last executing test programs: 7.604163345s ago: executing program 1 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$9p_rdma(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x3}}]}}) (async) bind$netlink(r0, &(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) 7.603502394s ago: executing program 1 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x228, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xaf}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[*.-,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!*,,!&P-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+@%#\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb8, 0x4, "06706ea928197d1bf411404d80e59395215a2898f529af9bbb7142634c8f2f6e94d8feb1e18cf77a8b30750e3c7219fe4f5dff9ccce42d8ff694521cc5a68092a59b03032540e974663323d78eba052e6ef493d48b014d94d98806fdac9b14cf369958a309b02ec4b4da5f95a0040a1a839a510115adf69d437ecfd3ce08e1370d29a9aafcde919652c7b9985608c9e94b4e345b494ff56a1919fbf0cefa6fc27d70446ca90a24da3297f380f695057cecebd4c8"}, @ETHTOOL_A_BITSET_MASK={0xd3, 0x5, "e44c89850516fb5881e9b422fac3fe35839792a64b81b493fcf62239f0fa6b4a48c2d253ce10166a5a8aac8e8d842b22cf3e048709fe0a5cbd1595c8e755f1d659ab7c1df4f2f7efc5a909f6d8afb63631f2ed4b1bd651ca199e2e836c03591e1e7208cce14cd87d72a78013f150411ce9f4e665598fbf0ae235d002be9c42c6784b31a47d981a0077e80bf19f30adec852d0897f198be7893a9075f259923d9dea6d0a160949925d73ce1878ff1c26bd90537d1f4b671e3ef8bd359407cb2a297f5b4a7d4587617eae4f5b9cb2f19"}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x8000}, 0x40105) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x800, 0x4, 0x5, 0x0, 0x4, 0x0, 0x0, 0x3, 0xe928, 0xffff, 0x9, 0xfffffffffffffff8, 0x1, 0xff, 0x9], 0xdddd0000, 0x820}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000009c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)={0x4ac, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33a41b5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xae90}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x114, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "71087ab42f151d4a12d665d3d27876fb1443f68100a06911328f1d35d71aee917a3c4a37"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0xb3, 0x3, "f1d429bb2cba3976cf222f559031e20261dc79bd1e717da0dadbde47aa2ddc6cf7c81b35613734e7c65301b215f20fd6a85bc08e5537649eb3c16370b15f727c8b8fda167e1008c03dca9bbecedaf2bb5a8c07010ade504f959010658a82325c6f734a4071ada39afd2183cfaebd795b48945c648b60c0e61bd667451e22018366bf0ecd3e5c9a42a3c99ebeb7091c3411653d1ca93758af79fe4e06ace475406313e994bf40d80df44e28ed0afca3"}]}, @TIPC_NLA_BEARER={0x180, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private1, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @private0, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2108}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @private1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x8011}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r4, 0x400, 0x70bd29, 0x10, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4080) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000b80)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x46, 'syz0\x00', @default, 0x7, 0x4, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000e80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1d4, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x72}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xdc, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xbb, 0x2, "b3576d118acccabf8499c7805a3f1aa02284b557e9afec522ed839a31ea99c22a1918d84e2a3ee8774dd1598f38c6b5a803f1f88987c765d93569fa99757c3e59740cde733ffc78c10d4566885e3850c93d9562bdca90e753b3348642c475df1ee626c78878b44995679f02a4271c737d03f788143088a0f2bd833c6025e12748e2d51028de73d81401cb645611017698814b506d0ff589ba0197d17432a38649f507be19821940a388b81d21297e0b774dd3e557c63c3"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff0}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x31, 0x1, "7eb1ff2a1e7aab995c0162f6df1e9377432b032076e03a11f9d89d26b40453a92d383be316eb557e85295b8e44"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x6c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffffffb}}, {0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x49, 0x1, "20cc05d6a1f3b89f19b1f400d56eb88986b61c39a8ed18c84692eab3ed27388c55976b7e255ed446a34b50086c3e3455758e7d62bd04a7f0d3d5310b705f173e24a5d4d805"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfcc21b5d}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x48080) r6 = syz_open_dev$audion(&(0x7f0000000ec0), 0xc00000000000000, 0x20001) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000f00)={0x0, 0x7f6f5060}) r7 = pidfd_getfd(r6, r2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000f40)={0x4}, 0x8) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000f80)={[0x9, 0x5, 0x5, 0x200, 0xec, 0x4, 0x56b1ab66, 0x1, 0xa9c, 0x8, 0x4, 0x6, 0x7, 0xebb0, 0x64fc12c, 0x0, 0x6, 0x8000, 0x8ad, 0x6, 0x624, 0x81d, 0x4, 0x4, 0x6, 0x4, 0xfd, 0x8, 0xc9, 0x6, 0x1, 0x5, 0x5, 0xb, 0xb63, 0xe2, 0x8, 0xffffffff, 0x4, 0xe861, 0x4, 0x3f80000, 0x3, 0x9, 0xb, 0x4, 0x7, 0x6, 0x4, 0xff, 0x3, 0x4, 0xdf, 0x8, 0x8, 0x3, 0x9, 0x800, 0x8001, 0xf1, 0x8, 0x8, 0x4, 0x7, 0x3, 0xfffffff8, 0x1ff, 0x5, 0x69, 0x4, 0x5, 0x9cd, 0x7, 0x94, 0x4, 0x9, 0x4, 0xe, 0x5, 0xffffffff, 0x8, 0x5, 0x8, 0x80000001, 0x5, 0x80000000, 0x39, 0x5, 0x6, 0x0, 0x5, 0x5, 0xffffffff, 0x2, 0x7, 0xfffff801, 0x0, 0x3, 0x7, 0x6, 0x200, 0x4, 0x4, 0x4, 0x101, 0x80000000, 0x2, 0xa, 0x20000, 0x6, 0x6, 0x0, 0x7, 0x4, 0xff, 0x0, 0x80000000, 0x0, 0x4, 0x6, 0xf72a, 0x9, 0x9, 0x4, 0x489, 0x2f, 0x7, 0xffffffff, 0xe0, 0x5, 0x8, 0x33c, 0xe, 0x4, 0x7, 0x9, 0xf, 0x10001, 0x2, 0x2, 0x6bc0, 0xa29, 0x0, 0x1, 0xd, 0x6, 0xf77, 0x6, 0x4, 0x40, 0x6, 0x80, 0x0, 0xffff7fff, 0x6, 0x10, 0x30e7, 0x5, 0x8, 0x2, 0x5, 0x6, 0x6, 0x8, 0xfff, 0x8, 0x9, 0x421f, 0x7, 0x8, 0x3, 0x4, 0x2, 0x0, 0x6, 0x3ff, 0x9, 0xb8, 0x4, 0xa4e, 0xfffffffc, 0xd, 0x3, 0x4e000000, 0x7, 0x3ff, 0x7, 0xc45e, 0x8, 0x8, 0x0, 0x8, 0xffffffff, 0x4, 0x9, 0x10, 0xba85, 0x50, 0x6, 0x7a06, 0x8, 0x3, 0x4, 0x4, 0x2, 0x4, 0x7, 0x10, 0x20000, 0x200, 0x5, 0x7, 0x8d, 0x7, 0x379, 0x1, 0x3, 0xffffffff, 0x4, 0x1000, 0x2, 0x800, 0x8318, 0x81, 0x3, 0x2, 0xcd9, 0xa4a1, 0x6, 0x8, 0x1, 0x3ff, 0x6, 0x8000, 0x5, 0x8, 0xffff, 0xfffffffe, 0x7fffffff, 0x4, 0x8afc, 0x16, 0x4, 0x80, 0x73, 0x8, 0xffff2d75, 0x9, 0xfffffbff, 0xc, 0x6, 0xae, 0x5, 0x5, 0x4, 0x4, 0x4, 0x0, 0x66da, 0x3, 0x7, 0x1, 0x7, 0x72, 0x8, 0x7fffffff, 0xd, 0x9, 0x823, 0x7f3, 0x1, 0x7f, 0x1, 0x6eab, 0x5, 0x7ff, 0x8, 0x8, 0xc5, 0x2, 0x800, 0xf, 0x637, 0x9, 0xffc, 0x1, 0x3ff, 0x1, 0x8000, 0xe, 0x9, 0x3, 0x0, 0x7, 0x4, 0x2, 0xfcb, 0x0, 0x1ff, 0x1, 0x4, 0xfb7, 0xd59, 0x2, 0xb, 0x1e, 0xfffffffd, 0x6, 0x4, 0x5, 0xc2, 0x101, 0x7, 0xffffff27, 0xffff, 0x0, 0x0, 0x4, 0xc2, 0x3, 0x0, 0x1, 0x2d8ca806, 0x4, 0x46, 0x4, 0x7, 0x8, 0x7, 0x4b1, 0x2, 0x60b3, 0x5, 0xf3, 0x4be, 0x0, 0x8, 0x5, 0x2, 0x3, 0x146d, 0x3ff, 0x100, 0x6, 0x0, 0x8, 0x6, 0x4, 0xac, 0x3, 0x9dc, 0x60e4, 0x81, 0x4, 0x0, 0x8, 0xfff, 0x1, 0x3, 0x41d, 0x0, 0x1, 0x3, 0x5c470329, 0x8001, 0x7, 0x5, 0x7, 0x6, 0x5, 0x6, 0x1, 0xfffffff8, 0x8001, 0x7, 0x0, 0x8, 0x373, 0x9, 0x6, 0x9, 0xb00, 0x1, 0x9, 0x0, 0x4, 0x80000000, 0x4, 0x200, 0x80000000, 0x11e, 0x7, 0x4, 0x1, 0x8312, 0x1, 0x6, 0x6, 0xffff, 0x7, 0x1f, 0x7, 0x7, 0x5, 0x8, 0x2, 0x2, 0xfff, 0x2, 0x8e, 0xfffffff7, 0xfff, 0xcd, 0x1, 0x5, 0x4, 0xa, 0x52deba9e, 0x8000, 0xff, 0x1, 0x8, 0x63, 0x5, 0x6, 0x2, 0x2, 0x8, 0xfffffff0, 0x101, 0x1, 0xf, 0x3424, 0x3f5, 0x3, 0x2, 0x1609, 0x8e, 0x8001, 0x8, 0x1ff, 0xe, 0x4, 0x6, 0x1, 0x76f, 0x66ca, 0xffff, 0x9, 0x6, 0xffff2b2b, 0x4, 0x4b2, 0x3, 0x313eaaca, 0x1, 0x80000000, 0x8372, 0x5, 0x1, 0xc, 0x0, 0x172, 0x6, 0x6, 0x9, 0xa66, 0x81, 0x80000001, 0xb4d, 0xb25, 0xfffffc01, 0x5, 0xfffff800, 0x9, 0x7fffffff, 0x1, 0x7ca, 0x1, 0x5, 0x5, 0xff, 0x9, 0x10000, 0x1ff, 0x8, 0xcae, 0x8, 0x9, 0x9, 0x825, 0x9, 0x4, 0x80000001, 0x4, 0x5, 0x4, 0x89, 0x8, 0xfc400000, 0x9, 0x6, 0x0, 0x4, 0x1, 0x2, 0x4, 0x6, 0x4, 0xff, 0x6b9, 0xcd, 0x3, 0x1000, 0x8, 0x1, 0x20000000, 0x66dd, 0x2, 0x800, 0x3, 0x80000001, 0x6, 0x21e, 0x9, 0x8, 0x8000000, 0xffff0000, 0x3fb5, 0xa, 0x0, 0x0, 0xfffffc01, 0x3, 0xdf98, 0x8, 0x3, 0x5, 0x6168, 0x6, 0xfffffffb, 0xff, 0x100, 0x9, 0xffffffff, 0x5, 0xdece, 0x6371, 0x19, 0x313, 0xa49, 0x0, 0xff, 0x3, 0x2, 0xff, 0x6, 0x6, 0x7, 0x7, 0x23ff68cd, 0x0, 0x8, 0x7, 0xffffffff, 0x7, 0x0, 0x1, 0xe, 0x9, 0x3, 0x9, 0x8000, 0xfffffff7, 0xe, 0x6, 0xb, 0x2, 0x9, 0x5, 0x800, 0xc, 0x0, 0x7, 0x3, 0x6, 0x2ecd, 0x7, 0x0, 0x122b, 0xa7, 0x4, 0x2, 0x7, 0x0, 0x1, 0x3, 0x7, 0xbe1e, 0x3, 0x5, 0x0, 0x6636f5cd, 0x1, 0x81, 0x5, 0x800, 0x5, 0x2, 0x4, 0x7, 0x0, 0xfff, 0x1, 0xb7c5, 0x73662c07, 0x2, 0x80000000, 0x5, 0x1, 0x1, 0x0, 0x97211e9, 0x2, 0x3, 0x5, 0x5, 0x3a, 0x7fffffff, 0x7fff, 0x369, 0x0, 0x7, 0x81, 0x2, 0x89, 0x1, 0xfffffff9, 0x0, 0x7, 0xe77, 0xfffffffe, 0xe2e, 0xe2, 0x200, 0x4, 0x5, 0x3, 0x80, 0xf1eb, 0x6, 0x1, 0xffff8000, 0x6, 0x7, 0x0, 0x3, 0x9, 0x9, 0x5, 0x9, 0x2, 0x5, 0x2, 0x9, 0x1, 0x6, 0x0, 0x80, 0x3, 0x3, 0x40, 0x7, 0x6, 0x2, 0xffff, 0xe, 0xffff, 0x10000, 0x7, 0xfffffffa, 0x0, 0x7fffffff, 0x10, 0xfffffff8, 0x2, 0x3, 0x7bfe, 0x8, 0x0, 0x0, 0x1, 0x2, 0x0, 0x81b, 0x8, 0x5eb, 0x5e, 0x80, 0x7fff, 0x7fffffff, 0x0, 0x1, 0x0, 0xfffff4a3, 0x4, 0x0, 0xd, 0x5, 0x8, 0x9b0a, 0x8, 0xb60, 0x0, 0xffff8000, 0x0, 0x21, 0x7fff, 0x1, 0x6, 0x4, 0xb6c6, 0x88f3, 0xffffffff, 0x81, 0x5, 0x6, 0xd7, 0x1, 0x2, 0x4000000, 0x9, 0x6eb, 0x3800, 0x101, 0x2, 0xac, 0x3, 0x4, 0xd, 0x5, 0xffff, 0x7fff, 0x5, 0xfffffffa, 0x800, 0x7, 0x2, 0xc51, 0x5, 0x6, 0x4, 0xbc0, 0x4, 0x6, 0x5, 0x100, 0x8, 0x0, 0xffff, 0x8, 0x0, 0x7, 0xe, 0x6, 0x1, 0x0, 0x1, 0x4, 0x9, 0x8, 0x1fd0, 0x7fff, 0x1, 0x400, 0x9, 0x0, 0x7fff, 0x5, 0x0, 0x579, 0x6, 0x3, 0x2, 0x7, 0xff, 0xf, 0x7, 0x6, 0x9, 0x5, 0x3, 0xfffffff9, 0x3, 0x4, 0x7f, 0xa56, 0x0, 0x9, 0x80, 0x9, 0x8, 0x3, 0x7, 0x2, 0x7, 0xc58, 0x401, 0xffff, 0xfffffffb, 0x9, 0x1, 0x3, 0x6, 0x7, 0x4, 0x6, 0x101, 0xfffffffb, 0xfffffff8, 0x40, 0x6, 0x8, 0xff, 0x9, 0x9, 0x6a9, 0xfffffff8, 0x2, 0x3, 0x5, 0x7, 0x800, 0x1ff, 0x101, 0x72b, 0xab8, 0x80, 0x1ff, 0x0, 0x3ff, 0x6636755c, 0x6, 0x2, 0x1a4, 0x4, 0x0, 0x4, 0x1, 0xfffeffff, 0x9, 0xb08c, 0x0, 0x6, 0x5, 0x3, 0x7, 0x1ff, 0x4, 0x8, 0x39, 0x2, 0xd65f, 0x3, 0x6, 0x4, 0x2, 0x8, 0xb1, 0x101, 0x5, 0x1, 0x968, 0x0, 0x3, 0x0, 0x1, 0x9, 0x2ae, 0x5f17, 0x5, 0x0, 0x90a, 0x9010, 0x4, 0x2, 0x1, 0x1, 0x9, 0x2d13, 0x8000, 0x0, 0x0, 0x8, 0x6, 0x3, 0x3ff, 0xffffffff, 0x90, 0x9, 0x7fff, 0x607da57e, 0x0, 0x2, 0x2, 0x3, 0xef, 0x6, 0x72, 0x7, 0x48adbd36, 0x7ff, 0x1, 0x5, 0xfffffffd, 0x10, 0x4, 0xd, 0x7, 0x3, 0x1000, 0x80000000, 0xc8184458, 0x2, 0x81, 0xc520, 0x10, 0x0, 0x7, 0x8, 0xfff, 0x5, 0x1, 0xa, 0x40, 0x8, 0x8, 0x0, 0x369, 0x6, 0xf8, 0x0, 0x4, 0x10001, 0x5, 0x1, 0xc, 0x10000, 0x9, 0x40, 0x3ff, 0x7, 0x80, 0x76, 0x5, 0x287, 0xc0000000, 0x7f, 0x6, 0x21, 0xfffffffa, 0x0, 0xc21d, 0x0, 0x1, 0x0, 0x5, 0x8, 0xf17, 0x0, 0x9, 0x0, 0xfffffffc, 0x2, 0x2, 0x6, 0x3, 0xe, 0x3, 0x3, 0x4, 0x1, 0x8, 0x7, 0x5, 0x5, 0xffff, 0x5bed69e8, 0xffff6bc1, 0xe, 0x7, 0x5, 0x3e25, 0x81, 0x11cab3f4, 0x6, 0x6c0b, 0x7076, 0x3, 0x7ff, 0x2, 0x6, 0x99f, 0x6, 0x5, 0xb52f, 0x2, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x4, 0x7fffffff, 0x200, 0x1, 0x11, 0x1, 0x1, 0xdc6, 0x4, 0x7, 0x7]}) listen(r7, 0x61) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002040), r2) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000002200)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000021c0)={&(0x7f0000002080)={0x128, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x24d}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9bf6f6341089b187c8ac71421d05c6b52eaf41b5d7ec764b88d420611bd73cb91a448b08"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "b74ec91f16a80d4be753404b7a2b2e29ea1e7288f99f6b4b09905d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1b29266af427b20d805c442c00a162f1166f419dde82e4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x128}}, 0x40800) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x4) fcntl$addseals(r2, 0x409, 0x9) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) close_range(r2, r6, 0x0) fcntl$getflags(r7, 0x408) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000002240)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002400)={@cgroup=r7, 0x2e, 0x1, 0xa20, &(0x7f0000002300)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002340)=[0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002440)={@fallback=r2, r6, 0x7, 0x4, 0x0, @void, @value=r7, @void, @void, r9}, 0x20) 6.774323115s ago: executing program 1 (id=686): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) munlock(&(0x7f0000721000/0x1000)=nil, 0x1000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) flock(r0, 0x2) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (rerun: 64) flock(r1, 0x2) (async) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) read$FUSE(r2, 0x0, 0x0) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000080)={@void, @val={0x5, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @private=0xa010101, @broadcast}, {{0x0, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000000000000134, 0x20, 0x5, 0x0, 0x8}}}}, 0x32) (async, rerun: 32) r5 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (rerun: 64) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) r7 = getpid() ptrace(0x10, r7) 6.166991853s ago: executing program 1 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a20029bd7000fedbfb252eb1000008000300", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000008000d0001000000"], 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000180000000000000100000e00"}}}]}, 0x48}}, 0x10) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x800, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x402) ioctl$VIDIOC_QUERYSTD(r8, 0x8008563f, &(0x7f0000000400)) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0d, &(0x7f0000000040)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[], 0x26c}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 2.875247538s ago: executing program 0 (id=732): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x552}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000000)=[@enter_looper, @exit_looper, @register_looper, @dead_binder_done, @release], 0x30, 0x0, &(0x7f0000000040)="17717ada20da4974eb21bcc24681779bf1e896ad8878d62914634d75e756456695c58ffc3a9a2f7f2e0b7103234daee3"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) 2.873991458s ago: executing program 3 (id=733): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (rerun: 32) ftruncate(r1, 0x6000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="edd00000", @ANYBLOB="70bcec1d5109c42f24a03ee9cfb91a80970d5e38df999dc9e7b7b7b328fa52fe19e38c4b813e50ce90ed263606f030b7ce740ce7137a655fef3e477508d60773474ec3bb3f396069959152a4ec0ea74c1f4210e521a20f1824b0bff587b4a2c61d700eaa7e6d88ed7f87ede243258556861a06983595b88d8c93c466c4ea66a65bc2b1bc843ee1b8954210cbf42aef96201f74f2ef05c979a07ab5edba07329fc98b79985d79bb7d74e01c46", @ANYBLOB="080029bd8100ffdbdf250700000006000e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x400c040) (rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) (async) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r0, 0x1) (async, rerun: 32) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r2) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) (async) r3 = fsopen(&(0x7f0000000340)='sysfs\x00', 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000000c0)=0x5, 0x4) (async) socket$packet(0x11, 0x3, 0x300) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) (async, rerun: 64) dup(r6) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) (async, rerun: 32) sendto$inet(r1, 0x0, 0x0, 0x10, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async, rerun: 32) sendmmsg$inet(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e1915ca87034640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8a863eae7ac1773e9dd0213bd2742121b65b50995549076c9053cda2e6e3ddbb32ccf7e412a918d9678f0c14dceff81869199bbb78b0924f83081c310971a9f7022b66741f1d374e0288348a3669c277bc4da04fe3b113afe9ca8e5d085795d3b78d4cb78f48d37b113e200bcd56a2f892326882a27f6ecf8a3ab9db8f1d61f4131cbb288ce3e8c8aaefd6265", 0xcc}], 0x1}}], 0x1, 0x0) sendto$inet(r4, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) (async, rerun: 64) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) (rerun: 64) 2.047201396s ago: executing program 3 (id=739): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="04010000100001000000000000000000ffffffff7395c19d3f9200000000000000b617569300af1eed4c2a437f1f220312172c7f00000100"/70, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000002b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400420000000000000014000e00fc00"/188], 0x104}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) ioctl$LOOP_SET_FD(r3, 0x80044df9, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 64) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) (rerun: 64) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0x9}) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async, rerun: 64) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRESOCT=r4], 0x90}}, 0x0) 2.046806797s ago: executing program 0 (id=740): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x89, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000c0007800500150000000000050005000a000000050001000700000005000400000000000900020073797a31000000002173dab073f016d441ce574131ff92dbecd5bd307a816fd34aa68242f95303ddecb1c3349212fc303e83ba0d59dc00f9875c3f39c71a782f5c6772652c680522fd43a3136eda3c14389b9954f9d8e43957c18e8906bb12a162c95170de"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080007003b070000050006"], 0x4c}}, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf17", 0x15}], 0x1}], 0x1, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) socket(0x1a, 0x4, 0x6) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000100000000009500000020000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r10 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000500000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) syz_io_uring_setup(0x481, &(0x7f0000000040)={0x0, 0x6345, 0x8000, 0x0, 0x17f, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100)) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[], 0x50) (async) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000380)=0xf, 0x4) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES8=r9, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r11, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r12}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000e0ffffffffffffff0000000000181200", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r14, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r14, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/243, 