.898874][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.901126][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.903287][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.906617][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.908853][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.910995][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.913137][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.915840][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.918279][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.920791][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.922923][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.926053][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.929497][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.931654][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.933834][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.936090][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.938246][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.940529][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.942675][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.944897][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.947056][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.949260][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.951403][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.953582][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.956498][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.958831][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.961033][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.963182][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.966183][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.968384][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.970527][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.972948][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.975555][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.979997][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.982256][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.984452][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.986784][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 63.991459][ T6355] hid-generic 0000:007F:FFFFFFFE.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 64.141548][ T65] usb 7-1: USB disconnect, device number 3 [ 64.199224][ T6931] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 64.202576][ T6931] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 64.205625][ T6931] CPU: 0 UID: 0 PID: 6931 Comm: syz.1.306 Not tainted 6.15.0-rc1-syzkaller-00246-g900241a5cc15 #0 PREEMPT(full) [ 64.209831][ T6931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.212506][ T6931] RIP: 0010:h5_recv+0x104/0x910 [ 64.213764][ T6931] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 21 bb 5b f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 64.218533][ T6931] RSP: 0018:ffffc90007edfc00 EFLAGS: 00010293 [ 64.220065][ T6931] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885f820a [ 64.222044][ T6931] RDX: ffff888027714880 RSI: ffffffff885f824f RDI: 0000000000000005 [ 64.224224][ T6931] RBP: ffffc90007edfd88 R08: 0000000000000005 R09: 0000000000000000 [ 64.226185][ T6931] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 64.228188][ T6931] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c917ce0 [ 64.230160][ T6931] FS: 00007fbb1865c6c0(0000) GS:ffff8880d69b3000(0000) knlGS:0000000000000000 [ 64.232366][ T6931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.234062][ T6931] CR2: 00007fbb1863af98 CR3: 000000002b5a6000 CR4: 0000000000352ef0 [ 64.236057][ T6931] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.238040][ T6931] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.240030][ T6931] Call Trace: [ 64.240909][ T6931] [ 64.241665][ T6931] ? __pfx_h5_recv+0x10/0x10 [ 64.242834][ T6931] hci_uart_tty_receive+0x251/0x7e0 [ 64.244182][ T6931] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 64.245589][ T6931] tty_ioctl+0x57d/0x1610 [ 64.246678][ T6931] ? __pfx_tty_ioctl+0x10/0x10 [ 64.247884][ T6931] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 64.249619][ T6931] ? hook_file_ioctl_common+0x145/0x410 [ 64.251001][ T6931] ? selinux_file_ioctl+0x180/0x270 [ 64.252327][ T6931] ? selinux_file_ioctl+0xb4/0x270 [ 64.253666][ T6931] ? __pfx_tty_ioctl+0x10/0x10 [ 64.255042][ T6931] __x64_sys_ioctl+0x190/0x200 [ 64.256255][ T6931] do_syscall_64+0xcd/0x260 [ 64.257399][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.258895][ T6931] RIP: 0033:0x7fbb1778d169 [ 64.260016][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.264754][ T6931] RSP: 002b:00007fbb1865c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.266806][ T6931] RAX: ffffffffffffffda RBX: 00007fbb179a6080 RCX: 00007fbb1778d169 [ 64.268761][ T6931] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000006 [ 64.270736][ T6931] RBP: 00007fbb1780e990 R08: 0000000000000000 R09: 0000000000000000 [ 64.272713][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.274674][ T6931] R13: 0000000000000000 R14: 00007fbb179a6080 R15: 00007fff673e4608 [ 64.276643][ T6931] [ 64.277429][ T6931] Modules linked in: [ 64.278587][ T6931] ---[ end trace 0000000000000000 ]--- [ 64.280012][ T6931] RIP: 0010:h5_recv+0x104/0x910 [ 64.281259][ T6931] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 21 bb 5b f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 64.286090][ T6931] RSP: 0018:ffffc90007edfc00 EFLAGS: 00010293 [ 64.287876][ T6931] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff885f820a [ 64.290176][ T6931] RDX: ffff888027714880 RSI: ffffffff885f824f RDI: 0000000000000005 [ 64.292407][ T6931] RBP: ffffc90007edfd88 R08: 0000000000000005 R09: 0000000000000000 [ 64.294696][ T6931] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 64.296909][ T6931] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c917ce0 [ 64.299213][ T6931] FS: 00007fbb1865c6c0(0000) GS:ffff8880d69b3000(0000) knlGS:0000000000000000 [ 64.301844][ T6931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.303757][ T6931] CR2: 00007fbb1863af98 CR3: 000000002b5a6000 CR4: 0000000000352ef0 [ 64.306020][ T6931] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.308022][ T6931] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.310012][ T6931] Kernel panic - not syncing: Fatal exception [ 64.312079][ T6931] Kernel Offset: disabled [ 64.313202][ T6931] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:59:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854dfe45 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc90007edf600 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ae254a0 R15=ffffffff854dfde0 RIP=ffffffff854dfe6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbb1865c6c0 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbb1863af98 CR3=000000002b5a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb1780f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb1780f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb1780f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb1780f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb1780fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb1780faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb1797d488 00007fbb1797d480 00007fbb1797d478 00007fbb1797d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb184dd100 00007fbb1797d440 00007fbb1797d458 00007fbb1797d4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbb1797d498 00007fbb1797d490 00007fbb1797d488 00007fbb1797d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000002ad4c RBX=0000000000000001 RCX=ffffffff8b724439 RDX=ffffed100d4a65be RSI=ffffffff8bf462c0 RDI=ffffffff8191a751 RBP=ffffed1003ad0488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a65bd R10=ffff88806a532deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d682440 R14=ffffffff90865310 R15=0000000000000000 RIP=ffffffff8b722ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbb1867cf98 CR3=00000000304f6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=f6e080d551da7157 f05c3d28a900ad0c f6e080d551da7157 f05c3d28a900ad0c f6e080d551da7157 f05c3d28a900ad0c f6e080d551da7157 f05c3d28a900ad0c ZMM18=65769f06ee741d75 72daf8a69820a7da 65769f06ee741d75 72daf8a69820a7da 65769f06ee741d75 72daf8a69820a7da 65769f06ee741d75 72daf8a69820a7da ZMM19=7404000000000000 0000000000000005 7404000000000000 0000000000000004 7404000000000000 0000000000000003 7404000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=ff562527ff562527 ff562527ff562527 ff562527ff562527 ff562527ff562527 ff562527ff562527 ff562527ff562527 ff562527ff562527 ff562527ff562527 ZMM22=d321f919d321f919 d321f919d321f919 d321f919d321f919 d321f919d321f919 d321f919d321f919 d321f919d321f919 d321f919d321f919 d321f919d321f919 ZMM23=8d47cb938d47cb93 8d47cb938d47cb93 8d47cb938d47cb93 8d47cb938d47cb93 8d47cb938d47cb93 8d47cb938d47cb93 8d47cb938d47cb93 8d47cb938d47cb93 ZMM24=7f1bc9547f1bc954 7f1bc9547f1bc954 7f1bc9547f1bc954 7f1bc9547f1bc954 7f1bc9547f1bc954 7f1bc9547f1bc954 7f1bc9547f1bc954 7f1bc9547f1bc954 ZMM25=75e3b54975e3b549 75e3b54975e3b549 75e3b54975e3b549 75e3b54975e3b549 75e3b54975e3b549 75e3b54975e3b549 75e3b54975e3b549 75e3b54975e3b549 ZMM26=1865f9251865f925 1865f9251865f925 1865f9251865f925 1865f9251865f925 1865f9251865f925 1865f9251865f925 1865f9251865f925 1865f9251865f925 ZMM27=fa25ecc2fa25ecc2 fa25ecc2fa25ecc2 fa25ecc2fa25ecc2 fa25ecc2fa25ecc2 fa25ecc2fa25ecc2 fa25ecc2fa25ecc2 fa25ecc2fa25ecc2 fa25ecc2fa25ecc2 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6a0200006a020000 6a0200006a020000 6a0200006a020000 6a0200006a020000 6a0200006a020000 6a0200006a020000 6a0200006a020000 6a0200006a020000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000002 RCX=0000000000000002 RDX=1ffff920000c910f RSI=0000000000000000 RDI=ffffffff8dcfad10 RBP=ffffc90000648870 RSP=ffffc900006487b8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000648828 R11=000000000000a872 R12=ffffc90000648878 R13=ffffc90000648828 R14=0000000000000000 R15=ffff88801d684880 RIP=ffffffff8169da14 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000052610000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700000000 0000000000010071 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721de0f972 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721de0f97f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721de0f979 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721de0f98d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721de0fa13 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721de0faf1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721df7d488 00007f721df7d480 00007f721df7d478 00007f721df7d450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721eadd100 00007f721df7d440 00007f721df7d458 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f721df7d498 00007f721df7d490 00007f721df7d488 00007f721df7d480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000222e4 RBX=0000000000000003 RCX=ffffffff8b724439 RDX=ffffed100d4e65be RSI=ffffffff8bf462c0 RDI=ffffffff8191a751 RBP=ffffed1003b53000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801da98000 R14=ffffffff90865310 R15=0000000000000000 RIP=ffffffff8b722ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff024004000 CR3=0000000031c92000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559492be20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555594928e5c 0000555594928aa0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559493dcf7 0000555594939530 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800030010000108 006210000c10000f df8080100000040c 013ecc000200073c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0490100000040400 03f8000200070030 656c69662f2e01ff ffffffffffffffef ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8c0048400098403 1404000980030010 0008800401000002 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080009b0030204 900009a003000490 000990031fffffff fa04880009880302 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08060a0169da1ff7 fff4860800018003 3810000980040100 00000806060101ce ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0138100005800440 8080848181100000 10000fffffffffff ff04010000000806 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0165d800080005 b0030204900005a0 0300049000059003 0004880005880302 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8c0048400058403 1404000580030810 0001800408080052 0800010000000806 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0169da1ff7fff4 8608000180033810 0009800401000000 0806060101ce0008 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000