0xf3}], 0x1}, 0x7}], 0x1, 0x10120, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r10, 0x50009401, &(0x7f00000009c0)={{r4}, "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"}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1.756974939s ago: executing program 0 (id=741): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)={0x14, 0x3e, 0x321, 0x0, 0x0, {0xa}}, 0x14}}, 0x4004010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000a000000140002"], 0x34}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 1.127290809s ago: executing program 2 (id=746): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000840)="ecbddc31d3ef41325c9be64a508ed4d3efbe27203fcd", 0x16, 0x0, &(0x7f0000000340)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @local}, 0x14) 1.007319995s ago: executing program 2 (id=747): inotify_init1(0x800) 1.007109306s ago: executing program 2 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x2000, 0x0, 0xfffffffffffffffd}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'devices'}, {0x2b, 'cpuset'}, {0x2d, 'cpuset'}, {0x2d, 'io'}, {0x2d, 'pids'}, {0x2b, 'blkio'}, {0x2b, 'memory'}, {0x2d, 'net_prio'}, {0x2d, 'net'}]}, 0x41) 777.082735ms ago: executing program 0 (id=749): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000400)="a98ad06a8aaf", 0x6, 0x4000000, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/116, 0x74}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/213, 0xd5}], 0x34}, 0xfffffffd}], 0x2, 0x40018002, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980903, 0xaa1, @value=0x6}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0xeac82) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x1, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x6, 0xa, 0x2, 0xd, 0x5}}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8080000000000, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 776.086434ms ago: executing program 2 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1715}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x803, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000157000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="650fc7713f6567f3450f0966bad004ec430f9e890500008066baf80cb8f88f7480ef66bafc0cb800000080ef66bad004b03cee3e66410f38174f0a664c0f38f604a8b9800000c00f3235001000000f3090c48179d46f2235004cee9e7958795824020038009fc7442406000000000f011424", 0x72}], 0x1, 0x1f, &(0x7f0000000080)=[@cr4={0x1, 0x6040}, @dstype0={0x6, 0x8}], 0x2) (async) keyctl$reject(0x13, 0x0, 0x0, 0x204, 0x0) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x4) (async, rerun: 64) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f00000000c0)={0x9, 0x6, 0x0, 0x6, 0x19, "f44327189019f4ba9c2d666c378d75463e665e"}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r5, 0x40383d03, &(0x7f0000000280)={{0x4, 0x10001}, {0x4a6, 0xc}, 0x8001, 0x1}) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, 0x0, 0x0, 0x0) (async, rerun: 64) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) (rerun: 64) keyctl$link(0x8, r6, r7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) flistxattr(r8, 0x0, 0x0) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETSNDBUF(r9, 0x400454d4, &(0x7f0000000200)=0x4) 516.524688ms ago: executing program 2 (id=751): mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,mmap,cache=none,cache=loose,posixacl']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xf}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x8070, 0x3, 0x2}, 0x18, 0x2) landlock_restrict_self(r2, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="010001"]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020) 515.673711ms ago: executing program 0 (id=752): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r3) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4881}, 0x40000) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="000000000000000000ff0c000000000000000000ff8ab9b1fb6b81427786f61915f8cd17ec3f2a1b91881dea7db120865fcdc08b8bf7853fd03d52e37f121d9818cd1cf60654516a605a589de0fb07bd57e06362a3d28c7ebd3be87e988c698ea71bad0d786252396e5893d40eadf80e2b74e243631534d60ba029d76a07e6759def3eb41a7d81", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r7, &(0x7f0000000180)="a0cdf50557c1d8c849873dbde0475dde815184707837649d344ba61e85d68e5d438e4b5a22475fafafd5e1806c66c5f554c16232bf1d3cd2f92beb8a024de9c823f47975014acc64d5222ff8b9b71b9677d66bce5992f135bb485146eca2448254785344b5d0e0fbcae1fc5e712b523cff50010789c05f9f237d7f1122655d76c208879ae4b5612ce4a6d288ee91fdc1f70bc942d16a3a9686ef6e6c5da3f8db3fa4000e2a3dabdebf76a91c0ccee92be5ca92c54f625da8631fe84bb836db874a5fb8"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) recvmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) 514.641459ms ago: executing program 0 (id=753): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28240, 0xc) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28240, 0xc) openat(r1, &(0x7f0000000040)='./file1\x00', 0x4541, 0x7) (async) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x4541, 0x7) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0xffffffffffffffff) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r8, &(0x7f0000000180)=""/174, 0xae) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b11ad"], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',posixacl']) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 276.952006ms ago: executing program 1 (id=754): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_rxfh={0x47, 0x8, 0x8, 0x3, 0x1, "c0d8f7", 0x4}}) syz_emit_ethernet(0x96, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000000080)={'system_u:object_r:kvm_device_t:s0', 0x20, 'system_u:object_r:system_map_t:s0', 0x20, 0x8, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x7e) 276.644377ms ago: executing program 3 (id=755): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0001000000000000000000fdff"], 0x1c}}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) 167.032213ms ago: executing program 2 (id=756): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x7, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0xfe, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r6, &(0x7f0000000a80), &(0x7f0000000b40)=""/31}, 0x20) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYRES64], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x401, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x800, 0x22}, 0x18) readlinkat(r8, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/23, 0x17) 166.701263ms ago: executing program 1 (id=757): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001440)={&(0x7f00000014c0)=[{0x9, 0x10, 0x110, &(0x7f0000001900)="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"}, {0x5, 0x0, 0xeb, &(0x7f0000001600)="77ca707ca611ce4c8cc54758b39354f07248a11308b0a32fc1b621cd6a5fe894125d5426d84e9411417e552c2aa4e56d9a84394cb52f295a6f82a4240c46e10042ab6893b76cac29cf12e0416bb77f366e1ede49175ae57611560be8fcec3aceedcb76ad9b9c307a677d670d828cf13525782732de7f1039d185ebe7e374376fe9593560b0f7d96ff2f6806b472eda8dc899bd07bee241214097218be13f03bf2dfd02ad5fc4c2a5e6794a167c86a6200eed370c1c90f31d55f27ca46348885bcc530fdbf2ede07ca50b7be85665818d06f66a4503b9dfcab7b0847f1869cf5f7231ae300ea2633b30f4c9"}, {0x7, 0x1010, 0x40, &(0x7f0000001480)="0156e72606943fbdfe3b16ec80e2f4ad7543329bdd62b5ad7637391dc78029c4c66b90dbbd6e8e8b1f859156a8182e0bc926cd3a448f6292a070d87834868fe1"}], 0x26}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff8, 0x12, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='0', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) (async) syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) (async) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001440)={&(0x7f00000014c0)=[{0x9, 0x10, 0x110, &(0x7f0000001900)="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"}, {0x5, 0x0, 0xeb, &(0x7f0000001600)="77ca707ca611ce4c8cc54758b39354f07248a11308b0a32fc1b621cd6a5fe894125d5426d84e9411417e552c2aa4e56d9a84394cb52f295a6f82a4240c46e10042ab6893b76cac29cf12e0416bb77f366e1ede49175ae57611560be8fcec3aceedcb76ad9b9c307a677d670d828cf13525782732de7f1039d185ebe7e374376fe9593560b0f7d96ff2f6806b472eda8dc899bd07bee241214097218be13f03bf2dfd02ad5fc4c2a5e6794a167c86a6200eed370c1c90f31d55f27ca46348885bcc530fdbf2ede07ca50b7be85665818d06f66a4503b9dfcab7b0847f1869cf5f7231ae300ea2633b30f4c9"}, {0x7, 0x1010, 0x40, &(0x7f0000001480)="0156e72606943fbdfe3b16ec80e2f4ad7543329bdd62b5ad7637391dc78029c4c66b90dbbd6e8e8b1f859156a8182e0bc926cd3a448f6292a070d87834868fe1"}], 0x26}) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff8, 0x12, r0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) (async) socket(0x1d, 0x2, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='0', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) (async) 96.126308ms ago: executing program 3 (id=758): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0x14, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0x1, 0x59c]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') write$tcp_mem(r9, &(0x7f00000010c0)={0x8000000000000000, 0x20, 0x5}, 0x48) r10 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x80800) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) syz_open_dev$video4linux(&(0x7f0000000380), 0xe, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000002060102000000007cd9000001000005e4fff18c7a1c0000c74a5a87837ce2e1ebd621707be438af5cc5144d23fb05e23cfcc924701356b734885f5e9f82fcd7f26c7131badaf4cfdcf1571c983b0867586347fba8f9428f221042a84697ffc212517eb43f3e5f50e3c71bc595383220fe2a4b0711aa692f545b2caf972bc0d5b4db2f4860a185a99cacae2ec04eea"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 205.646µs ago: executing program 3 (id=759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x82) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[], 0x104}}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40043d0d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8002) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xf5}, "49ebd37c81a44366854b26b24be69a6226762c108c563ec5723ed3077acd4a5afface3a14bbb97bbabbb5e970e1664050a8bd0cb92b5265f9f9cf04005dc2d8be1c544a362d1cd3a522488144b72b9766f049fe38013ebad6ba82a2d06aa1ded34444f878586afd5f13d7bc51f0234778a4b27b9bbed422fec83a502427f35e7d895aeee6d5474adf9077fa4e8bd9ad79c4d66006f0d82ab9f0cad6c9f85893839a2127f140642340e01760aa9a318141e59ab6a82ae166e99138a36aa7c3c29f25a1d81c24d7fcd391633773172b6268ad78f5c2b93d6b918005699de443271b39e3f200f35a19779c33e310ef814fcce0a7c078d"}, 0xf9) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x204, 0x10001, 0xffffffffffffffff, 0x8, 0xffffffffffffff80, 0x200, 0x4, 0x2c, 0x7fffffff, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000000)={0x3, 0xfffffff1}) 0s ago: executing program 3 (id=760): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x404a84, 0x0) readahead(r1, 0x46fe, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101282, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4b642, 0x0) fallocate(r3, 0x3, 0x0, 0x100000800000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x800, 0x2) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x1ce) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 4] usb 6-1: SerialNumber: syz [ 83.404127][ T54] usb 6-1: config 0 descriptor?? [ 83.406204][ T7651] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 83.409486][ T54] usb-storage 6-1:0.231: USB Mass Storage device detected [ 83.422939][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 83.572999][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 83.577281][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 83.581900][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.585986][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 83.590894][ T29] usb 7-1: New USB device found, idVendor=0eef, idProduct=72a1, bcdDevice= 0.00 [ 83.594276][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.600012][ T29] usb 7-1: config 0 descriptor?? [ 83.805582][ T6029] usb 6-1: USB disconnect, device number 10 [ 83.805882][ T40] audit: type=1400 audit(1749965616.464:503): avc: denied { connect } for pid=7669 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.815605][ T7670] openvswitch: netlink: Multiple metadata blocks provided [ 83.821352][ T29] usbhid 7-1:0.0: can't add hid device: -71 [ 83.823365][ T29] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 83.828218][ T29] usb 7-1: USB disconnect, device number 6 [ 83.901932][ T7679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7679 comm=syz.1.487 [ 83.907714][ T7679] netlink: 'syz.1.487': attribute type 4 has an invalid length. [ 83.943198][ T40] audit: type=1400 audit(1749965616.604:504): avc: denied { read write } for pid=7681 comm="syz.1.488" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.950484][ T40] audit: type=1400 audit(1749965616.604:505): avc: denied { open } for pid=7681 comm="syz.1.488" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.950608][ T7682] netlink: 'syz.1.488': attribute type 10 has an invalid length. [ 83.952188][ T7683] ip6t_srh: unknown srh invflags 7863 [ 83.963473][ T7682] macvlan0: entered promiscuous mode [ 83.965713][ T7682] macvlan0: entered allmulticast mode [ 83.971065][ T7682] veth1_vlan: entered allmulticast mode [ 83.976547][ T7682] veth1_vlan: left allmulticast mode [ 84.311489][ T40] audit: type=1400 audit(1749965616.964:506): avc: denied { execmem } for pid=7707 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 84.346913][ T7710] gfs2: not a GFS2 filesystem [ 84.349494][ T40] audit: type=1400 audit(1749965617.004:507): avc: denied { connect } for pid=7709 comm="syz.2.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.627647][ T7729] overlayfs: overlapping lowerdir path [ 84.645951][ T7729] lo speed is unknown, defaulting to 1000 [ 84.731485][ T40] audit: type=1400 audit(1749965617.384:508): avc: denied { append } for pid=7739 comm="syz.2.505" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.739895][ T40] audit: type=1400 audit(1749965617.394:509): avc: denied { create } for pid=7737 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.740897][ T7740] loop6: detected capacity change from 0 to 7 [ 84.751677][ T7740] Dev loop6: unable to read RDB block 7 [ 84.753991][ T7740] loop6: unable to read partition table [ 84.755921][ T7740] loop6: partition table beyond EOD, truncated [ 84.758006][ T7740] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 84.773802][ T7740] xt_hashlimit: size too large, truncated to 1048576 [ 84.912967][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 85.084132][ T6028] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 85.233261][ T6028] usb 6-1: device descriptor read/64, error -71 [ 85.266417][ T7765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=7765 comm=syz.0.511 [ 85.270691][ T7765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=7765 comm=syz.0.511 [ 85.492906][ T6028] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 85.558147][ T7778] syzkaller0: entered promiscuous mode [ 85.559971][ T7778] syzkaller0: entered allmulticast mode [ 85.632910][ T6028] usb 6-1: device descriptor read/64, error -71 [ 85.754557][ T6028] usb usb6-port1: attempt power cycle [ 86.094332][ T6028] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 86.113573][ T6028] usb 6-1: device descriptor read/8, error -71 [ 86.372939][ T6028] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 86.393660][ T6028] usb 6-1: device descriptor read/8, error -71 [ 86.417077][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 86.478830][ T7795] tipc: Started in network mode [ 86.480419][ T7795] tipc: Node identity 4, cluster identity 4711 [ 86.483186][ T7795] tipc: Node number set to 4 [ 86.504153][ T6028] usb usb6-port1: unable to enumerate USB device [ 86.570877][ T7808] overlay: filesystem on ./bus not supported as upperdir [ 86.602155][ T7800] block device autoloading is deprecated and will be removed. [ 86.607553][ T7800] syz.2.522: attempt to access beyond end of device [ 86.607553][ T7800] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 86.769566][ T7817] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 86.837492][ T7826] ip6gre1: entered promiscuous mode [ 86.864805][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 86.870351][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.887518][ T7824] sctp: [Deprecated]: syz.2.530 (pid 7824) Use of int in maxseg socket option. [ 86.887518][ T7824] Use struct sctp_assoc_value instead [ 86.957542][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 87.462183][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 87.462199][ T40] audit: type=1400 audit(1749965620.114:528): avc: denied { setopt } for pid=7834 comm="syz.0.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.750125][ T40] audit: type=1400 audit(1749965620.404:529): avc: denied { bind } for pid=7845 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 87.798097][ T5947] Bluetooth: hci3: Malformed Event: 0x2f [ 87.822747][ T7854] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 87.961505][ T40] audit: type=1400 audit(1749965620.614:530): avc: denied { mount } for pid=7868 comm="syz.0.543" name="/" dev="configfs" ino=2139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 87.972567][ T40] audit: type=1400 audit(1749965620.624:531): avc: denied { write } for pid=7868 comm="syz.0.543" name="/" dev="configfs" ino=2139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.024917][ T40] audit: type=1400 audit(1749965620.684:532): avc: denied { write } for pid=7878 comm="syz.3.546" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.087088][ T40] audit: type=1400 audit(1749965620.744:533): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 88.097267][ T7879] IPVS: length: 24 != 12583800 [ 88.141061][ T40] audit: type=1400 audit(1749965620.794:534): avc: denied { create } for pid=7894 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.190035][ T7896] openvswitch: netlink: Message has 8 unknown bytes. [ 88.209181][ T40] audit: type=1400 audit(1749965620.864:535): avc: denied { ioctl } for pid=7894 comm="syz.0.550" path="socket:[22288]" dev="sockfs" ino=22288 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.242073][ T7902] netlink: 'syz.3.551': attribute type 5 has an invalid length. [ 88.246236][ T7902] netlink: 'syz.3.551': attribute type 7 has an invalid length. [ 88.255237][ T7902] : entered promiscuous mode [ 88.317141][ T7904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.550'. [ 88.407897][ T40] audit: type=1400 audit(1749965621.064:536): avc: denied { shutdown } for pid=7911 comm="syz.3.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.014269][ T7926] xt_hashlimit: size too large, truncated to 1048576 [ 89.015547][ T7927] : renamed from bridge_slave_0 (while UP) [ 89.102596][ T7933] program syz.0.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.109914][ T40] audit: type=1400 audit(1749965621.764:537): avc: denied { bind } for pid=7932 comm="syz.0.560" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.200688][ T7950] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 89.337771][ T7962] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 89.340455][ T7962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.345427][ T7962] vhci_hcd vhci_hcd.0: Device attached [ 89.351703][ T7962] netlink: 'syz.1.567': attribute type 23 has an invalid length. [ 89.356537][ T7962] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 89.359009][ T7962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.360396][ T1026] hid-generic 0005:10CF:0009.0003: unknown main item tag 0x0 [ 89.361559][ T7962] vhci_hcd vhci_hcd.0: Device attached [ 89.368617][ T7962] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 89.369042][ T1026] hid-generic 0005:10CF:0009.0003: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 89.370718][ T7962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.378601][ T7962] vhci_hcd vhci_hcd.0: Device attached [ 89.381597][ T7969] vhci_hcd: connection closed [ 89.382683][ T7967] vhci_hcd: connection closed [ 89.382757][ T80] vhci_hcd: stop threads [ 89.383247][ T7963] vhci_hcd: connection closed [ 89.388797][ T80] vhci_hcd: release socket [ 89.391756][ T80] vhci_hcd: disconnect device [ 89.395109][ T80] vhci_hcd: stop threads [ 89.396914][ T80] vhci_hcd: release socket [ 89.398774][ T80] vhci_hcd: disconnect device [ 89.401784][ T80] vhci_hcd: stop threads [ 89.404197][ T80] vhci_hcd: release socket [ 89.406354][ T80] vhci_hcd: disconnect device [ 89.578024][ T7983] vcan0: MTU too low for tipc bearer [ 89.580314][ T7983] tipc: Enabling of bearer rejected, failed to enable media [ 89.776951][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 89.780502][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 89.783815][ T7987] netlink: 'syz.0.571': attribute type 18 has an invalid length. [ 89.878754][ T7995] tipc: Started in network mode [ 89.880435][ T7995] tipc: Node identity ac14140f, cluster identity 4711 [ 89.883919][ T7995] tipc: New replicast peer: 255.255.255.255 [ 89.890517][ T7995] tipc: Enabled bearer , priority 10 [ 90.055500][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 90.162319][ T8014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2172 sclass=netlink_route_socket pid=8014 comm=syz.1.581 [ 90.198187][ T8026] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 90.201160][ T8026] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.204833][ T8026] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 90.340387][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'. [ 90.343473][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'. [ 90.401004][ T8049] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 90.461099][ T8057] vxfs: WRONG superblock magic 00000000 at 1 [ 90.467103][ T8057] vxfs: WRONG superblock magic 00000000 at 8 [ 90.468990][ T8057] vxfs: can't find superblock. [ 90.558431][ T8067] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 90.564297][ T8067] cramfs: wrong magic [ 90.573769][ T8063] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 90.581999][ T8063] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 90.612298][ T8073] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 90.620262][ T8073] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 90.628107][ T8073] overlayfs: conflicting lowerdir path [ 90.682001][ T8080] input: syz0 as /devices/virtual/input/input14 [ 90.753239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.884014][ T5953] tipc: Node number set to 2886997007 [ 90.903705][ T8098] netlink: 56 bytes leftover after parsing attributes in process `syz.1.608'. [ 91.565217][ T8115] cgroup2: Unknown parameter 'euid' [ 91.740236][ T8138] netlink: 72 bytes leftover after parsing attributes in process `syz.1.618'. [ 91.825697][ T8155] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 91.831689][ T8155] virtio-fs: tag not found [ 91.864572][ T8164] 9pnet_rdma: rdma_create_trans (8164): problem binding to privport: 13 [ 91.885462][ T8145] ceph: No mds server is up or the cluster is laggy [ 91.885980][ T8162] trusted_key: encrypted_key: master key parameter 'Ñ [ 95.610259][ T8305] dump_stack_lvl+0x16c/0x1f0 [ 95.610278][ T8305] dump_header+0x101/0x930 [ 95.610295][ T8305] oom_kill_process+0x270/0xa60 [ 95.610313][ T8305] out_of_memory+0x350/0x1700 [ 95.610331][ T8305] ? __pfx_out_of_memory+0x10/0x10 [ 95.610350][ T8305] mem_cgroup_out_of_memory+0x118/0x130 [ 95.610362][ T8305] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 95.610377][ T8305] ? do_raw_spin_unlock+0x172/0x230 [ 95.610392][ T8305] try_charge_memcg+0x72b/0xd50 [ 95.610410][ T8305] ? __pfx_try_charge_memcg+0x10/0x10 [ 95.610426][ T8305] ? find_held_lock+0x1/0x80 [ 95.610440][ T8305] ? rcu_read_unlock+0x17/0x60 [ 95.610460][ T8305] charge_memcg+0x8a/0x230 [ 95.610475][ T8305] __mem_cgroup_charge+0x2b/0x1e0 [ 95.610493][ T8305] shmem_alloc_and_add_folio+0x514/0xc20 [ 95.610510][ T8305] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 95.610525][ T8305] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 95.610542][ T8305] shmem_get_folio_gfp+0x67f/0x1600 [ 95.610559][ T8305] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 95.610573][ T8305] ? __pte_offset_map_lock+0x174/0x310 [ 95.610593][ T8305] shmem_write_begin+0x160/0x300 [ 95.610606][ T8305] ? find_held_lock+0x2b/0x80 [ 95.610619][ T8305] ? __pfx_shmem_write_begin+0x10/0x10 [ 95.610634][ T8305] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 95.610645][ T8305] ? __pfx_timestamp_truncate+0x10/0x10 [ 95.610663][ T8305] generic_perform_write+0x3d0/0x930 [ 95.610682][ T8305] ? __pfx_generic_perform_write+0x10/0x10 [ 95.610696][ T8305] ? inode_needs_update_time.part.0+0x191/0x270 [ 95.610717][ T8305] shmem_file_write_iter+0x10e/0x140 [ 95.610734][ T8305] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 95.610749][ T8305] __kernel_write_iter+0x31a/0xa90 [ 95.610765][ T8305] ? __pfx___kernel_write_iter+0x10/0x10 [ 95.610778][ T8305] ? __up_read+0x1f8/0x750 [ 95.610791][ T8305] ? dump_user_range+0x745/0xb60 [ 95.610804][ T8305] ? dump_user_range+0x1b3/0xb60 [ 95.610819][ T8305] dump_user_range+0x41f/0xb60 [ 95.610835][ T8305] ? __pfx_dump_user_range+0x10/0x10 [ 95.610849][ T8305] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 95.610868][ T8305] ? __pfx_writenote+0x10/0x10 [ 95.610886][ T8305] elf_core_dump+0x288a/0x3a90 [ 95.610908][ T8305] ? __pfx_elf_core_dump+0x10/0x10 [ 95.610922][ T8305] ? kasan_save_stack+0x42/0x60 [ 95.610942][ T8305] ? kasan_save_stack+0x33/0x60 [ 95.610954][ T8305] ? kasan_save_track+0x14/0x30 [ 95.610966][ T8305] ? __kasan_kmalloc+0xaa/0xb0 [ 95.610979][ T8305] ? do_coredump+0x1c9a/0x4f10 [ 95.610990][ T8305] ? get_signal+0x22e3/0x26d0 [ 95.611002][ T8305] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 95.611019][ T8305] ? 0xffffffffff600000 [ 95.611052][ T8305] ? do_coredump+0x399f/0x4f10 [ 95.611064][ T8305] do_coredump+0x399f/0x4f10 [ 95.611082][ T8305] ? __pfx_do_coredump+0x10/0x10 [ 95.611095][ T8305] ? find_held_lock+0x2b/0x80 [ 95.611108][ T8305] ? is_bpf_text_address+0x8a/0x1a0 [ 95.611123][ T8305] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 95.611138][ T8305] ? is_bpf_text_address+0x94/0x1a0 [ 95.611151][ T8305] ? kernel_text_address+0x8d/0x100 [ 95.611162][ T8305] ? __kernel_text_address+0xd/0x40 [ 95.611173][ T8305] ? unwind_get_return_address+0x59/0xa0 [ 95.611200][ T8305] ? stack_depot_save_flags+0x28/0xa40 [ 95.611216][ T8305] ? __lock_acquire+0xb8a/0x1c90 [ 95.611234][ T8305] ? kasan_save_stack+0x42/0x60 [ 95.611246][ T8305] ? kasan_save_stack+0x33/0x60 [ 95.611259][ T8305] ? kasan_save_track+0x14/0x30 [ 95.611271][ T8305] ? kasan_save_free_info+0x3b/0x60 [ 95.611284][ T8305] ? __kasan_slab_free+0x51/0x70 [ 95.611298][ T8305] ? kmem_cache_free+0x2d1/0x4d0 [ 95.611310][ T8305] ? __sigqueue_free+0xba/0x2a0 [ 95.611324][ T8305] ? get_signal+0xcba/0x26d0 [ 95.611336][ T8305] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 95.611368][ T8305] ? proc_coredump_connector+0x2d1/0x4f0 [ 95.611381][ T8305] ? __pfx_proc_coredump_connector+0x10/0x10 [ 95.611396][ T8305] ? rcu_is_watching+0x12/0xc0 [ 95.611412][ T8305] get_signal+0x22e3/0x26d0 [ 95.611430][ T8305] ? __pfx_get_signal+0x10/0x10 [ 95.611444][ T8305] ? force_sig_fault+0xc4/0x100 [ 95.611456][ T8305] ? __pfx_force_sig_fault+0x10/0x10 [ 95.611471][ T8305] arch_do_signal_or_restart+0x8f/0x7d0 [ 95.611482][ T8305] ? find_held_lock+0x2b/0x80 [ 95.611495][ T8305] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 95.611516][ T8305] irqentry_exit_to_user_mode+0x12a/0x270 [ 95.611534][ T8305] asm_exc_page_fault+0x26/0x30 [ 95.611544][ T8305] RIP: 0033:0x7fe058f8e931 [ 95.611553][ T8305] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 95.611564][ T8305] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 95.611573][ T8305] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 95.611579][ T8305] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 95.611586][ T8305] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 95.611592][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.611598][ T8305] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 95.611612][ T8305] [ 95.611617][ T8305] memory: usage 307200kB, limit 307200kB, failcnt 10349 [ 95.626344][ T5953] usb 7-1: device descriptor read/64, error -71 [ 95.629063][ T8305] memory+swap: usage 432136kB, limit 9007199254740988kB, failcnt 0 [ 95.786178][ T8305] kmem: usage 7288kB, limit 9007199254740988kB, failcnt 0 [ 95.788499][ T8305] Memory cgroup stats for /syz1: [ 95.788674][ T8305] cache 306692096 [ 95.791463][ T8305] rss 380928 [ 95.792550][ T8305] rss_huge 0 [ 95.794316][ T8305] shmem 306692096 [ 95.795516][ T8305] mapped_file 0 [ 95.796697][ T8305] dirty 0 [ 95.797690][ T8305] writeback 0 [ 95.798793][ T8305] workingset_refault_anon 20 [ 95.800296][ T8305] workingset_refault_file 102 [ 95.801811][ T8305] swap 127934464 [ 95.803860][ T8305] swapcached 61440 [ 95.805063][ T8305] pgpgin 174925 [ 95.806167][ T8305] pgpgout 99947 [ 95.807302][ T8305] pgfault 56700 [ 95.808424][ T8305] pgmajfault 26 [ 95.809529][ T8305] inactive_anon 129822720 [ 95.810876][ T8305] active_anon 177258496 [ 95.812225][ T8305] inactive_file 0 [ 95.813713][ T8305] active_file 0 [ 95.814836][ T8305] unevictable 0 [ 95.815953][ T8305] hierarchical_memory_limit 314572800 [ 95.817649][ T8305] hierarchical_memsw_limit 9223372036854771712 [ 95.819557][ T8305] total_cache 306692096 [ 95.820869][ T8305] total_rss 380928 [ 95.822058][ T8305] total_rss_huge 0 [ 95.824852][ T8305] total_shmem 306692096 [ 95.826169][ T8305] total_mapped_file 0 [ 95.827434][ T8305] total_dirty 0 [ 95.828791][ T8305] total_writeback 0 [ 95.830039][ T8305] total_workingset_refault_anon 20 [ 95.831668][ T8305] total_workingset_refault_file 102 [ 95.834070][ T8305] total_swap 127934464 [ 95.835362][ T8305] total_swapcached 61440 [ 95.836814][ T8305] total_pgpgin 174925 [ 95.838073][ T8305] total_pgpgout 99947 [ 95.839325][ T8305] total_pgfault 56700 [ 95.840581][ T8305] total_pgmajfault 26 [ 95.841950][ T8305] total_inactive_anon 129822720 [ 95.845464][ T8305] total_active_anon 177258496 [ 95.846961][ T8305] total_inactive_file 0 [ 95.848268][ T8305] total_active_file 0 [ 95.849519][ T8305] total_unevictable 0 [ 95.850768][ T8305] anon_cost 0 [ 95.851835][ T8305] file_cost 0 [ 95.854278][ T8305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8262,uid=0 [ 95.859875][ T8305] Memory cgroup out of memory: Killed process 8262 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 95.862864][ T5953] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 95.897749][ T8305] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.900837][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 95.900854][ T8305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.900861][ T8305] Call Trace: [ 95.900865][ T8305] [ 95.900869][ T8305] dump_stack_lvl+0x16c/0x1f0 [ 95.900890][ T8305] dump_header+0x101/0x930 [ 95.900907][ T8305] oom_kill_process+0x270/0xa60 [ 95.900929][ T8305] out_of_memory+0x350/0x1700 [ 95.900947][ T8305] ? __pfx_out_of_memory+0x10/0x10 [ 95.900966][ T8305] mem_cgroup_out_of_memory+0x118/0x130 [ 95.900979][ T8305] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 95.900994][ T8305] ? do_raw_spin_unlock+0x172/0x230 [ 95.901010][ T8305] try_charge_memcg+0x72b/0xd50 [ 95.901028][ T8305] ? __pfx_try_charge_memcg+0x10/0x10 [ 95.901044][ T8305] ? find_held_lock+0x1/0x80 [ 95.901057][ T8305] ? rcu_read_unlock+0x17/0x60 [ 95.901077][ T8305] charge_memcg+0x8a/0x230 [ 95.901093][ T8305] __mem_cgroup_charge+0x2b/0x1e0 [ 95.901111][ T8305] shmem_alloc_and_add_folio+0x514/0xc20 [ 95.901128][ T8305] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 95.901143][ T8305] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 95.901160][ T8305] shmem_get_folio_gfp+0x67f/0x1600 [ 95.901177][ T8305] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 95.901191][ T8305] ? __pte_offset_map_lock+0x174/0x310 [ 95.901211][ T8305] shmem_write_begin+0x160/0x300 [ 95.901225][ T8305] ? find_held_lock+0x2b/0x80 [ 95.901238][ T8305] ? __pfx_shmem_write_begin+0x10/0x10 [ 95.901252][ T8305] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 95.901263][ T8305] ? __pfx_timestamp_truncate+0x10/0x10 [ 95.901284][ T8305] generic_perform_write+0x3d0/0x930 [ 95.901303][ T8305] ? __pfx_generic_perform_write+0x10/0x10 [ 95.901331][ T8305] ? inode_needs_update_time.part.0+0x191/0x270 [ 95.901352][ T8305] shmem_file_write_iter+0x10e/0x140 [ 95.901369][ T8305] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 95.901384][ T8305] __kernel_write_iter+0x31a/0xa90 [ 95.901400][ T8305] ? __pfx___kernel_write_iter+0x10/0x10 [ 95.901413][ T8305] ? __up_read+0x1f8/0x750 [ 95.901426][ T8305] ? dump_user_range+0x745/0xb60 [ 95.901439][ T8305] ? dump_user_range+0x1b3/0xb60 [ 95.901454][ T8305] dump_user_range+0x41f/0xb60 [ 95.901470][ T8305] ? __pfx_dump_user_range+0x10/0x10 [ 95.901484][ T8305] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 95.901504][ T8305] ? __pfx_writenote+0x10/0x10 [ 95.901522][ T8305] elf_core_dump+0x288a/0x3a90 [ 95.901544][ T8305] ? __pfx_elf_core_dump+0x10/0x10 [ 95.901558][ T8305] ? kasan_save_stack+0x42/0x60 [ 95.901572][ T8305] ? kasan_save_stack+0x33/0x60 [ 95.901584][ T8305] ? kasan_save_track+0x14/0x30 [ 95.901596][ T8305] ? __kasan_kmalloc+0xaa/0xb0 [ 95.901609][ T8305] ? do_coredump+0x1c9a/0x4f10 [ 95.901620][ T8305] ? get_signal+0x22e3/0x26d0 [ 95.901632][ T8305] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 95.901648][ T8305] ? 0xffffffffff600000 [ 95.901682][ T8305] ? do_coredump+0x399f/0x4f10 [ 95.901693][ T8305] do_coredump+0x399f/0x4f10 [ 95.901711][ T8305] ? __pfx_do_coredump+0x10/0x10 [ 95.901725][ T8305] ? find_held_lock+0x2b/0x80 [ 95.901738][ T8305] ? is_bpf_text_address+0x8a/0x1a0 [ 95.901753][ T8305] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 95.901768][ T8305] ? is_bpf_text_address+0x94/0x1a0 [ 95.901781][ T8305] ? kernel_text_address+0x8d/0x100 [ 95.901792][ T8305] ? __kernel_text_address+0xd/0x40 [ 95.901803][ T8305] ? unwind_get_return_address+0x59/0xa0 [ 95.901830][ T8305] ? stack_depot_save_flags+0x28/0xa40 [ 95.901848][ T8305] ? __lock_acquire+0xb8a/0x1c90 [ 95.901866][ T8305] ? kasan_save_stack+0x42/0x60 [ 95.901890][ T8305] ? kasan_save_stack+0x33/0x60 [ 95.901902][ T8305] ? kasan_save_track+0x14/0x30 [ 95.901918][ T8305] ? kasan_save_free_info+0x3b/0x60 [ 95.901929][ T8305] ? __kasan_slab_free+0x51/0x70 [ 95.901942][ T8305] ? kmem_cache_free+0x2d1/0x4d0 [ 95.901955][ T8305] ? __sigqueue_free+0xba/0x2a0 [ 95.901969][ T8305] ? get_signal+0xcba/0x26d0 [ 95.901980][ T8305] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 95.902013][ T8305] ? proc_coredump_connector+0x2d1/0x4f0 [ 95.902026][ T8305] ? __pfx_proc_coredump_connector+0x10/0x10 [ 95.902042][ T8305] ? rcu_is_watching+0x12/0xc0 [ 95.902059][ T8305] get_signal+0x22e3/0x26d0 [ 95.902078][ T8305] ? __pfx_get_signal+0x10/0x10 [ 95.902091][ T8305] ? force_sig_fault+0xc4/0x100 [ 95.902104][ T8305] ? __pfx_force_sig_fault+0x10/0x10 [ 95.902119][ T8305] arch_do_signal_or_restart+0x8f/0x7d0 [ 95.902130][ T8305] ? find_held_lock+0x2b/0x80 [ 95.902142][ T8305] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 95.902164][ T8305] irqentry_exit_to_user_mode+0x12a/0x270 [ 95.902182][ T8305] asm_exc_page_fault+0x26/0x30 [ 95.902193][ T8305] RIP: 0033:0x7fe058f8e931 [ 95.902202][ T8305] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 95.902212][ T8305] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 95.902221][ T8305] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 95.902228][ T8305] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 95.902234][ T8305] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 95.902240][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.902247][ T8305] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 95.902261][ T8305] [ 95.902629][ T8305] memory: usage 307200kB, limit 307200kB, failcnt 10845 [ 96.002946][ T5953] usb 7-1: device descriptor read/64, error -71 [ 96.010108][ T8305] memory+swap: usage 412412kB, limit 9007199254740988kB, failcnt 0 [ 96.078247][ T8305] kmem: usage 7052kB, limit 9007199254740988kB, failcnt 0 [ 96.080548][ T8305] Memory cgroup stats for /syz1: [ 96.080632][ T8305] cache 289783808 [ 96.083523][ T8305] rss 380928 [ 96.084668][ T8305] rss_huge 0 [ 96.085763][ T8305] shmem 289783808 [ 96.087033][ T8305] mapped_file 0 [ 96.088258][ T8305] dirty 0 [ 96.089209][ T8305] writeback 0 [ 96.090329][ T8305] workingset_refault_anon 20 [ 96.091844][ T8305] workingset_refault_file 102 [ 96.093447][ T8305] swap 112373760 [ 96.094650][ T8305] swapcached 65536 [ 96.095913][ T8305] pgpgin 174937 [ 96.097110][ T8305] pgpgout 104055 [ 96.098324][ T8305] pgfault 56701 [ 96.099499][ T8305] pgmajfault 26 [ 96.100685][ T8305] inactive_anon 127819776 [ 96.102106][ T8305] active_anon 162402304 [ 96.103725][ T8305] inactive_file 0 [ 96.104971][ T8305] active_file 0 [ 96.106155][ T8305] unevictable 0 [ 96.108665][ T8305] hierarchical_memory_limit 314572800 [ 96.110523][ T8305] hierarchical_memsw_limit 9223372036854771712 [ 96.112548][ T8305] total_cache 289783808 [ 96.113525][ T5953] usb usb7-port1: attempt power cycle [ 96.115201][ T8305] total_rss 380928 [ 96.116952][ T8305] total_rss_huge 0 [ 96.118245][ T8305] total_shmem 289783808 [ 96.119625][ T8305] total_mapped_file 0 [ 96.121006][ T8305] total_dirty 0 [ 96.122205][ T8305] total_writeback 0 [ 96.124231][ T8305] total_workingset_refault_anon 20 [ 96.125920][ T8305] total_workingset_refault_file 102 [ 96.127651][ T8305] total_swap 112373760 [ 96.129017][ T8305] total_swapcached 65536 [ 96.130475][ T8305] total_pgpgin 174937 [ 96.131845][ T8305] total_pgpgout 104055 [ 96.132463][ T8262] syz.1.653 (8262) used greatest stack depth: 18984 bytes left [ 96.133644][ T8305] total_pgfault 56701 [ 96.137046][ T8305] total_pgmajfault 26 [ 96.138398][ T8305] total_inactive_anon 127819776 [ 96.140048][ T8305] total_active_anon 162402304 [ 96.142149][ T8305] total_inactive_file 0 [ 96.144638][ T8305] total_active_file 0 [ 96.146674][ T8305] total_unevictable 0 [ 96.148066][ T8305] anon_cost 0 [ 96.149194][ T8305] file_cost 0 [ 96.150352][ T8305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8275,uid=0 [ 96.155314][ T8305] Memory cgroup out of memory: Killed process 8275 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53248kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 96.437637][ T8293] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.441041][ T8293] CPU: 2 UID: 0 PID: 8293 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 96.441056][ T8293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.441064][ T8293] Call Trace: [ 96.441068][ T8293] [ 96.441072][ T8293] dump_stack_lvl+0x16c/0x1f0 [ 96.441092][ T8293] dump_header+0x101/0x930 [ 96.441110][ T8293] oom_kill_process+0x270/0xa60 [ 96.441127][ T8293] out_of_memory+0x350/0x1700 [ 96.441155][ T8293] ? __pfx_out_of_memory+0x10/0x10 [ 96.441176][ T8293] mem_cgroup_out_of_memory+0x118/0x130 [ 96.441189][ T8293] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 96.441204][ T8293] ? do_raw_spin_unlock+0x172/0x230 [ 96.441219][ T8293] try_charge_memcg+0x72b/0xd50 [ 96.441238][ T8293] ? __pfx_try_charge_memcg+0x10/0x10 [ 96.441253][ T8293] ? __pfx_find_held_lock+0x10/0x10 [ 96.441267][ T8293] ? rcu_read_unlock+0x17/0x60 [ 96.441291][ T8293] charge_memcg+0x8a/0x230 [ 96.441306][ T8293] __mem_cgroup_charge+0x2b/0x1e0 [ 96.441324][ T8293] shmem_alloc_and_add_folio+0x514/0xc20 [ 96.441342][ T8293] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 96.441357][ T8293] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 96.441373][ T8293] shmem_get_folio_gfp+0x67f/0x1600 [ 96.441390][ T8293] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 96.441405][ T8293] ? __pte_offset_map_lock+0x174/0x310 [ 96.441425][ T8293] shmem_write_begin+0x160/0x300 [ 96.441439][ T8293] ? find_held_lock+0x2b/0x80 [ 96.441451][ T8293] ? __pfx_shmem_write_begin+0x10/0x10 [ 96.441466][ T8293] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 96.441476][ T8293] ? __pfx_timestamp_truncate+0x10/0x10 [ 96.441495][ T8293] generic_perform_write+0x3d0/0x930 [ 96.441514][ T8293] ? __pfx_generic_perform_write+0x10/0x10 [ 96.441528][ T8293] ? inode_needs_update_time.part.0+0x191/0x270 [ 96.441549][ T8293] shmem_file_write_iter+0x10e/0x140 [ 96.441565][ T8293] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 96.441581][ T8293] __kernel_write_iter+0x31a/0xa90 [ 96.441596][ T8293] ? __pfx___kernel_write_iter+0x10/0x10 [ 96.441609][ T8293] ? __up_read+0x1f8/0x750 [ 96.441622][ T8293] ? dump_user_range+0x745/0xb60 [ 96.441639][ T8293] dump_user_range+0x41f/0xb60 [ 96.441655][ T8293] ? __pfx_dump_user_range+0x10/0x10 [ 96.441669][ T8293] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 96.441689][ T8293] ? __pfx_writenote+0x10/0x10 [ 96.441707][ T8293] elf_core_dump+0x288a/0x3a90 [ 96.441729][ T8293] ? __pfx_elf_core_dump+0x10/0x10 [ 96.441742][ T8293] ? kasan_save_stack+0x42/0x60 [ 96.441755][ T8293] ? kasan_save_stack+0x33/0x60 [ 96.441768][ T8293] ? kasan_save_track+0x14/0x30 [ 96.441780][ T8293] ? __kasan_kmalloc+0xaa/0xb0 [ 96.441793][ T8293] ? do_coredump+0x1c9a/0x4f10 [ 96.441804][ T8293] ? get_signal+0x22e3/0x26d0 [ 96.441816][ T8293] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 96.441832][ T8293] ? 0xffffffffff600000 [ 96.441866][ T8293] ? do_coredump+0x399f/0x4f10 [ 96.441877][ T8293] do_coredump+0x399f/0x4f10 [ 96.441899][ T8293] ? __pfx_do_coredump+0x10/0x10 [ 96.441912][ T8293] ? find_held_lock+0x2b/0x80 [ 96.441925][ T8293] ? is_bpf_text_address+0x8a/0x1a0 [ 96.441941][ T8293] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 96.441956][ T8293] ? is_bpf_text_address+0x94/0x1a0 [ 96.441969][ T8293] ? kernel_text_address+0x8d/0x100 [ 96.441981][ T8293] ? __kernel_text_address+0xd/0x40 [ 96.441992][ T8293] ? unwind_get_return_address+0x59/0xa0 [ 96.442018][ T8293] ? stack_depot_save_flags+0x28/0xa40 [ 96.442034][ T8293] ? __lock_acquire+0xb8a/0x1c90 [ 96.442052][ T8293] ? kasan_save_stack+0x42/0x60 [ 96.442065][ T8293] ? kasan_save_stack+0x33/0x60 [ 96.442077][ T8293] ? kasan_save_track+0x14/0x30 [ 96.442089][ T8293] ? kasan_save_free_info+0x3b/0x60 [ 96.442100][ T8293] ? __kasan_slab_free+0x51/0x70 [ 96.442113][ T8293] ? kmem_cache_free+0x2d1/0x4d0 [ 96.442126][ T8293] ? __sigqueue_free+0xba/0x2a0 [ 96.442140][ T8293] ? get_signal+0xcba/0x26d0 [ 96.442151][ T8293] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 96.442183][ T8293] ? proc_coredump_connector+0x2d1/0x4f0 [ 96.442196][ T8293] ? __pfx_proc_coredump_connector+0x10/0x10 [ 96.442212][ T8293] ? rcu_is_watching+0x12/0xc0 [ 96.442227][ T8293] get_signal+0x22e3/0x26d0 [ 96.442246][ T8293] ? __pfx_get_signal+0x10/0x10 [ 96.442259][ T8293] ? force_sig_fault+0xc4/0x100 [ 96.442272][ T8293] ? __pfx_force_sig_fault+0x10/0x10 [ 96.442287][ T8293] arch_do_signal_or_restart+0x8f/0x7d0 [ 96.442298][ T8293] ? find_held_lock+0x2b/0x80 [ 96.442311][ T8293] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.442332][ T8293] irqentry_exit_to_user_mode+0x12a/0x270 [ 96.442349][ T8293] asm_exc_page_fault+0x26/0x30 [ 96.442360][ T8293] RIP: 0033:0x7fe058f8e931 [ 96.442369][ T8293] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 96.442379][ T8293] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 96.442388][ T8293] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 96.442395][ T8293] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 96.442401][ T8293] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 96.442407][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.442413][ T8293] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 96.442428][ T8293] [ 96.442465][ T8293] memory: usage 306952kB, limit 307200kB, failcnt 10909 [ 96.566296][ T8400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8400 comm=syz.3.687 [ 96.567468][ T5953] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 96.603498][ T8293] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 96.623450][ T5953] usb 7-1: device descriptor read/8, error -71 [ 96.634035][ T8293] kmem: usage 6912kB, limit 9007199254740988kB, failcnt 0 [ 96.636301][ T8293] Memory cgroup stats for /syz1: [ 96.636448][ T8293] cache 307081216 [ 96.639241][ T8293] rss 274432 [ 96.640327][ T8293] rss_huge 0 [ 96.641402][ T8293] shmem 307081216 [ 96.642603][ T8293] mapped_file 0 [ 96.643855][ T8293] dirty 0 [ 96.644838][ T8293] writeback 0 [ 96.645936][ T8293] workingset_refault_anon 20 [ 96.647443][ T8293] workingset_refault_file 183 [ 96.648970][ T8293] swap 127954944 [ 96.650145][ T8293] swapcached 40960 [ 96.651368][ T8293] pgpgin 185803 [ 96.652521][ T8293] pgpgout 110731 [ 96.653776][ T8293] pgfault 57432 [ 96.654975][ T8293] pgmajfault 28 [ 96.656134][ T8293] inactive_anon 133955584 [ 96.657536][ T8293] active_anon 173522944 [ 96.658877][ T8293] inactive_file 0 [ 96.660117][ T8293] active_file 0 [ 96.661320][ T8293] unevictable 0 [ 96.662498][ T8293] hierarchical_memory_limit 314572800 [ 96.665063][ T8293] hierarchical_memsw_limit 9223372036854771712 [ 96.667050][ T8293] total_cache 307081216 [ 96.668400][ T8293] total_rss 274432 [ 96.669539][ T8293] total_rss_huge 0 [ 96.670853][ T8293] total_shmem 307081216 [ 96.672024][ T40] audit: type=1400 audit(1749965630.324:564): avc: denied { write } for pid=8406 comm="syz.3.688" name="file0" dev="9p" ino=37486683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.676326][ T8293] total_mapped_file 0 [ 96.680369][ T8293] total_dirty 0 [ 96.681522][ T8293] total_writeback 0 [ 96.682766][ T8293] total_workingset_refault_anon 20 [ 96.684775][ T8293] total_workingset_refault_file 183 [ 96.686484][ T8293] total_swap 127954944 [ 96.687819][ T8293] total_swapcached 40960 [ 96.689187][ T8293] total_pgpgin 185803 [ 96.690485][ T8293] total_pgpgout 110731 [ 96.691823][ T8293] total_pgfault 57432 [ 96.692891][ T40] audit: type=1400 audit(1749965630.324:565): avc: denied { open } for pid=8406 comm="syz.3.688" name="file0" dev="9p" ino=37486683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.694976][ T8293] total_pgmajfault 28 [ 96.701186][ T8293] total_inactive_anon 133955584 [ 96.702732][ T8293] total_active_anon 173522944 [ 96.705067][ T8293] total_inactive_file 0 [ 96.706407][ T8293] total_active_file 0 [ 96.707718][ T8293] total_unevictable 0 [ 96.709018][ T8293] anon_cost 0 [ 96.710110][ T8293] file_cost 0 [ 96.711192][ T8293] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8272,uid=0 [ 96.864009][ T5953] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 96.885272][ T5953] usb 7-1: device descriptor read/8, error -71 [ 96.904777][ T8293] Memory cgroup out of memory: Killed process 8272 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53248kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 96.992990][ T5953] usb usb7-port1: unable to enumerate USB device [ 97.117596][ T8253] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 97.120641][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 97.120656][ T8253] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.120663][ T8253] Call Trace: [ 97.120668][ T8253] [ 97.120672][ T8253] dump_stack_lvl+0x16c/0x1f0 [ 97.120692][ T8253] dump_header+0x101/0x930 [ 97.120710][ T8253] oom_kill_process+0x270/0xa60 [ 97.120727][ T8253] out_of_memory+0x350/0x1700 [ 97.120746][ T8253] ? __pfx_out_of_memory+0x10/0x10 [ 97.120765][ T8253] mem_cgroup_out_of_memory+0x118/0x130 [ 97.120778][ T8253] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 97.120793][ T8253] ? do_raw_spin_unlock+0x172/0x230 [ 97.120808][ T8253] try_charge_memcg+0x72b/0xd50 [ 97.120827][ T8253] ? __pfx_try_charge_memcg+0x10/0x10 [ 97.120843][ T8253] ? find_held_lock+0x1/0x80 [ 97.120856][ T8253] ? rcu_read_unlock+0x17/0x60 [ 97.120877][ T8253] charge_memcg+0x8a/0x230 [ 97.120893][ T8253] __mem_cgroup_charge+0x2b/0x1e0 [ 97.120911][ T8253] shmem_alloc_and_add_folio+0x514/0xc20 [ 97.120928][ T8253] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 97.120943][ T8253] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 97.120960][ T8253] shmem_get_folio_gfp+0x67f/0x1600 [ 97.120977][ T8253] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 97.120991][ T8253] ? __pte_offset_map_lock+0x174/0x310 [ 97.121010][ T8253] shmem_write_begin+0x160/0x300 [ 97.121024][ T8253] ? find_held_lock+0x2b/0x80 [ 97.121037][ T8253] ? __pfx_shmem_write_begin+0x10/0x10 [ 97.121051][ T8253] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 97.121062][ T8253] ? __pfx_timestamp_truncate+0x10/0x10 [ 97.121081][ T8253] generic_perform_write+0x3d0/0x930 [ 97.121099][ T8253] ? __pfx_generic_perform_write+0x10/0x10 [ 97.121113][ T8253] ? inode_needs_update_time.part.0+0x191/0x270 [ 97.121138][ T8253] shmem_file_write_iter+0x10e/0x140 [ 97.121155][ T8253] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 97.121170][ T8253] __kernel_write_iter+0x31a/0xa90 [ 97.121186][ T8253] ? __pfx___kernel_write_iter+0x10/0x10 [ 97.121199][ T8253] ? __up_read+0x1f8/0x750 [ 97.121212][ T8253] ? dump_user_range+0x745/0xb60 [ 97.121229][ T8253] dump_user_range+0x41f/0xb60 [ 97.121245][ T8253] ? __pfx_dump_user_range+0x10/0x10 [ 97.121259][ T8253] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 97.121281][ T8253] ? __pfx_writenote+0x10/0x10 [ 97.121298][ T8253] elf_core_dump+0x288a/0x3a90 [ 97.121320][ T8253] ? __pfx_elf_core_dump+0x10/0x10 [ 97.121334][ T8253] ? kasan_save_stack+0x42/0x60 [ 97.121347][ T8253] ? kasan_save_stack+0x33/0x60 [ 97.121359][ T8253] ? kasan_save_track+0x14/0x30 [ 97.121372][ T8253] ? __kasan_kmalloc+0xaa/0xb0 [ 97.121384][ T8253] ? do_coredump+0x1c9a/0x4f10 [ 97.121396][ T8253] ? get_signal+0x22e3/0x26d0 [ 97.121408][ T8253] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 97.121424][ T8253] ? 0xffffffffff600000 [ 97.121458][ T8253] ? do_coredump+0x399f/0x4f10 [ 97.121469][ T8253] do_coredump+0x399f/0x4f10 [ 97.121487][ T8253] ? __pfx_do_coredump+0x10/0x10 [ 97.121500][ T8253] ? find_held_lock+0x2b/0x80 [ 97.121514][ T8253] ? is_bpf_text_address+0x8a/0x1a0 [ 97.121528][ T8253] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 97.121544][ T8253] ? is_bpf_text_address+0x94/0x1a0 [ 97.121557][ T8253] ? kernel_text_address+0x8d/0x100 [ 97.121569][ T8253] ? __kernel_text_address+0xd/0x40 [ 97.121580][ T8253] ? unwind_get_return_address+0x59/0xa0 [ 97.121606][ T8253] ? stack_depot_save_flags+0x28/0xa40 [ 97.121622][ T8253] ? __lock_acquire+0xb8a/0x1c90 [ 97.121640][ T8253] ? kasan_save_stack+0x42/0x60 [ 97.121653][ T8253] ? kasan_save_stack+0x33/0x60 [ 97.121666][ T8253] ? kasan_save_track+0x14/0x30 [ 97.121678][ T8253] ? kasan_save_free_info+0x3b/0x60 [ 97.121688][ T8253] ? __kasan_slab_free+0x51/0x70 [ 97.121701][ T8253] ? kmem_cache_free+0x2d1/0x4d0 [ 97.121713][ T8253] ? __sigqueue_free+0xba/0x2a0 [ 97.121727][ T8253] ? get_signal+0xcba/0x26d0 [ 97.121739][ T8253] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 97.121770][ T8253] ? proc_coredump_connector+0x2d1/0x4f0 [ 97.121783][ T8253] ? __pfx_proc_coredump_connector+0x10/0x10 [ 97.121799][ T8253] ? rcu_is_watching+0x12/0xc0 [ 97.121814][ T8253] get_signal+0x22e3/0x26d0 [ 97.121833][ T8253] ? __pfx_get_signal+0x10/0x10 [ 97.121846][ T8253] ? force_sig_fault+0xc4/0x100 [ 97.121858][ T8253] ? __pfx_force_sig_fault+0x10/0x10 [ 97.121873][ T8253] arch_do_signal_or_restart+0x8f/0x7d0 [ 97.121884][ T8253] ? find_held_lock+0x2b/0x80 [ 97.121897][ T8253] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.121918][ T8253] irqentry_exit_to_user_mode+0x12a/0x270 [ 97.121936][ T8253] asm_exc_page_fault+0x26/0x30 [ 97.121946][ T8253] RIP: 0033:0x7fe058f8e931 [ 97.121956][ T8253] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 97.121967][ T8253] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 97.121977][ T8253] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 97.121983][ T8253] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 97.121990][ T8253] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 97.121996][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.122002][ T8253] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 97.122016][ T8253] [ 97.122021][ T8253] memory: usage 307200kB, limit 307200kB, failcnt 12556 [ 97.290007][ T8253] memory+swap: usage 406436kB, limit 9007199254740988kB, failcnt 0 [ 97.292492][ T8253] kmem: usage 6672kB, limit 9007199254740988kB, failcnt 0 [ 97.294815][ T8253] Memory cgroup stats for /syz1: [ 97.294901][ T8253] cache 289419264 [ 97.297752][ T8253] rss 221184 [ 97.298789][ T8253] rss_huge 0 [ 97.299833][ T8253] shmem 289419264 [ 97.300991][ T8253] mapped_file 0 [ 97.302168][ T8253] dirty 0 [ 97.304324][ T8253] writeback 0 [ 97.305387][ T8253] workingset_refault_anon 20 [ 97.306835][ T8253] workingset_refault_file 282 [ 97.308291][ T8253] swap 119615488 [ 97.309436][ T8253] swapcached 57344 [ 97.310640][ T8253] pgpgin 194298 [ 97.311763][ T8253] pgpgout 123567 [ 97.312952][ T8253] pgfault 57954 [ 97.314069][ T8253] pgmajfault 36 [ 97.315186][ T8253] inactive_anon 119750656 [ 97.316567][ T8253] active_anon 169480192 [ 97.317898][ T8253] inactive_file 0 [ 97.319114][ T8253] active_file 0 [ 97.320244][ T8253] unevictable 0 [ 97.321429][ T8253] hierarchical_memory_limit 314572800 [ 97.323157][ T8253] hierarchical_memsw_limit 9223372036854771712 [ 97.325093][ T8253] total_cache 289419264 [ 97.326412][ T8253] total_rss 221184 [ 97.327609][ T8253] total_rss_huge 0 [ 97.328821][ T8253] total_shmem 289419264 [ 97.330148][ T8253] total_mapped_file 0 [ 97.331418][ T8253] total_dirty 0 [ 97.332557][ T8253] total_writeback 0 [ 97.334368][ T8253] total_workingset_refault_anon 20 [ 97.336068][ T8253] total_workingset_refault_file 282 [ 97.337740][ T8253] total_swap 119615488 [ 97.339223][ T8253] total_swapcached 57344 [ 97.340670][ T8253] total_pgpgin 194298 [ 97.341983][ T8253] total_pgpgout 123567 [ 97.343803][ T8253] total_pgfault 57954 [ 97.345080][ T8253] total_pgmajfault 36 [ 97.346349][ T8253] total_inactive_anon 119750656 [ 97.347923][ T8253] total_active_anon 169480192 [ 97.349428][ T8253] total_inactive_file 0 [ 97.350744][ T8253] total_active_file 0 [ 97.352017][ T8253] total_unevictable 0 [ 97.362870][ T8253] anon_cost 0 [ 97.363998][ T8253] file_cost 0 [ 97.365070][ T8253] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8258,uid=0 [ 97.369592][ T8253] Memory cgroup out of memory: Killed process 8258 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 98.287921][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 98.291966][ T40] audit: type=1326 audit(1749965631.944:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.310628][ T40] audit: type=1326 audit(1749965631.954:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.322854][ T40] audit: type=1400 audit(1749965631.954:568): avc: denied { write } for pid=8453 comm="syz.2.703" path="socket:[26148]" dev="sockfs" ino=26148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 98.330249][ T40] audit: type=1326 audit(1749965631.964:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.352037][ T40] audit: type=1326 audit(1749965631.964:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.368011][ T40] audit: type=1326 audit(1749965631.964:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.371043][ T8456] usb 1-1: USB disconnect, device number 2 [ 98.383023][ T40] audit: type=1326 audit(1749965632.024:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.392972][ T40] audit: type=1326 audit(1749965632.024:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.399876][ T40] audit: type=1326 audit(1749965632.024:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.406687][ T8306] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 98.407933][ T40] audit: type=1326 audit(1749965632.024:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8455 comm="syz.3.702" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a3118e929 code=0x7ffc0000 [ 98.448269][ T8306] CPU: 0 UID: 0 PID: 8306 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 98.448289][ T8306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.448296][ T8306] Call Trace: [ 98.448304][ T8306] [ 98.448308][ T8306] dump_stack_lvl+0x16c/0x1f0 [ 98.448337][ T8306] dump_header+0x101/0x930 [ 98.448355][ T8306] oom_kill_process+0x270/0xa60 [ 98.448372][ T8306] out_of_memory+0x350/0x1700 [ 98.448390][ T8306] ? __pfx_out_of_memory+0x10/0x10 [ 98.448409][ T8306] mem_cgroup_out_of_memory+0x118/0x130 [ 98.448422][ T8306] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 98.448437][ T8306] ? do_raw_spin_unlock+0x172/0x230 [ 98.448452][ T8306] try_charge_memcg+0x72b/0xd50 [ 98.448470][ T8306] ? __pfx_try_charge_memcg+0x10/0x10 [ 98.448486][ T8306] ? find_held_lock+0x1/0x80 [ 98.448499][ T8306] ? rcu_read_unlock+0x17/0x60 [ 98.448519][ T8306] charge_memcg+0x8a/0x230 [ 98.448535][ T8306] __mem_cgroup_charge+0x2b/0x1e0 [ 98.448553][ T8306] shmem_alloc_and_add_folio+0x514/0xc20 [ 98.448570][ T8306] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 98.448585][ T8306] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 98.448601][ T8306] shmem_get_folio_gfp+0x67f/0x1600 [ 98.448618][ T8306] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 98.448632][ T8306] ? timestamp_truncate+0x21e/0x2d0 [ 98.448651][ T8306] shmem_write_begin+0x160/0x300 [ 98.448666][ T8306] ? __pfx_shmem_write_begin+0x10/0x10 [ 98.448680][ T8306] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 98.448695][ T8306] generic_perform_write+0x3d0/0x930 [ 98.448724][ T8306] ? __pfx_generic_perform_write+0x10/0x10 [ 98.448741][ T8306] ? generic_update_time+0xcf/0xf0 [ 98.448758][ T8306] ? mnt_put_write_access_file+0x45/0xf0 [ 98.448774][ T8306] shmem_file_write_iter+0x10e/0x140 [ 98.448791][ T8306] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 98.448806][ T8306] __kernel_write_iter+0x31a/0xa90 [ 98.448823][ T8306] ? __pfx___kernel_write_iter+0x10/0x10 [ 98.448836][ T8306] ? __up_read+0x1f8/0x750 [ 98.448849][ T8306] ? dump_user_range+0x745/0xb60 [ 98.448870][ T8306] dump_user_range+0x41f/0xb60 [ 98.448886][ T8306] ? __pfx_dump_user_range+0x10/0x10 [ 98.448900][ T8306] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 98.448920][ T8306] ? __pfx_writenote+0x10/0x10 [ 98.448943][ T8306] elf_core_dump+0x288a/0x3a90 [ 98.448965][ T8306] ? __pfx_elf_core_dump+0x10/0x10 [ 98.448978][ T8306] ? kasan_save_stack+0x42/0x60 [ 98.448992][ T8306] ? kasan_save_stack+0x33/0x60 [ 98.449004][ T8306] ? kasan_save_track+0x14/0x30 [ 98.449017][ T8306] ? __kasan_kmalloc+0xaa/0xb0 [ 98.449029][ T8306] ? do_coredump+0x1c9a/0x4f10 [ 98.449040][ T8306] ? get_signal+0x22e3/0x26d0 [ 98.449053][ T8306] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 98.449068][ T8306] ? 0xffffffffff600000 [ 98.449101][ T8306] ? do_coredump+0x399f/0x4f10 [ 98.449113][ T8306] do_coredump+0x399f/0x4f10 [ 98.449131][ T8306] ? __pfx_do_coredump+0x10/0x10 [ 98.449144][ T8306] ? find_held_lock+0x2b/0x80 [ 98.449157][ T8306] ? is_bpf_text_address+0x8a/0x1a0 [ 98.449173][ T8306] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 98.449188][ T8306] ? is_bpf_text_address+0x94/0x1a0 [ 98.449201][ T8306] ? kernel_text_address+0x8d/0x100 [ 98.449213][ T8306] ? __kernel_text_address+0xd/0x40 [ 98.449224][ T8306] ? unwind_get_return_address+0x59/0xa0 [ 98.449250][ T8306] ? stack_depot_save_flags+0x28/0xa40 [ 98.449267][ T8306] ? __lock_acquire+0xb8a/0x1c90 [ 98.449285][ T8306] ? kasan_save_stack+0x42/0x60 [ 98.449297][ T8306] ? kasan_save_stack+0x33/0x60 [ 98.449309][ T8306] ? kasan_save_track+0x14/0x30 [ 98.449322][ T8306] ? kasan_save_free_info+0x3b/0x60 [ 98.449332][ T8306] ? __kasan_slab_free+0x51/0x70 [ 98.449345][ T8306] ? kmem_cache_free+0x2d1/0x4d0 [ 98.449358][ T8306] ? __sigqueue_free+0xba/0x2a0 [ 98.449372][ T8306] ? get_signal+0xcba/0x26d0 [ 98.449383][ T8306] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 98.449415][ T8306] ? proc_coredump_connector+0x2d1/0x4f0 [ 98.449427][ T8306] ? __pfx_proc_coredump_connector+0x10/0x10 [ 98.449443][ T8306] ? rcu_is_watching+0x12/0xc0 [ 98.449458][ T8306] get_signal+0x22e3/0x26d0 [ 98.449476][ T8306] ? __pfx_get_signal+0x10/0x10 [ 98.449489][ T8306] ? force_sig_fault+0xc4/0x100 [ 98.449502][ T8306] ? __pfx_force_sig_fault+0x10/0x10 [ 98.449517][ T8306] arch_do_signal_or_restart+0x8f/0x7d0 [ 98.449528][ T8306] ? find_held_lock+0x2b/0x80 [ 98.449541][ T8306] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 98.449562][ T8306] irqentry_exit_to_user_mode+0x12a/0x270 [ 98.449580][ T8306] asm_exc_page_fault+0x26/0x30 [ 98.449590][ T8306] RIP: 0033:0x7fe058f8e931 [ 98.449599][ T8306] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 98.449609][ T8306] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 98.449618][ T8306] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 98.449625][ T8306] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 98.449631][ T8306] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 98.449638][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.449644][ T8306] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 98.449658][ T8306] [ 98.451472][ T8306] memory: usage 305700kB, limit 307200kB, failcnt 16606 [ 98.635367][ T8306] memory+swap: usage 404728kB, limit 9007199254740988kB, failcnt 0 [ 98.638428][ T8306] kmem: usage 6276kB, limit 9007199254740988kB, failcnt 0 [ 98.641274][ T8306] Memory cgroup stats for /syz1: [ 98.641360][ T8306] cache 279445504 [ 98.644831][ T8306] rss 229376 [ 98.646135][ T8306] rss_huge 0 [ 98.647464][ T8306] shmem 279445504 [ 98.648843][ T8306] mapped_file 0 [ 98.650194][ T8306] dirty 0 [ 98.651379][ T8306] writeback 0 [ 98.652721][ T8306] workingset_refault_anon 23 [ 98.655741][ T8306] workingset_refault_file 345 [ 98.657615][ T8306] swap 127946752 [ 98.659050][ T8306] swapcached 49152 [ 98.660534][ T8306] pgpgin 202900 [ 98.661927][ T8306] pgpgout 134614 [ 98.663419][ T8306] pgfault 58364 [ 98.666067][ T8306] pgmajfault 41 [ 98.668617][ T8306] inactive_anon 123699200 [ 98.670437][ T8306] active_anon 153178112 [ 98.672152][ T8306] inactive_file 0 [ 98.673780][ T8306] active_file 0 [ 98.675147][ T8306] unevictable 0 [ 98.677857][ T8306] hierarchical_memory_limit 314572800 [ 98.680026][ T8306] hierarchical_memsw_limit 9223372036854771712 [ 98.683487][ T8306] total_cache 279445504 [ 98.685167][ T8306] total_rss 229376 [ 98.686866][ T8306] total_rss_huge 0 [ 98.688335][ T8306] total_shmem 279445504 [ 98.689965][ T8306] total_mapped_file 0 [ 98.691531][ T8306] total_dirty 0 [ 98.693336][ T8306] total_writeback 0 [ 98.694826][ T8306] total_workingset_refault_anon 23 [ 98.696849][ T8306] total_workingset_refault_file 345 [ 98.698892][ T8306] total_swap 127946752 [ 98.700500][ T8306] total_swapcached 49152 [ 98.702169][ T8306] total_pgpgin 202900 [ 98.704181][ T8306] total_pgpgout 134614 [ 98.705778][ T8306] total_pgfault 58364 [ 98.707380][ T8306] total_pgmajfault 41 [ 98.708964][ T8306] total_inactive_anon 123699200 [ 98.710879][ T8306] total_active_anon 153178112 [ 98.712740][ T8306] total_inactive_file 0 [ 98.721252][ T8306] total_active_file 0 [ 98.724154][ T8306] total_unevictable 0 [ 98.728049][ T8306] anon_cost 0 [ 98.730565][ T8306] file_cost 0 [ 98.733289][ T8306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8290,uid=0 [ 98.745682][ T8306] Memory cgroup out of memory: Killed process 8290 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 98.778475][ T6032] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -32 [ 98.905047][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.948969][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'. [ 98.980393][ T8490] tipc: Trying to set illegal importance in message [ 99.144795][ T8305] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.147858][ T8305] CPU: 2 UID: 0 PID: 8305 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 99.147873][ T8305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.147881][ T8305] Call Trace: [ 99.147885][ T8305] [ 99.147889][ T8305] dump_stack_lvl+0x16c/0x1f0 [ 99.147910][ T8305] dump_header+0x101/0x930 [ 99.147927][ T8305] oom_kill_process+0x270/0xa60 [ 99.147944][ T8305] out_of_memory+0x350/0x1700 [ 99.147962][ T8305] ? __pfx_out_of_memory+0x10/0x10 [ 99.147981][ T8305] mem_cgroup_out_of_memory+0x118/0x130 [ 99.147994][ T8305] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 99.148009][ T8305] ? do_raw_spin_unlock+0x172/0x230 [ 99.148024][ T8305] try_charge_memcg+0x72b/0xd50 [ 99.148042][ T8305] ? __pfx_try_charge_memcg+0x10/0x10 [ 99.148058][ T8305] ? find_held_lock+0x1/0x80 [ 99.148071][ T8305] ? rcu_read_unlock+0x17/0x60 [ 99.148092][ T8305] charge_memcg+0x8a/0x230 [ 99.148107][ T8305] __mem_cgroup_charge+0x2b/0x1e0 [ 99.148125][ T8305] shmem_alloc_and_add_folio+0x514/0xc20 [ 99.148143][ T8305] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 99.148158][ T8305] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 99.148175][ T8305] shmem_get_folio_gfp+0x67f/0x1600 [ 99.148191][ T8305] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 99.148205][ T8305] ? timestamp_truncate+0x21e/0x2d0 [ 99.148224][ T8305] shmem_write_begin+0x160/0x300 [ 99.148239][ T8305] ? __pfx_shmem_write_begin+0x10/0x10 [ 99.148254][ T8305] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 99.148268][ T8305] generic_perform_write+0x3d0/0x930 [ 99.148286][ T8305] ? __pfx_generic_perform_write+0x10/0x10 [ 99.148301][ T8305] ? generic_update_time+0xcf/0xf0 [ 99.148318][ T8305] ? mnt_put_write_access_file+0x45/0xf0 [ 99.148334][ T8305] shmem_file_write_iter+0x10e/0x140 [ 99.148351][ T8305] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 99.148366][ T8305] __kernel_write_iter+0x31a/0xa90 [ 99.148381][ T8305] ? __pfx___kernel_write_iter+0x10/0x10 [ 99.148395][ T8305] ? __up_read+0x1f8/0x750 [ 99.148408][ T8305] ? dump_user_range+0x745/0xb60 [ 99.148424][ T8305] dump_user_range+0x41f/0xb60 [ 99.148441][ T8305] ? __pfx_dump_user_range+0x10/0x10 [ 99.148454][ T8305] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 99.148474][ T8305] ? __pfx_writenote+0x10/0x10 [ 99.148492][ T8305] elf_core_dump+0x288a/0x3a90 [ 99.148514][ T8305] ? __pfx_elf_core_dump+0x10/0x10 [ 99.148528][ T8305] ? kasan_save_stack+0x42/0x60 [ 99.148540][ T8305] ? kasan_save_stack+0x33/0x60 [ 99.148553][ T8305] ? kasan_save_track+0x14/0x30 [ 99.148565][ T8305] ? __kasan_kmalloc+0xaa/0xb0 [ 99.148578][ T8305] ? do_coredump+0x1c9a/0x4f10 [ 99.148589][ T8305] ? get_signal+0x22e3/0x26d0 [ 99.148601][ T8305] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 99.148616][ T8305] ? 0xffffffffff600000 [ 99.148650][ T8305] ? do_coredump+0x399f/0x4f10 [ 99.148661][ T8305] do_coredump+0x399f/0x4f10 [ 99.148679][ T8305] ? __pfx_do_coredump+0x10/0x10 [ 99.148692][ T8305] ? find_held_lock+0x2b/0x80 [ 99.148705][ T8305] ? is_bpf_text_address+0x8a/0x1a0 [ 99.148720][ T8305] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.148735][ T8305] ? is_bpf_text_address+0x94/0x1a0 [ 99.148747][ T8305] ? kernel_text_address+0x8d/0x100 [ 99.148759][ T8305] ? __kernel_text_address+0xd/0x40 [ 99.148770][ T8305] ? unwind_get_return_address+0x59/0xa0 [ 99.148796][ T8305] ? stack_depot_save_flags+0x28/0xa40 [ 99.148813][ T8305] ? __lock_acquire+0xb8a/0x1c90 [ 99.148831][ T8305] ? kasan_save_stack+0x42/0x60 [ 99.148843][ T8305] ? kasan_save_stack+0x33/0x60 [ 99.148859][ T8305] ? kasan_save_track+0x14/0x30 [ 99.148871][ T8305] ? kasan_save_free_info+0x3b/0x60 [ 99.148881][ T8305] ? __kasan_slab_free+0x51/0x70 [ 99.148895][ T8305] ? kmem_cache_free+0x2d1/0x4d0 [ 99.148907][ T8305] ? __sigqueue_free+0xba/0x2a0 [ 99.148921][ T8305] ? get_signal+0xcba/0x26d0 [ 99.148933][ T8305] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 99.148965][ T8305] ? proc_coredump_connector+0x2d1/0x4f0 [ 99.148978][ T8305] ? __pfx_proc_coredump_connector+0x10/0x10 [ 99.148994][ T8305] ? rcu_is_watching+0x12/0xc0 [ 99.149010][ T8305] get_signal+0x22e3/0x26d0 [ 99.149028][ T8305] ? __pfx_get_signal+0x10/0x10 [ 99.149042][ T8305] ? force_sig_fault+0xc4/0x100 [ 99.149054][ T8305] ? __pfx_force_sig_fault+0x10/0x10 [ 99.149068][ T8305] arch_do_signal_or_restart+0x8f/0x7d0 [ 99.149080][ T8305] ? find_held_lock+0x2b/0x80 [ 99.149092][ T8305] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 99.149114][ T8305] irqentry_exit_to_user_mode+0x12a/0x270 [ 99.149131][ T8305] asm_exc_page_fault+0x26/0x30 [ 99.149142][ T8305] RIP: 0033:0x7fe058f8e931 [ 99.149151][ T8305] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 99.149162][ T8305] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 99.149170][ T8305] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 99.149177][ T8305] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 99.149183][ T8305] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 99.149189][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.149196][ T8305] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 99.149210][ T8305] [ 99.149214][ T8305] memory: usage 307200kB, limit 307200kB, failcnt 17029 [ 99.325440][ T8305] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 99.327911][ T8305] kmem: usage 6116kB, limit 9007199254740988kB, failcnt 0 [ 99.330098][ T8305] Memory cgroup stats for /syz1: [ 99.330179][ T8305] cache 308080640 [ 99.334945][ T8305] rss 208896 [ 99.336013][ T8305] rss_huge 0 [ 99.337060][ T8305] shmem 308080640 [ 99.338222][ T8305] mapped_file 0 [ 99.339308][ T8305] dirty 0 [ 99.340284][ T8305] writeback 0 [ 99.341367][ T8305] workingset_refault_anon 25 [ 99.343476][ T8305] workingset_refault_file 810 [ 99.344993][ T8305] swap 127954944 [ 99.346136][ T8305] swapcached 40960 [ 99.347341][ T8305] pgpgin 220771 [ 99.348462][ T8305] pgpgout 145500 [ 99.349607][ T8305] pgfault 59118 [ 99.350718][ T8305] pgmajfault 49 [ 99.351840][ T8305] inactive_anon 153370624 [ 99.354523][ T8305] active_anon 153104384 [ 99.355976][ T8305] inactive_file 0 [ 99.357149][ T8305] active_file 0 [ 99.358266][ T8305] unevictable 0 [ 99.359383][ T8305] hierarchical_memory_limit 314572800 [ 99.361072][ T8305] hierarchical_memsw_limit 9223372036854771712 [ 99.363502][ T8305] total_cache 308080640 [ 99.364882][ T8305] total_rss 208896 [ 99.366149][ T8305] total_rss_huge 0 [ 99.380780][ T8504] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 99.390736][ T8305] total_shmem 308080640 [ 99.392068][ T8305] total_mapped_file 0 [ 99.393875][ T8305] total_dirty 0 [ 99.395012][ T8305] total_writeback 0 [ 99.396248][ T8305] total_workingset_refault_anon 25 [ 99.397836][ T8305] total_workingset_refault_file 810 [ 99.399407][ T8305] total_swap 127954944 [ 99.400687][ T8305] total_swapcached 40960 [ 99.401999][ T8305] total_pgpgin 220771 [ 99.403691][ T8305] total_pgpgout 145500 [ 99.404996][ T8305] total_pgfault 59118 [ 99.406296][ T8305] total_pgmajfault 49 [ 99.407580][ T8305] total_inactive_anon 153370624 [ 99.409593][ T8305] total_active_anon 153104384 [ 99.411138][ T8305] total_inactive_file 0 [ 99.412516][ T8305] total_active_file 0 [ 99.414812][ T8305] total_unevictable 0 [ 99.416290][ T8305] anon_cost 0 [ 99.417225][ T8509] pimreg: entered allmulticast mode [ 99.417455][ T8305] file_cost 0 [ 99.420640][ T8305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8288,uid=0 [ 99.425414][ T8305] Memory cgroup out of memory: Killed process 8288 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 99.456150][ T8509] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 99.459870][ T8509] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 99.470811][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.473390][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.475767][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.478175][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.480577][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.484121][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.486600][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.489230][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.491627][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.502984][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.505492][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.507886][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.510255][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.512663][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.525099][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.527552][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.529947][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.532420][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.535456][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.537895][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.540298][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.542762][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.545512][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.547917][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.550321][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.552729][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.555355][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.557768][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.560180][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.562615][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.565581][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.568004][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.570380][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.572766][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.575188][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.577589][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.579971][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.582357][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.584818][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.602854][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.605305][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.607703][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.610103][ T54] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0 [ 99.633860][ T54] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.638565][ T8522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.723'. [ 99.849530][ T8255] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.852557][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 99.852572][ T8255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.852579][ T8255] Call Trace: [ 99.852584][ T8255] [ 99.852588][ T8255] dump_stack_lvl+0x16c/0x1f0 [ 99.852608][ T8255] dump_header+0x101/0x930 [ 99.852626][ T8255] oom_kill_process+0x270/0xa60 [ 99.852643][ T8255] out_of_memory+0x350/0x1700 [ 99.852661][ T8255] ? __pfx_out_of_memory+0x10/0x10 [ 99.852680][ T8255] mem_cgroup_out_of_memory+0x118/0x130 [ 99.852693][ T8255] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 99.852708][ T8255] ? do_raw_spin_unlock+0x172/0x230 [ 99.852723][ T8255] try_charge_memcg+0x72b/0xd50 [ 99.852741][ T8255] ? __pfx_try_charge_memcg+0x10/0x10 [ 99.852757][ T8255] ? find_held_lock+0x1/0x80 [ 99.852770][ T8255] ? rcu_read_unlock+0x17/0x60 [ 99.852801][ T8255] charge_memcg+0x8a/0x230 [ 99.852819][ T8255] __mem_cgroup_charge+0x2b/0x1e0 [ 99.852838][ T8255] shmem_alloc_and_add_folio+0x514/0xc20 [ 99.852868][ T8255] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 99.852886][ T8255] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 99.852902][ T8255] shmem_get_folio_gfp+0x67f/0x1600 [ 99.852920][ T8255] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 99.852934][ T8255] ? __pte_offset_map_lock+0x174/0x310 [ 99.852953][ T8255] shmem_write_begin+0x160/0x300 [ 99.852967][ T8255] ? find_held_lock+0x2b/0x80 [ 99.852979][ T8255] ? __pfx_shmem_write_begin+0x10/0x10 [ 99.852994][ T8255] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 99.853005][ T8255] ? __pfx_timestamp_truncate+0x10/0x10 [ 99.853023][ T8255] generic_perform_write+0x3d0/0x930 [ 99.853042][ T8255] ? __pfx_generic_perform_write+0x10/0x10 [ 99.853056][ T8255] ? inode_needs_update_time.part.0+0x191/0x270 [ 99.853077][ T8255] shmem_file_write_iter+0x10e/0x140 [ 99.853094][ T8255] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 99.853109][ T8255] __kernel_write_iter+0x31a/0xa90 [ 99.853124][ T8255] ? __pfx___kernel_write_iter+0x10/0x10 [ 99.853137][ T8255] ? __up_read+0x1f8/0x750 [ 99.853151][ T8255] ? dump_user_range+0x745/0xb60 [ 99.853167][ T8255] dump_user_range+0x41f/0xb60 [ 99.853183][ T8255] ? __pfx_dump_user_range+0x10/0x10 [ 99.853197][ T8255] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 99.853216][ T8255] ? __pfx_writenote+0x10/0x10 [ 99.853234][ T8255] elf_core_dump+0x288a/0x3a90 [ 99.853256][ T8255] ? __pfx_elf_core_dump+0x10/0x10 [ 99.853270][ T8255] ? kasan_save_stack+0x42/0x60 [ 99.853283][ T8255] ? kasan_save_stack+0x33/0x60 [ 99.853295][ T8255] ? kasan_save_track+0x14/0x30 [ 99.853307][ T8255] ? __kasan_kmalloc+0xaa/0xb0 [ 99.853320][ T8255] ? do_coredump+0x1c9a/0x4f10 [ 99.853331][ T8255] ? get_signal+0x22e3/0x26d0 [ 99.853344][ T8255] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 99.853359][ T8255] ? 0xffffffffff600000 [ 99.853393][ T8255] ? do_coredump+0x399f/0x4f10 [ 99.853405][ T8255] do_coredump+0x399f/0x4f10 [ 99.853423][ T8255] ? __pfx_do_coredump+0x10/0x10 [ 99.853436][ T8255] ? find_held_lock+0x2b/0x80 [ 99.853449][ T8255] ? is_bpf_text_address+0x8a/0x1a0 [ 99.853464][ T8255] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 99.853479][ T8255] ? is_bpf_text_address+0x94/0x1a0 [ 99.853492][ T8255] ? kernel_text_address+0x8d/0x100 [ 99.853503][ T8255] ? __kernel_text_address+0xd/0x40 [ 99.853514][ T8255] ? unwind_get_return_address+0x59/0xa0 [ 99.853541][ T8255] ? stack_depot_save_flags+0x28/0xa40 [ 99.853558][ T8255] ? __lock_acquire+0xb8a/0x1c90 [ 99.853576][ T8255] ? kasan_save_stack+0x42/0x60 [ 99.853588][ T8255] ? kasan_save_stack+0x33/0x60 [ 99.853601][ T8255] ? kasan_save_track+0x14/0x30 [ 99.853613][ T8255] ? kasan_save_free_info+0x3b/0x60 [ 99.853623][ T8255] ? __kasan_slab_free+0x51/0x70 [ 99.853636][ T8255] ? kmem_cache_free+0x2d1/0x4d0 [ 99.853648][ T8255] ? __sigqueue_free+0xba/0x2a0 [ 99.853663][ T8255] ? get_signal+0xcba/0x26d0 [ 99.853674][ T8255] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 99.853707][ T8255] ? proc_coredump_connector+0x2d1/0x4f0 [ 99.853720][ T8255] ? __pfx_proc_coredump_connector+0x10/0x10 [ 99.853736][ T8255] ? rcu_is_watching+0x12/0xc0 [ 99.853751][ T8255] get_signal+0x22e3/0x26d0 [ 99.853770][ T8255] ? __pfx_get_signal+0x10/0x10 [ 99.853783][ T8255] ? force_sig_fault+0xc4/0x100 [ 99.853795][ T8255] ? __pfx_force_sig_fault+0x10/0x10 [ 99.853810][ T8255] arch_do_signal_or_restart+0x8f/0x7d0 [ 99.853821][ T8255] ? find_held_lock+0x2b/0x80 [ 99.853834][ T8255] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 99.853861][ T8255] irqentry_exit_to_user_mode+0x12a/0x270 [ 99.853879][ T8255] asm_exc_page_fault+0x26/0x30 [ 99.853889][ T8255] RIP: 0033:0x7fe058f8e931 [ 99.853899][ T8255] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 99.853909][ T8255] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 99.853918][ T8255] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 99.853925][ T8255] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 99.853931][ T8255] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 99.853937][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.853944][ T8255] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 99.853958][ T8255] [ 100.046503][ T8255] memory: usage 306732kB, limit 307200kB, failcnt 18331 [ 100.048139][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 100.049307][ T8255] memory+swap: usage 424928kB, limit 9007199254740988kB, failcnt 0 [ 100.052718][ T8538] IPVS: Error joining to the multicast group [ 100.072842][ T8255] kmem: usage 5920kB, limit 9007199254740988kB, failcnt 0 [ 100.075592][ T8255] Memory cgroup stats for /syz1: [ 100.075709][ T8255] cache 294686720 [ 100.079129][ T8255] rss 192512 [ 100.080439][ T8255] rss_huge 0 [ 100.081733][ T8255] shmem 294682624 [ 100.115805][ T8255] mapped_file 0 [ 100.117026][ T8255] dirty 0 [ 100.117967][ T8255] writeback 0 [ 100.119028][ T8255] workingset_refault_anon 25 [ 100.120486][ T8255] workingset_refault_file 828 [ 100.122010][ T8255] swap 121888768 [ 100.124111][ T8255] swapcached 36864 [ 100.125321][ T8255] pgpgin 221499 [ 100.126511][ T8255] pgpgout 149494 [ 100.127652][ T8255] pgfault 59165 [ 100.128806][ T8255] pgmajfault 50 [ 100.129939][ T8255] inactive_anon 135299072 [ 100.131311][ T8255] active_anon 159096832 [ 100.132655][ T8255] inactive_file 0 [ 100.135263][ T8255] active_file 4096 [ 100.136477][ T8255] unevictable 0 [ 100.137671][ T8255] hierarchical_memory_limit 314572800 [ 100.156421][ T8255] hierarchical_memsw_limit 9223372036854771712 [ 100.158388][ T8255] total_cache 294686720 [ 100.159705][ T8255] total_rss 192512 [ 100.165256][ T8552] dlm: Unknown command passed to DLM device : 255 [ 100.165256][ T8552] [ 100.169153][ T8552] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 100.169483][ T8255] total_rss_huge 0 [ 100.174967][ T8552] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 100.179598][ T8255] total_shmem 294682624 [ 100.183430][ T8255] total_mapped_file 0 [ 100.184758][ T8255] total_dirty 0 [ 100.185899][ T8255] total_writeback 0 [ 100.188766][ T8552] overlayfs: conflicting lowerdir path [ 100.191022][ T8255] total_workingset_refault_anon 25 [ 100.272865][ T8255] total_workingset_refault_file 828 [ 100.284124][ T8255] total_swap 121888768 [ 100.292875][ T8255] total_swapcached 36864 [ 100.304945][ T8255] total_pgpgin 221499 [ 100.306611][ T8255] total_pgpgout 149494 [ 100.308231][ T8255] total_pgfault 59165 [ 100.309794][ T8255] total_pgmajfault 50 [ 100.330946][ T8255] total_inactive_anon 135299072 [ 100.336931][ T8255] total_active_anon 159096832 [ 100.338772][ T8255] total_inactive_file 0 [ 100.340426][ T8255] total_active_file 4096 [ 100.342090][ T8255] total_unevictable 0 [ 100.362679][ T8572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16260 sclass=netlink_route_socket pid=8572 comm=syz.2.736 [ 100.370828][ T8255] anon_cost 0 [ 100.372203][ T8255] file_cost 0 [ 100.381517][ T8255] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8256,uid=0 [ 100.402041][ T8255] Memory cgroup out of memory: Killed process 8256 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 100.451429][ T8304] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 100.459775][ T8304] CPU: 0 UID: 0 PID: 8304 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 100.459792][ T8304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.459799][ T8304] Call Trace: [ 100.459803][ T8304] [ 100.459808][ T8304] dump_stack_lvl+0x16c/0x1f0 [ 100.459828][ T8304] dump_header+0x101/0x930 [ 100.459846][ T8304] oom_kill_process+0x270/0xa60 [ 100.459879][ T8304] out_of_memory+0x350/0x1700 [ 100.459898][ T8304] ? __pfx_out_of_memory+0x10/0x10 [ 100.459917][ T8304] mem_cgroup_out_of_memory+0x118/0x130 [ 100.459929][ T8304] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 100.459945][ T8304] ? do_raw_spin_unlock+0x172/0x230 [ 100.459960][ T8304] try_charge_memcg+0x72b/0xd50 [ 100.459978][ T8304] ? __pfx_try_charge_memcg+0x10/0x10 [ 100.459994][ T8304] ? find_held_lock+0x1/0x80 [ 100.460018][ T8304] ? rcu_read_unlock+0x17/0x60 [ 100.460039][ T8304] charge_memcg+0x8a/0x230 [ 100.460055][ T8304] __mem_cgroup_charge+0x2b/0x1e0 [ 100.460073][ T8304] shmem_alloc_and_add_folio+0x514/0xc20 [ 100.460091][ T8304] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 100.460106][ T8304] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 100.460122][ T8304] shmem_get_folio_gfp+0x67f/0x1600 [ 100.460139][ T8304] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 100.460154][ T8304] ? __pte_offset_map_lock+0x174/0x310 [ 100.460174][ T8304] shmem_write_begin+0x160/0x300 [ 100.460188][ T8304] ? find_held_lock+0x2b/0x80 [ 100.460200][ T8304] ? __pfx_shmem_write_begin+0x10/0x10 [ 100.460215][ T8304] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 100.460236][ T8304] ? __pfx_timestamp_truncate+0x10/0x10 [ 100.460256][ T8304] generic_perform_write+0x3d0/0x930 [ 100.460275][ T8304] ? __pfx_generic_perform_write+0x10/0x10 [ 100.460289][ T8304] ? inode_needs_update_time.part.0+0x191/0x270 [ 100.460310][ T8304] shmem_file_write_iter+0x10e/0x140 [ 100.460327][ T8304] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 100.460342][ T8304] __kernel_write_iter+0x31a/0xa90 [ 100.460359][ T8304] ? __pfx___kernel_write_iter+0x10/0x10 [ 100.460372][ T8304] ? __up_read+0x1f8/0x750 [ 100.460385][ T8304] ? dump_user_range+0x745/0xb60 [ 100.460402][ T8304] dump_user_range+0x41f/0xb60 [ 100.460418][ T8304] ? __pfx_dump_user_range+0x10/0x10 [ 100.460432][ T8304] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 100.460452][ T8304] ? __pfx_writenote+0x10/0x10 [ 100.460470][ T8304] elf_core_dump+0x288a/0x3a90 [ 100.460492][ T8304] ? __pfx_elf_core_dump+0x10/0x10 [ 100.460506][ T8304] ? kasan_save_stack+0x42/0x60 [ 100.460519][ T8304] ? kasan_save_stack+0x33/0x60 [ 100.460532][ T8304] ? kasan_save_track+0x14/0x30 [ 100.460544][ T8304] ? __kasan_kmalloc+0xaa/0xb0 [ 100.460556][ T8304] ? do_coredump+0x1c9a/0x4f10 [ 100.460568][ T8304] ? get_signal+0x22e3/0x26d0 [ 100.460580][ T8304] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 100.460596][ T8304] ? 0xffffffffff600000 [ 100.460630][ T8304] ? do_coredump+0x399f/0x4f10 [ 100.460642][ T8304] do_coredump+0x399f/0x4f10 [ 100.460660][ T8304] ? __pfx_do_coredump+0x10/0x10 [ 100.460673][ T8304] ? find_held_lock+0x2b/0x80 [ 100.460686][ T8304] ? is_bpf_text_address+0x8a/0x1a0 [ 100.460701][ T8304] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 100.460717][ T8304] ? is_bpf_text_address+0x94/0x1a0 [ 100.460729][ T8304] ? kernel_text_address+0x8d/0x100 [ 100.460741][ T8304] ? __kernel_text_address+0xd/0x40 [ 100.460752][ T8304] ? unwind_get_return_address+0x59/0xa0 [ 100.460779][ T8304] ? stack_depot_save_flags+0x28/0xa40 [ 100.460795][ T8304] ? __lock_acquire+0xb8a/0x1c90 [ 100.460813][ T8304] ? kasan_save_stack+0x42/0x60 [ 100.460826][ T8304] ? kasan_save_stack+0x33/0x60 [ 100.460838][ T8304] ? kasan_save_track+0x14/0x30 [ 100.460851][ T8304] ? kasan_save_free_info+0x3b/0x60 [ 100.460864][ T8304] ? __kasan_slab_free+0x51/0x70 [ 100.460878][ T8304] ? kmem_cache_free+0x2d1/0x4d0 [ 100.460890][ T8304] ? __sigqueue_free+0xba/0x2a0 [ 100.460905][ T8304] ? get_signal+0xcba/0x26d0 [ 100.460916][ T8304] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 100.460948][ T8304] ? proc_coredump_connector+0x2d1/0x4f0 [ 100.460961][ T8304] ? __pfx_proc_coredump_connector+0x10/0x10 [ 100.460977][ T8304] ? rcu_is_watching+0x12/0xc0 [ 100.460992][ T8304] get_signal+0x22e3/0x26d0 [ 100.461011][ T8304] ? __pfx_get_signal+0x10/0x10 [ 100.461024][ T8304] ? force_sig_fault+0xc4/0x100 [ 100.461036][ T8304] ? __pfx_force_sig_fault+0x10/0x10 [ 100.461051][ T8304] arch_do_signal_or_restart+0x8f/0x7d0 [ 100.461063][ T8304] ? find_held_lock+0x2b/0x80 [ 100.461075][ T8304] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 100.461097][ T8304] irqentry_exit_to_user_mode+0x12a/0x270 [ 100.461114][ T8304] asm_exc_page_fault+0x26/0x30 [ 100.461125][ T8304] RIP: 0033:0x7fe058f8e931 [ 100.461134][ T8304] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 100.461144][ T8304] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 100.461153][ T8304] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 100.461160][ T8304] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 100.461166][ T8304] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 100.461173][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.461179][ T8304] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 100.461193][ T8304] [ 100.461915][ T8304] memory: usage 305988kB, limit 307200kB, failcnt 18646 [ 100.481230][ T8579] random: crng reseeded on system resumption [ 100.486036][ T8304] memory+swap: usage 430652kB, limit 9007199254740988kB, failcnt 0 [ 100.505325][ T8304] kmem: usage 5904kB, limit 9007199254740988kB, failcnt 0 [ 100.511792][ T8304] Memory cgroup stats for [ 100.617194][ T8256] syz.1.653 (8256) used greatest stack depth: 18280 bytes left [ 100.621454][ T8304] /syz1: [ 100.682136][ T8304] cache 271790080 [ 100.690967][ T8304] rss 208896 [ 100.694311][ T8304] rss_huge 0 [ 100.698122][ T8304] shmem 271785984 [ 100.700636][ T8304] mapped_file 0 [ 100.707877][ T8304] dirty 0 [ 100.711553][ T8304] writeback 0 [ 100.715233][ T8304] workingset_refault_anon 29 [ 100.720392][ T8304] workingset_refault_file 892 [ 100.724186][ T8304] swap 123138048 [ 100.727428][ T8304] swapcached 73728 [ 100.733277][ T8304] pgpgin 229695 [ 100.739500][ T8304] pgpgout 163264 [ 100.740750][ T8304] pgfault 59370 [ 100.741920][ T8304] pgmajfault 55 [ 100.743799][ T8304] inactive_anon 157777920 [ 100.749061][ T8304] active_anon 112812032 [ 100.752092][ T8304] inactive_file 0 [ 100.753533][ T8304] active_file 4096 [ 100.754719][ T8304] unevictable 0 [ 100.755838][ T8304] hierarchical_memory_limit 314572800 [ 100.758749][ T8304] hierarchical_memsw_limit 9223372036854771712 [ 100.760748][ T8304] total_cache 271790080 [ 100.765212][ T8304] total_rss 208896 [ 100.766406][ T8304] total_rss_huge 0 [ 100.767816][ T8304] total_shmem 271785984 [ 100.769123][ T8304] total_mapped_file 0 [ 100.770376][ T8304] total_dirty 0 [ 100.771483][ T8304] total_writeback 0 [ 100.772708][ T8304] total_workingset_refault_anon 29 [ 100.776989][ T8304] total_workingset_refault_file 892 [ 100.778631][ T8304] total_swap 123138048 [ 100.780070][ T8304] total_swapcached 73728 [ 100.781400][ T8304] total_pgpgin 229695 [ 100.782658][ T8304] total_pgpgout 163264 [ 100.784387][ T8304] total_pgfault 59370 [ 100.785662][ T8304] total_pgmajfault 55 [ 100.786926][ T8304] total_inactive_anon 157777920 [ 100.788459][ T8304] total_active_anon 112812032 [ 100.789929][ T8304] total_inactive_file 0 [ 100.791228][ T8304] total_active_file 4096 [ 100.792565][ T8304] total_unevictable 0 [ 100.794163][ T8304] anon_cost 0 [ 100.795233][ T8304] file_cost 0 [ 100.796297][ T8304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8278,uid=0 [ 100.800826][ T8304] Memory cgroup out of memory: Killed process 8278 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 101.023738][ T8585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.739'. [ 101.107208][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 101.110217][ T1144] bond0: (slave bond_slave_0): interface is now down [ 101.112550][ T1144] bond0: (slave bond_slave_1): interface is now down [ 101.191339][ T8594] 9pnet_virtio: no channels available for device 127.0.0.1 [ 101.460893][ T8602] dlm: no locking on control device [ 101.620444][ T8266] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 101.624295][ T8266] CPU: 0 UID: 0 PID: 8266 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 101.624315][ T8266] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.624322][ T8266] Call Trace: [ 101.624326][ T8266] [ 101.624331][ T8266] dump_stack_lvl+0x16c/0x1f0 [ 101.624351][ T8266] dump_header+0x101/0x930 [ 101.624368][ T8266] oom_kill_process+0x270/0xa60 [ 101.624386][ T8266] out_of_memory+0x350/0x1700 [ 101.624404][ T8266] ? __pfx_out_of_memory+0x10/0x10 [ 101.624423][ T8266] mem_cgroup_out_of_memory+0x118/0x130 [ 101.624435][ T8266] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 101.624450][ T8266] ? do_raw_spin_unlock+0x172/0x230 [ 101.624465][ T8266] try_charge_memcg+0x72b/0xd50 [ 101.624484][ T8266] ? __pfx_try_charge_memcg+0x10/0x10 [ 101.624500][ T8266] ? find_held_lock+0x1/0x80 [ 101.624513][ T8266] ? rcu_read_unlock+0x17/0x60 [ 101.624533][ T8266] charge_memcg+0x8a/0x230 [ 101.624549][ T8266] __mem_cgroup_charge+0x2b/0x1e0 [ 101.624567][ T8266] shmem_alloc_and_add_folio+0x514/0xc20 [ 101.624585][ T8266] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 101.624600][ T8266] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 101.624616][ T8266] shmem_get_folio_gfp+0x67f/0x1600 [ 101.624633][ T8266] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 101.624648][ T8266] ? __pte_offset_map_lock+0x174/0x310 [ 101.624667][ T8266] shmem_write_begin+0x160/0x300 [ 101.624681][ T8266] ? find_held_lock+0x2b/0x80 [ 101.624693][ T8266] ? __pfx_shmem_write_begin+0x10/0x10 [ 101.624708][ T8266] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 101.624719][ T8266] ? __pfx_timestamp_truncate+0x10/0x10 [ 101.624737][ T8266] generic_perform_write+0x3d0/0x930 [ 101.624756][ T8266] ? __pfx_generic_perform_write+0x10/0x10 [ 101.624770][ T8266] ? inode_needs_update_time.part.0+0x191/0x270 [ 101.624791][ T8266] shmem_file_write_iter+0x10e/0x140 [ 101.624807][ T8266] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 101.624822][ T8266] __kernel_write_iter+0x31a/0xa90 [ 101.624838][ T8266] ? __pfx___kernel_write_iter+0x10/0x10 [ 101.624855][ T8266] ? __up_read+0x1f8/0x750 [ 101.624868][ T8266] ? dump_user_range+0x745/0xb60 [ 101.624884][ T8266] dump_user_range+0x41f/0xb60 [ 101.624901][ T8266] ? __pfx_dump_user_range+0x10/0x10 [ 101.624915][ T8266] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 101.624935][ T8266] ? __pfx_writenote+0x10/0x10 [ 101.624953][ T8266] elf_core_dump+0x288a/0x3a90 [ 101.624975][ T8266] ? __pfx_elf_core_dump+0x10/0x10 [ 101.624989][ T8266] ? kasan_save_stack+0x42/0x60 [ 101.625003][ T8266] ? kasan_save_stack+0x33/0x60 [ 101.625015][ T8266] ? kasan_save_track+0x14/0x30 [ 101.625028][ T8266] ? __kasan_kmalloc+0xaa/0xb0 [ 101.625040][ T8266] ? do_coredump+0x1c9a/0x4f10 [ 101.625051][ T8266] ? get_signal+0x22e3/0x26d0 [ 101.625064][ T8266] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 101.625079][ T8266] ? 0xffffffffff600000 [ 101.625115][ T8266] ? do_coredump+0x399f/0x4f10 [ 101.625126][ T8266] do_coredump+0x399f/0x4f10 [ 101.625144][ T8266] ? __pfx_do_coredump+0x10/0x10 [ 101.625157][ T8266] ? find_held_lock+0x2b/0x80 [ 101.625170][ T8266] ? is_bpf_text_address+0x8a/0x1a0 [ 101.625185][ T8266] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 101.625201][ T8266] ? is_bpf_text_address+0x94/0x1a0 [ 101.625214][ T8266] ? kernel_text_address+0x8d/0x100 [ 101.625225][ T8266] ? __kernel_text_address+0xd/0x40 [ 101.625236][ T8266] ? unwind_get_return_address+0x59/0xa0 [ 101.625263][ T8266] ? stack_depot_save_flags+0x28/0xa40 [ 101.625279][ T8266] ? __lock_acquire+0xb8a/0x1c90 [ 101.625297][ T8266] ? kasan_save_stack+0x42/0x60 [ 101.625310][ T8266] ? kasan_save_stack+0x33/0x60 [ 101.625322][ T8266] ? kasan_save_track+0x14/0x30 [ 101.625334][ T8266] ? kasan_save_free_info+0x3b/0x60 [ 101.625344][ T8266] ? __kasan_slab_free+0x51/0x70 [ 101.625357][ T8266] ? kmem_cache_free+0x2d1/0x4d0 [ 101.625370][ T8266] ? __sigqueue_free+0xba/0x2a0 [ 101.625384][ T8266] ? get_signal+0xcba/0x26d0 [ 101.625396][ T8266] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 101.625427][ T8266] ? proc_coredump_connector+0x2d1/0x4f0 [ 101.625440][ T8266] ? __pfx_proc_coredump_connector+0x10/0x10 [ 101.625455][ T8266] ? rcu_is_watching+0x12/0xc0 [ 101.625471][ T8266] get_signal+0x22e3/0x26d0 [ 101.625489][ T8266] ? __pfx_get_signal+0x10/0x10 [ 101.625502][ T8266] ? force_sig_fault+0xc4/0x100 [ 101.625515][ T8266] ? __pfx_force_sig_fault+0x10/0x10 [ 101.625529][ T8266] arch_do_signal_or_restart+0x8f/0x7d0 [ 101.625541][ T8266] ? find_held_lock+0x2b/0x80 [ 101.625554][ T8266] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.625575][ T8266] irqentry_exit_to_user_mode+0x12a/0x270 [ 101.625592][ T8266] asm_exc_page_fault+0x26/0x30 [ 101.625603][ T8266] RIP: 0033:0x7fe058f8e931 [ 101.625612][ T8266] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 101.625622][ T8266] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 101.625631][ T8266] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 101.625637][ T8266] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 101.625644][ T8266] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 101.625650][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.625656][ T8266] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 101.625670][ T8266] [ 101.625674][ T8266] memory: usage 307200kB, limit 307200kB, failcnt 19619 [ 101.835585][ T8266] memory+swap: usage 432184kB, limit 9007199254740988kB, failcnt 0 [ 101.838700][ T8266] kmem: usage 5552kB, limit 9007199254740988kB, failcnt 0 [ 101.841508][ T8266] Memory cgroup stats for /syz1: [ 101.841609][ T8266] cache 308576256 [ 101.845160][ T8266] rss 303104 [ 101.846473][ T8266] rss_huge 0 [ 101.847778][ T8266] shmem 308576256 [ 101.849237][ T8266] mapped_file 0 [ 101.850618][ T8266] dirty 0 [ 101.851822][ T8266] writeback 0 [ 101.853205][ T8266] workingset_refault_anon 48 [ 101.855018][ T8266] workingset_refault_file 3053 [ 101.856953][ T8266] swap 127983616 [ 101.858377][ T8266] swapcached 12288 [ 101.859865][ T8266] pgpgin 266641 [ 101.861255][ T8266] pgpgout 191229 [ 101.862665][ T8266] pgfault 61079 [ 101.864391][ T8266] pgmajfault 90 [ 101.865840][ T8266] inactive_anon 66469888 [ 101.867296][ T8266] active_anon 242155520 [ 101.868573][ T8266] inactive_file 0 [ 101.869739][ T8266] active_file 0 [ 101.870850][ T8266] unevictable 0 [ 101.871983][ T8266] hierarchical_memory_limit 314572800 [ 101.873745][ T8266] hierarchical_memsw_limit 9223372036854771712 [ 101.875677][ T8266] total_cache 308576256 [ 101.877065][ T8266] total_rss 303104 [ 101.878544][ T8266] total_rss_huge 0 [ 101.880030][ T8266] total_shmem 308576256 [ 101.881660][ T8266] total_mapped_file 0 [ 101.883343][ T8266] total_dirty 0 [ 101.884780][ T8266] total_writeback 0 [ 101.886291][ T8266] total_workingset_refault_anon 48 [ 101.888305][ T8266] total_workingset_refault_file 3053 [ 101.890358][ T8266] total_swap 127983616 [ 101.891957][ T8266] total_swapcached 12288 [ 101.894073][ T8266] total_pgpgin 266641 [ 101.895762][ T8266] total_pgpgout 191229 [ 101.897915][ T8266] total_pgfault 61079 [ 101.899472][ T8266] total_pgmajfault 90 [ 101.901297][ T8266] total_inactive_anon 66469888 [ 101.903273][ T8266] total_active_anon 242155520 [ 101.905205][ T8266] total_inactive_file 0 [ 101.906915][ T8266] total_active_file 0 [ 101.908473][ T8266] total_unevictable 0 [ 101.910037][ T8266] anon_cost 0 [ 101.911359][ T8266] file_cost 0 [ 101.912711][ T8266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8305,uid=0 [ 101.918542][ T8266] Memory cgroup out of memory: Killed process 8305 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:54968kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 101.967222][ T8616] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3261 [ 102.223310][ T8284] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 102.226377][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 102.226391][ T8284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.226398][ T8284] Call Trace: [ 102.226402][ T8284] [ 102.226407][ T8284] dump_stack_lvl+0x16c/0x1f0 [ 102.226427][ T8284] dump_header+0x101/0x930 [ 102.226445][ T8284] oom_kill_process+0x270/0xa60 [ 102.226462][ T8284] out_of_memory+0x350/0x1700 [ 102.226480][ T8284] ? __pfx_out_of_memory+0x10/0x10 [ 102.226499][ T8284] mem_cgroup_out_of_memory+0x118/0x130 [ 102.226511][ T8284] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 102.226526][ T8284] ? do_raw_spin_unlock+0x172/0x230 [ 102.226542][ T8284] try_charge_memcg+0x72b/0xd50 [ 102.226561][ T8284] ? __pfx_try_charge_memcg+0x10/0x10 [ 102.226576][ T8284] ? find_held_lock+0x1/0x80 [ 102.226590][ T8284] ? rcu_read_unlock+0x17/0x60 [ 102.226610][ T8284] charge_memcg+0x8a/0x230 [ 102.226625][ T8284] __mem_cgroup_charge+0x2b/0x1e0 [ 102.226644][ T8284] shmem_alloc_and_add_folio+0x514/0xc20 [ 102.226661][ T8284] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 102.226676][ T8284] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 102.226692][ T8284] shmem_get_folio_gfp+0x67f/0x1600 [ 102.226709][ T8284] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 102.226724][ T8284] ? __pte_offset_map_lock+0x174/0x310 [ 102.226743][ T8284] shmem_write_begin+0x160/0x300 [ 102.226757][ T8284] ? find_held_lock+0x2b/0x80 [ 102.226770][ T8284] ? __pfx_shmem_write_begin+0x10/0x10 [ 102.226784][ T8284] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 102.226795][ T8284] ? __pfx_timestamp_truncate+0x10/0x10 [ 102.226814][ T8284] generic_perform_write+0x3d0/0x930 [ 102.226832][ T8284] ? __pfx_generic_perform_write+0x10/0x10 [ 102.226849][ T8284] ? inode_needs_update_time.part.0+0x191/0x270 [ 102.226870][ T8284] shmem_file_write_iter+0x10e/0x140 [ 102.226887][ T8284] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.226903][ T8284] __kernel_write_iter+0x31a/0xa90 [ 102.226918][ T8284] ? __pfx___kernel_write_iter+0x10/0x10 [ 102.226932][ T8284] ? __up_read+0x1f8/0x750 [ 102.226946][ T8284] ? dump_user_range+0x745/0xb60 [ 102.226962][ T8284] dump_user_range+0x41f/0xb60 [ 102.226978][ T8284] ? __pfx_dump_user_range+0x10/0x10 [ 102.226992][ T8284] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 102.227011][ T8284] ? __pfx_writenote+0x10/0x10 [ 102.227029][ T8284] elf_core_dump+0x288a/0x3a90 [ 102.227051][ T8284] ? __pfx_elf_core_dump+0x10/0x10 [ 102.227065][ T8284] ? kasan_save_stack+0x42/0x60 [ 102.227077][ T8284] ? kasan_save_stack+0x33/0x60 [ 102.227089][ T8284] ? kasan_save_track+0x14/0x30 [ 102.227102][ T8284] ? __kasan_kmalloc+0xaa/0xb0 [ 102.227114][ T8284] ? do_coredump+0x1c9a/0x4f10 [ 102.227126][ T8284] ? get_signal+0x22e3/0x26d0 [ 102.227137][ T8284] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 102.227153][ T8284] ? 0xffffffffff600000 [ 102.227187][ T8284] ? do_coredump+0x399f/0x4f10 [ 102.227198][ T8284] do_coredump+0x399f/0x4f10 [ 102.227216][ T8284] ? __pfx_do_coredump+0x10/0x10 [ 102.227229][ T8284] ? find_held_lock+0x2b/0x80 [ 102.227242][ T8284] ? is_bpf_text_address+0x8a/0x1a0 [ 102.227257][ T8284] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.227273][ T8284] ? is_bpf_text_address+0x94/0x1a0 [ 102.227285][ T8284] ? kernel_text_address+0x8d/0x100 [ 102.227297][ T8284] ? __kernel_text_address+0xd/0x40 [ 102.227308][ T8284] ? unwind_get_return_address+0x59/0xa0 [ 102.227335][ T8284] ? stack_depot_save_flags+0x28/0xa40 [ 102.227352][ T8284] ? __lock_acquire+0xb8a/0x1c90 [ 102.227370][ T8284] ? kasan_save_stack+0x42/0x60 [ 102.227383][ T8284] ? kasan_save_stack+0x33/0x60 [ 102.227395][ T8284] ? kasan_save_track+0x14/0x30 [ 102.227407][ T8284] ? kasan_save_free_info+0x3b/0x60 [ 102.227417][ T8284] ? __kasan_slab_free+0x51/0x70 [ 102.227430][ T8284] ? kmem_cache_free+0x2d1/0x4d0 [ 102.227443][ T8284] ? __sigqueue_free+0xba/0x2a0 [ 102.227457][ T8284] ? get_signal+0xcba/0x26d0 [ 102.227469][ T8284] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 102.227500][ T8284] ? proc_coredump_connector+0x2d1/0x4f0 [ 102.227513][ T8284] ? __pfx_proc_coredump_connector+0x10/0x10 [ 102.227529][ T8284] ? rcu_is_watching+0x12/0xc0 [ 102.227544][ T8284] get_signal+0x22e3/0x26d0 [ 102.227563][ T8284] ? __pfx_get_signal+0x10/0x10 [ 102.227576][ T8284] ? force_sig_fault+0xc4/0x100 [ 102.227588][ T8284] ? __pfx_force_sig_fault+0x10/0x10 [ 102.227603][ T8284] arch_do_signal_or_restart+0x8f/0x7d0 [ 102.227614][ T8284] ? find_held_lock+0x2b/0x80 [ 102.227627][ T8284] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.227662][ T8284] irqentry_exit_to_user_mode+0x12a/0x270 [ 102.227683][ T8284] asm_exc_page_fault+0x26/0x30 [ 102.227693][ T8284] RIP: 0033:0x7fe058f8e931 [ 102.227703][ T8284] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 102.227713][ T8284] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 102.227722][ T8284] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 102.227729][ T8284] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 102.227735][ T8284] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 102.227742][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.227748][ T8284] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 102.227762][ T8284] [ 102.227766][ T8284] memory: usage 307200kB, limit 307200kB, failcnt 21138 [ 102.399039][ T8284] memory+swap: usage 387668kB, limit 9007199254740988kB, failcnt 0 [ 102.401505][ T8284] kmem: usage 5560kB, limit 9007199254740988kB, failcnt 0 [ 102.404820][ T8284] Memory cgroup stats for /syz1: [ 102.404906][ T8284] cache 262168576 [ 102.408518][ T8284] rss 286720 [ 102.409568][ T8284] rss_huge 0 [ 102.410603][ T8284] shmem 262168576 [ 102.411805][ T8284] mapped_file 0 [ 102.412968][ T8284] dirty 0 [ 102.413914][ T8284] writeback 0 [ 102.415086][ T8284] workingset_refault_anon 48 [ 102.416579][ T8284] workingset_refault_file 3053 [ 102.418087][ T8284] swap 125763584 [ 102.419229][ T8284] swapcached 24576 [ 102.420434][ T8284] pgpgin 268439 [ 102.421553][ T8284] pgpgout 204330 [ 102.422691][ T8284] pgfault 61176 [ 102.424981][ T8284] pgmajfault 90 [ 102.426108][ T8284] inactive_anon 244166656 [ 102.427490][ T8284] active_anon 17899520 [ 102.428790][ T8284] inactive_file 0 [ 102.429950][ T8284] active_file 0 [ 102.431060][ T8284] unevictable 0 [ 102.432209][ T8284] hierarchical_memory_limit 314572800 [ 102.433989][ T8284] hierarchical_memsw_limit 9223372036854771712 [ 102.435967][ T8284] total_cache 262168576 [ 102.437321][ T8284] total_rss 286720 [ 102.438501][ T8284] total_rss_huge 0 [ 102.439776][ T8284] total_shmem 262168576 [ 102.441135][ T8284] total_mapped_file 0 [ 102.442391][ T8284] total_dirty 0 [ 102.444721][ T8284] total_writeback 0 [ 102.445941][ T8284] total_workingset_refault_anon 48 [ 102.447567][ T8284] total_workingset_refault_file 3053 [ 102.449216][ T8284] total_swap 125763584 [ 102.450494][ T8284] total_swapcached 24576 [ 102.451855][ T8284] total_pgpgin 268439 [ 102.453973][ T8284] total_pgpgout 204330 [ 102.455333][ T8284] total_pgfault 61176 [ 102.456731][ T8284] total_pgmajfault 90 [ 102.458052][ T8284] total_inactive_anon 244166656 [ 102.459579][ T8284] total_active_anon 17899520 [ 102.461044][ T8284] total_inactive_file 0 [ 102.462356][ T8284] total_active_file 0 [ 102.465774][ T8284] total_unevictable 0 [ 102.467046][ T8284] anon_cost 0 [ 102.468118][ T8284] file_cost 0 [ 102.469177][ T8284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8293,uid=0 [ 102.473656][ T8284] Memory cgroup out of memory: Killed process 8293 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 102.565419][ T8632] tipc: Enabled bearer , priority 0 [ 102.570046][ T8632] syzkaller0: entered promiscuous mode [ 102.571795][ T8632] syzkaller0: entered allmulticast mode [ 102.582535][ T8632] tipc: Resetting bearer [ 102.594666][ T8631] tipc: Resetting bearer [ 102.597336][ T8636] random: crng reseeded on system resumption [ 102.685701][ T8631] tipc: Disabling bearer [ 102.777956][ T8291] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 102.812846][ T8291] CPU: 1 UID: 0 PID: 8291 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 102.812864][ T8291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.812871][ T8291] Call Trace: [ 102.812875][ T8291] [ 102.812880][ T8291] dump_stack_lvl+0x16c/0x1f0 [ 102.812901][ T8291] dump_header+0x101/0x930 [ 102.812918][ T8291] oom_kill_process+0x270/0xa60 [ 102.812935][ T8291] out_of_memory+0x350/0x1700 [ 102.812953][ T8291] ? __pfx_out_of_memory+0x10/0x10 [ 102.812972][ T8291] mem_cgroup_out_of_memory+0x118/0x130 [ 102.812985][ T8291] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 102.813000][ T8291] ? do_raw_spin_unlock+0x172/0x230 [ 102.813015][ T8291] try_charge_memcg+0x72b/0xd50 [ 102.813034][ T8291] ? __pfx_try_charge_memcg+0x10/0x10 [ 102.813050][ T8291] ? find_held_lock+0x1/0x80 [ 102.813063][ T8291] ? rcu_read_unlock+0x17/0x60 [ 102.813084][ T8291] charge_memcg+0x8a/0x230 [ 102.813099][ T8291] __mem_cgroup_charge+0x2b/0x1e0 [ 102.813118][ T8291] shmem_alloc_and_add_folio+0x514/0xc20 [ 102.813135][ T8291] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 102.813150][ T8291] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 102.813166][ T8291] shmem_get_folio_gfp+0x67f/0x1600 [ 102.813183][ T8291] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 102.813198][ T8291] ? __pte_offset_map_lock+0x174/0x310 [ 102.813217][ T8291] shmem_write_begin+0x160/0x300 [ 102.813231][ T8291] ? find_held_lock+0x2b/0x80 [ 102.813243][ T8291] ? __pfx_shmem_write_begin+0x10/0x10 [ 102.813258][ T8291] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 102.813269][ T8291] ? __pfx_timestamp_truncate+0x10/0x10 [ 102.813288][ T8291] generic_perform_write+0x3d0/0x930 [ 102.813306][ T8291] ? __pfx_generic_perform_write+0x10/0x10 [ 102.813320][ T8291] ? inode_needs_update_time.part.0+0x191/0x270 [ 102.813342][ T8291] shmem_file_write_iter+0x10e/0x140 [ 102.813358][ T8291] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 102.813374][ T8291] __kernel_write_iter+0x31a/0xa90 [ 102.813389][ T8291] ? __pfx___kernel_write_iter+0x10/0x10 [ 102.813403][ T8291] ? __up_read+0x1f8/0x750 [ 102.813416][ T8291] ? dump_user_range+0x745/0xb60 [ 102.813432][ T8291] dump_user_range+0x41f/0xb60 [ 102.813449][ T8291] ? __pfx_dump_user_range+0x10/0x10 [ 102.813463][ T8291] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 102.813482][ T8291] ? __pfx_writenote+0x10/0x10 [ 102.813501][ T8291] elf_core_dump+0x288a/0x3a90 [ 102.813522][ T8291] ? __pfx_elf_core_dump+0x10/0x10 [ 102.813536][ T8291] ? kasan_save_stack+0x42/0x60 [ 102.813549][ T8291] ? kasan_save_stack+0x33/0x60 [ 102.813562][ T8291] ? kasan_save_track+0x14/0x30 [ 102.813574][ T8291] ? __kasan_kmalloc+0xaa/0xb0 [ 102.813587][ T8291] ? do_coredump+0x1c9a/0x4f10 [ 102.813598][ T8291] ? get_signal+0x22e3/0x26d0 [ 102.813611][ T8291] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 102.813626][ T8291] ? 0xffffffffff600000 [ 102.813659][ T8291] ? do_coredump+0x399f/0x4f10 [ 102.813671][ T8291] do_coredump+0x399f/0x4f10 [ 102.813689][ T8291] ? __pfx_do_coredump+0x10/0x10 [ 102.813702][ T8291] ? find_held_lock+0x2b/0x80 [ 102.813715][ T8291] ? is_bpf_text_address+0x8a/0x1a0 [ 102.813730][ T8291] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.813745][ T8291] ? is_bpf_text_address+0x94/0x1a0 [ 102.813758][ T8291] ? kernel_text_address+0x8d/0x100 [ 102.813769][ T8291] ? __kernel_text_address+0xd/0x40 [ 102.813780][ T8291] ? unwind_get_return_address+0x59/0xa0 [ 102.813807][ T8291] ? stack_depot_save_flags+0x28/0xa40 [ 102.813823][ T8291] ? __lock_acquire+0xb8a/0x1c90 [ 102.813841][ T8291] ? kasan_save_stack+0x42/0x60 [ 102.813857][ T8291] ? kasan_save_stack+0x33/0x60 [ 102.813869][ T8291] ? kasan_save_track+0x14/0x30 [ 102.813881][ T8291] ? kasan_save_free_info+0x3b/0x60 [ 102.813891][ T8291] ? __kasan_slab_free+0x51/0x70 [ 102.813905][ T8291] ? kmem_cache_free+0x2d1/0x4d0 [ 102.813917][ T8291] ? __sigqueue_free+0xba/0x2a0 [ 102.813932][ T8291] ? get_signal+0xcba/0x26d0 [ 102.813943][ T8291] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 102.813975][ T8291] ? proc_coredump_connector+0x2d1/0x4f0 [ 102.813988][ T8291] ? __pfx_proc_coredump_connector+0x10/0x10 [ 102.814003][ T8291] ? rcu_is_watching+0x12/0xc0 [ 102.814019][ T8291] get_signal+0x22e3/0x26d0 [ 102.814037][ T8291] ? __pfx_get_signal+0x10/0x10 [ 102.814050][ T8291] ? force_sig_fault+0xc4/0x100 [ 102.814062][ T8291] ? __pfx_force_sig_fault+0x10/0x10 [ 102.814077][ T8291] arch_do_signal_or_restart+0x8f/0x7d0 [ 102.814089][ T8291] ? find_held_lock+0x2b/0x80 [ 102.814101][ T8291] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.814122][ T8291] irqentry_exit_to_user_mode+0x12a/0x270 [ 102.814140][ T8291] asm_exc_page_fault+0x26/0x30 [ 102.814151][ T8291] RIP: 0033:0x7fe058f8e931 [ 102.814160][ T8291] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 102.814170][ T8291] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 102.814180][ T8291] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 102.814187][ T8291] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 102.814193][ T8291] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 102.814199][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.814206][ T8291] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 102.814220][ T8291] [ 102.814224][ T8291] memory: usage 300248kB, limit 307200kB, failcnt 23087 [ 102.986084][ T8644] bridge3: entered allmulticast mode [ 102.986793][ T8291] memory+swap: usage 415764kB, limit 9007199254740988kB, failcnt 0 [ 102.991172][ T8291] kmem: usage 5312kB, limit 9007199254740988kB, failcnt 0 [ 102.993432][ T8291] Memory cgroup stats for /syz1: [ 102.993518][ T8291] cache 294625280 [ 102.996208][ T8291] rss 212992 [ 102.997250][ T8291] rss_huge 0 [ 102.998283][ T8291] shmem 294494208 [ 102.999433][ T8291] mapped_file 61440 [ 103.000643][ T8291] dirty 0 [ 103.001586][ T8291] writeback 0 [ 103.002648][ T8291] workingset_refault_anon 58 [ 103.004164][ T8291] workingset_refault_file 3163 [ 103.006151][ T8291] swap 127074304 [ 103.007285][ T8291] swapcached 61440 [ 103.007687][ T8644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8644 comm=syz.3.758 [ 103.008480][ T8291] pgpgin 288523 [ 103.014214][ T46] bond0: (slave bond_slave_0): interface is now down [ 103.015424][ T8291] pgpgout 216533 [ 103.017475][ T46] bond0: (slave bond_slave_1): interface is now down [ 103.018572][ T8291] pgfault 62107 [ 103.018579][ T8291] pgmajfault 102 [ 103.024225][ T46] bond0: now running without any active interface! [ 103.033057][ T8291] inactive_anon 88666112 [ 103.034439][ T8291] active_anon 205373440 [ 103.035749][ T8291] inactive_file 0 [ 103.036915][ T8291] active_file 131072 [ 103.038210][ T8291] unevictable 0 [ 103.039314][ T8291] hierarchical_memory_limit 314572800 [ 103.041028][ T8291] hierarchical_memsw_limit 9223372036854771712 [ 103.048902][ T8291] total_cache 294625280 [ 103.050228][ T8291] total_rss 212992 [ 103.052071][ T8291] total_rss_huge 0 [ 103.053607][ T8291] total_shmem 294494208 [ 103.054925][ T8291] total_mapped_file 61440 [ 103.056286][ T8291] total_dirty 0 [ 103.057521][ T8291] total_writeback 0 [ 103.058724][ T8291] total_workingset_refault_anon 58 [ 103.081598][ T8291] total_workingset_refault_file 3163 [ 103.083448][ T8291] total_swap 127074304 [ 103.084746][ T8291] total_swapcached 61440 [ 103.086081][ T8291] total_pgpgin 288523 [ 103.087375][ T8291] total_pgpgout 216533 [ 103.088664][ T8291] total_pgfault 62107 [ 103.110270][ T8646] netfs: Couldn't get user pages (rc=-14) [ 103.118917][ T8291] total_pgmajfault 102 [ 103.120329][ T8291] total_inactive_anon 88666112 [ 103.121947][ T8291] total_active_anon 205373440 [ 103.133323][ T8291] total_inactive_file 0 [ 103.134680][ T8291] total_active_file 131072 [ 103.136097][ T8291] total_unevictable 0 [ 103.138275][ T8291] anon_cost 0 [ 103.139404][ T8291] file_cost 0 [ 103.140484][ T8291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.653,pid=8277,uid=0 [ 103.183611][ T8291] Memory cgroup out of memory: Killed process 8277 (syz.1.653) total-vm:98240kB, anon-rss:1088kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 103.226058][ T8655] xt_socket: unknown flags 0x8 [ 103.268504][ T8663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'. [ 103.283322][ T61] e1000 0000:00:06.0 eth0: Reset adapter [ 103.393180][ T61] e1000 0000:00:06.0 eth0: Reset adapter [ 103.428760][ T8679] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 103.583165][ T61] e1000 0000:00:06.0 eth0: Reset adapter [ 103.618840][ T8306] syz.1.653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 103.621881][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.1.653 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 103.621896][ T8306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.621903][ T8306] Call Trace: [ 103.621907][ T8306] [ 103.621912][ T8306] dump_stack_lvl+0x16c/0x1f0 [ 103.621946][ T8306] dump_header+0x101/0x930 [ 103.621964][ T8306] oom_kill_process+0x270/0xa60 [ 103.621981][ T8306] out_of_memory+0x350/0x1700 [ 103.621999][ T8306] ? __pfx_out_of_memory+0x10/0x10 [ 103.622018][ T8306] mem_cgroup_out_of_memory+0x118/0x130 [ 103.622030][ T8306] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 103.622046][ T8306] ? do_raw_spin_unlock+0x172/0x230 [ 103.622062][ T8306] try_charge_memcg+0x72b/0xd50 [ 103.622080][ T8306] ? __pfx_try_charge_memcg+0x10/0x10 [ 103.622096][ T8306] ? find_held_lock+0x1/0x80 [ 103.622109][ T8306] ? rcu_read_unlock+0x17/0x60 [ 103.622130][ T8306] charge_memcg+0x8a/0x230 [ 103.622145][ T8306] __mem_cgroup_charge+0x2b/0x1e0 [ 103.622164][ T8306] shmem_alloc_and_add_folio+0x514/0xc20 [ 103.622181][ T8306] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 103.622196][ T8306] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 103.622213][ T8306] shmem_get_folio_gfp+0x67f/0x1600 [ 103.622230][ T8306] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 103.622244][ T8306] ? __pte_offset_map_lock+0x174/0x310 [ 103.622263][ T8306] shmem_write_begin+0x160/0x300 [ 103.622277][ T8306] ? find_held_lock+0x2b/0x80 [ 103.622290][ T8306] ? __pfx_shmem_write_begin+0x10/0x10 [ 103.622304][ T8306] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 103.622315][ T8306] ? __pfx_timestamp_truncate+0x10/0x10 [ 103.622334][ T8306] generic_perform_write+0x3d0/0x930 [ 103.622352][ T8306] ? __pfx_generic_perform_write+0x10/0x10 [ 103.622366][ T8306] ? inode_needs_update_time.part.0+0x191/0x270 [ 103.622387][ T8306] shmem_file_write_iter+0x10e/0x140 [ 103.622404][ T8306] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 103.622419][ T8306] __kernel_write_iter+0x31a/0xa90 [ 103.622435][ T8306] ? __pfx___kernel_write_iter+0x10/0x10 [ 103.622448][ T8306] ? __up_read+0x1f8/0x750 [ 103.622461][ T8306] ? dump_user_range+0x745/0xb60 [ 103.622483][ T8306] dump_user_range+0x41f/0xb60 [ 103.622499][ T8306] ? __pfx_dump_user_range+0x10/0x10 [ 103.622513][ T8306] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 103.622533][ T8306] ? __pfx_writenote+0x10/0x10 [ 103.622551][ T8306] elf_core_dump+0x288a/0x3a90 [ 103.622573][ T8306] ? __pfx_elf_core_dump+0x10/0x10 [ 103.622587][ T8306] ? kasan_save_stack+0x42/0x60 [ 103.622600][ T8306] ? kasan_save_stack+0x33/0x60 [ 103.622612][ T8306] ? kasan_save_track+0x14/0x30 [ 103.622624][ T8306] ? __kasan_kmalloc+0xaa/0xb0 [ 103.622637][ T8306] ? do_coredump+0x1c9a/0x4f10 [ 103.622648][ T8306] ? get_signal+0x22e3/0x26d0 [ 103.622661][ T8306] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 103.622676][ T8306] ? 0xffffffffff600000 [ 103.622722][ T8306] ? do_coredump+0x399f/0x4f10 [ 103.622737][ T8306] do_coredump+0x399f/0x4f10 [ 103.622755][ T8306] ? __pfx_do_coredump+0x10/0x10 [ 103.622769][ T8306] ? find_held_lock+0x2b/0x80 [ 103.622798][ T8306] ? is_bpf_text_address+0x8a/0x1a0 [ 103.622825][ T8306] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 103.622847][ T8306] ? is_bpf_text_address+0x94/0x1a0 [ 103.622864][ T8306] ? kernel_text_address+0x8d/0x100 [ 103.622881][ T8306] ? __kernel_text_address+0xd/0x40 [ 103.622896][ T8306] ? unwind_get_return_address+0x59/0xa0 [ 103.622953][ T8306] ? stack_depot_save_flags+0x28/0xa40 [ 103.622977][ T8306] ? __lock_acquire+0xb8a/0x1c90 [ 103.623004][ T8306] ? kasan_save_stack+0x42/0x60 [ 103.623020][ T8306] ? kasan_save_stack+0x33/0x60 [ 103.623039][ T8306] ? kasan_save_track+0x14/0x30 [ 103.623058][ T8306] ? kasan_save_free_info+0x3b/0x60 [ 103.623073][ T8306] ? __kasan_slab_free+0x51/0x70 [ 103.623092][ T8306] ? kmem_cache_free+0x2d1/0x4d0 [ 103.623110][ T8306] ? __sigqueue_free+0xba/0x2a0 [ 103.623131][ T8306] ? get_signal+0xcba/0x26d0 [ 103.623149][ T8306] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 103.623201][ T8306] ? proc_coredump_connector+0x2d1/0x4f0 [ 103.623219][ T8306] ? __pfx_proc_coredump_connector+0x10/0x10 [ 103.623244][ T8306] ? rcu_is_watching+0x12/0xc0 [ 103.623268][ T8306] get_signal+0x22e3/0x26d0 [ 103.623298][ T8306] ? __pfx_get_signal+0x10/0x10 [ 103.623318][ T8306] ? force_sig_fault+0xc4/0x100 [ 103.623337][ T8306] ? __pfx_force_sig_fault+0x10/0x10 [ 103.623357][ T8306] arch_do_signal_or_restart+0x8f/0x7d0 [ 103.623374][ T8306] ? find_held_lock+0x2b/0x80 [ 103.623391][ T8306] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 103.623413][ T8306] irqentry_exit_to_user_mode+0x12a/0x270 [ 103.623432][ T8306] asm_exc_page_fault+0x26/0x30 [ 103.623442][ T8306] RIP: 0033:0x7fe058f8e931 [ 103.623452][ T8306] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 103.623463][ T8306] RSP: 002b:fffffffffffffc20 EFLAGS: 00010217 [ 103.623473][ T8306] RAX: 0000000000000000 RBX: 00007fe0591b5fa0 RCX: 00007fe058f8e929 [ 103.623479][ T8306] RDX: 0000000000000000 RSI: fffffffffffffc20 RDI: 0000000000000000 [ 103.623486][ T8306] RBP: 00007fe059010b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.623492][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.623498][ T8306] R13: 0000000000000001 R14: 00007fe0591b5fa0 R15: 00007ffff1468c18 [ 103.623512][ T8306] [ 103.786162][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.892359][ T8306] memory: usage 272856kB, limit 307200kB, failcnt 25614 [ 103.894834][ T8306] memory+swap: usage 398076kB, limit 9007199254740988kB, failcnt 0 [ 103.902895][ T8306] kmem: usage 5416kB, limit 9007199254740988kB, failcnt 0 [ 103.905124][ T8306] Memory cgroup stats for /syz1: [ 103.905212][ T8306] cache 275247104 [ 103.907989][ T8306] rss 323584 [ 103.909025][ T8306] rss_huge 0 [ 103.910063][ T8306] shmem 273960960 [ 103.911204][ T8306] mapped_file 7716864 [ 103.912508][ T8306] dirty 0 [ 103.913611][ T8306] writeback 0 [ 103.914675][ T8306] workingset_refault_anon 58 [ 103.916102][ T8306] workingset_refault_file 3662 [ 103.917583][ T8306] swap 127963136 [ 103.918704][ T8306] swapcached 32768 [ 103.919899][ T8306] pgpgin 296968 [ 103.921007][ T8306] pgpgout 229688 [ 103.922148][ T8306] pgfault 64106 [ 103.924533][ T8306] pgmajfault 111 [ 103.925689][ T8306] inactive_anon 143998976 [ 103.927066][ T8306] active_anon 128421888 [ 103.928387][ T8306] inactive_file 0 [ 103.929550][ T8306] active_file 1249280 [ 103.930816][ T8306] unevictable 0 [ 103.931945][ T8306] hierarchical_memory_limit 314572800 [ 103.953186][ T8306] hierarchical_memsw_limit 9223372036854771712 [ 103.955619][ T8306] total_cache 275247104 [ 103.957475][ T8306] total_rss 323584 [ 103.958956][ T8306] total_rss_huge 0 [ 103.960476][ T8306] total_shmem 273960960 [ 103.962146][ T8306] total_mapped_file 7716864 [ 103.964158][ T8306] total_dirty 0 [ 103.965593][ T8306] total_writeback 0 [ 103.967205][ T8306] total_workingset_refault_anon 58 [ 103.969316][ T8306] total_workingset_refault_file 3662 [ 103.971406][ T8306] total_swap 127963136 [ 103.973618][ T8306] total_swapcached 32768 [ 104.000594][ T8306] total_pgpgin 296968 [ 104.001904][ T8306] total_pgpgout 229688 [ 104.003344][ T1065] ------------[ cut here ]------------ [ 104.004267][ T8306] total_pgfault 64106 [ 104.005479][ T1065] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 104.007567][ T8306] total_pgmajfault 111 [ 104.009553][ T1065] WARNING: CPU: 3 PID: 1065 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 104.011144][ T8306] total_inactive_anon 143998976 [ 104.013780][ T1065] Modules linked in: [ 104.013817][ T1065] CPU: 3 UID: 0 PID: 1065 Comm: kworker/u32:5 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 104.015940][ T8306] total_active_anon 128421888 [ 104.017176][ T1065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.017187][ T1065] Workqueue: bond0 bond_mii_monitor [ 104.021980][ T8306] total_inactive_file 0 [ 104.023285][ T1065] [ 104.023291][ T1065] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 104.023309][ T1065] Code: 05 ff ff ff e8 14 77 59 f8 c6 05 2f dc 2d 07 01 90 ba 48 00 00 00 48 c7 c6 c0 94 e3 8c 48 c7 c7 60 94 e3 8c e8 b4 3b 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 46 a8 90 e8 ce 4e c0 f8 e9 [ 104.023321][ T1065] RSP: 0018:ffffc900060e79f0 EFLAGS: 00010286 [ 104.023331][ T1065] RAX: 0000000000000000 RBX: ffff88803ba26000 RCX: ffffffff817ae248 [ 104.023339][ T1065] RDX: ffff888028cba440 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 104.023346][ T1065] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 104.027529][ T8306] total_active_file 1249280 [ 104.028304][ T1065] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000c1cf48 [ 104.028313][ T1065] R13: ffff88803ba26cc5 R14: ffffffff8c591440 R15: ffffffff899be1d0 [ 104.031387][ T8306] total_unevictable 0 [ 104.032479][ T1065] FS: 0000000000000000(0000) GS:ffff8880d6a53000(0000) knlGS:0000000000000000 [ 104.038525][ T8306] anon_cost 0 [ 104.040420][ T1065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.040430][ T1065] CR2: 00007f8eba77f100 CR3: 0000000059402000 CR4: 0000000000352ef0 [ 104.047533][ T8306] file_cost 0 [ 104.047969][ T1065] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.063333][ T8306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 104.064697][ T1065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.065881][ T8306] ,cpuset= [ 104.068275][ T1065] Call Trace: [ 104.068282][ T1065] [ 104.068287][ T1065] ethtool_op_get_link+0x1d/0x70 [ 104.078579][ T1065] bond_check_dev_link+0x3f9/0x710 [ 104.080314][ T1065] ? __pfx_bond_check_dev_link+0x10/0x10 [ 104.082083][ T1065] bond_mii_monitor+0x3c0/0x2dc0 [ 104.083801][ T1065] ? __pfx_bond_mii_monitor+0x10/0x10 [ 104.085486][ T1065] ? rcu_is_watching+0x12/0xc0 [ 104.087006][ T1065] process_one_work+0x9cc/0x1b70 [ 104.088576][ T1065] ? __pfx_process_one_work+0x10/0x10 [ 104.090295][ T1065] ? assign_work+0x1a0/0x250 [ 104.091876][ T1065] worker_thread+0x6c8/0xf10 [ 104.093471][ T1065] ? __kthread_parkme+0x19e/0x250 [ 104.095069][ T1065] ? __pfx_worker_thread+0x10/0x10 [ 104.096431][ T8306] / [ 104.096670][ T1065] kthread+0x3c2/0x780 [ 104.096698][ T1065] ? __pfx_kthread+0x10/0x10 [ 104.096710][ T1065] ? rcu_is_watching+0x12/0xc0 [ 104.096777][ T8306] ,mems_allowed=0-1 [ 104.097560][ T1065] ? __pfx_kthread+0x10/0x10 [ 104.099283][ T8306] ,oom_memcg= [ 104.100789][ T1065] ret_from_fork+0x5d7/0x6f0 [ 104.102685][ T8306] /syz1 [ 104.104016][ T1065] ? __pfx_kthread+0x10/0x10 [ 104.110949][ T1065] ret_from_fork_asm+0x1a/0x30 [ 104.112540][ T1065] [ 104.113660][ T1065] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.115925][ T1065] CPU: 3 UID: 0 PID: 1065 Comm: kworker/u32:5 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 104.119671][ T1065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.122998][ T1065] Workqueue: bond0 bond_mii_monitor [ 104.124644][ T1065] Call Trace: [ 104.125702][ T1065] [ 104.126677][ T1065] dump_stack_lvl+0x3d/0x1f0 [ 104.128147][ T1065] panic+0x71c/0x800 [ 104.129424][ T1065] ? __pfx_panic+0x10/0x10 [ 104.130881][ T1065] ? show_trace_log_lvl+0x29b/0x3e0 [ 104.132529][ T1065] ? check_panic_on_warn+0x1f/0xb0 [ 104.134135][ T1065] ? __linkwatch_sync_dev+0x1ed/0x230 [ 104.135820][ T1065] check_panic_on_warn+0xab/0xb0 [ 104.137400][ T1065] __warn+0xf6/0x3c0 [ 104.138637][ T1065] ? __pfx_vprintk_emit+0x10/0x10 [ 104.140220][ T1065] ? __linkwatch_sync_dev+0x1ed/0x230 [ 104.141897][ T1065] report_bug+0x3c3/0x580 [ 104.143257][ T1065] ? __linkwatch_sync_dev+0x1ed/0x230 [ 104.144941][ T1065] handle_bug+0x184/0x210 [ 104.146302][ T1065] exc_invalid_op+0x17/0x50 [ 104.147743][ T1065] asm_exc_invalid_op+0x1a/0x20 [ 104.149264][ T1065] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 104.151198][ T1065] Code: 05 ff ff ff e8 14 77 59 f8 c6 05 2f dc 2d 07 01 90 ba 48 00 00 00 48 c7 c6 c0 94 e3 8c 48 c7 c7 60 94 e3 8c e8 b4 3b 18 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 46 a8 90 e8 ce 4e c0 f8 e9 [ 104.157125][ T1065] RSP: 0018:ffffc900060e79f0 EFLAGS: 00010286 [ 104.159036][ T1065] RAX: 0000000000000000 RBX: ffff88803ba26000 RCX: ffffffff817ae248 [ 104.161485][ T1065] RDX: ffff888028cba440 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 104.163932][ T1065] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 104.166380][ T1065] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000c1cf48 [ 104.168826][ T1065] R13: ffff88803ba26cc5 R14: ffffffff8c591440 R15: ffffffff899be1d0 [ 104.171306][ T1065] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 104.173065][ T1065] ? __warn_printk+0x198/0x350 [ 104.174562][ T1065] ? __warn_printk+0x1a5/0x350 [ 104.176070][ T1065] ethtool_op_get_link+0x1d/0x70 [ 104.177625][ T1065] bond_check_dev_link+0x3f9/0x710 [ 104.179222][ T1065] ? __pfx_bond_check_dev_link+0x10/0x10 [ 104.180982][ T1065] bond_mii_monitor+0x3c0/0x2dc0 [ 104.182538][ T1065] ? __pfx_bond_mii_monitor+0x10/0x10 [ 104.184221][ T1065] ? rcu_is_watching+0x12/0xc0 [ 104.185726][ T1065] process_one_work+0x9cc/0x1b70 [ 104.187280][ T1065] ? __pfx_process_one_work+0x10/0x10 [ 104.189083][ T1065] ? assign_work+0x1a0/0x250 [ 104.190578][ T1065] worker_thread+0x6c8/0xf10 [ 104.192050][ T1065] ? __kthread_parkme+0x19e/0x250 [ 104.193628][ T1065] ? __pfx_worker_thread+0x10/0x10 [ 104.195230][ T1065] kthread+0x3c2/0x780 [ 104.196518][ T1065] ? __pfx_kthread+0x10/0x10 [ 104.197979][ T1065] ? rcu_is_watching+0x12/0xc0 [ 104.199477][ T1065] ? __pfx_kthread+0x10/0x10 [ 104.200940][ T1065] ret_from_fork+0x5d7/0x6f0 [ 104.202395][ T1065] ? __pfx_kthread+0x10/0x10 [ 104.203869][ T1065] ret_from_fork_asm+0x1a/0x30 [ 104.205372][ T1065] [ 104.206865][ T1065] Kernel Offset: disabled [ 104.208285][ T1065] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:29:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000046 RBX=ffffffff8e5c4840 RCX=00000000a3dc772f RDX=0000000000000000 RSI=ffffffff8ddf4921 RDI=ffffffff8c157920 RBP=0000000000000002 RSP=ffffc9000165fa40 R8 =f13f9caaf83f1fe8 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81987d02 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4a3137e2d8 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000111552 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000feffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc2e73590 00007fffc2e73590 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc2e73480 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc2e73ab0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6d656d20666f20 74756f00203a7325 64302e2573257325 6e2573253e64253c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a48404805434a05 51504a00051f5600 41150b0056005600 4b0056001b410019 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c61636968637261 72656968205d3630 333854205b5d3638 313335392e333031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6631206630206532 2036362033632066 6620386320333820 3834203130203938 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2034362038642037 6620666620666620 6666203861203163 203763203834203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33633c2031302033 3720666620666620 3066203130206433 2038342035302066 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020383020343220 6334206238206334 2038632039382064 3420326320393820 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30372e332e7a7973 223d6d6d6f632035 3534383d64697020 745f6d6461737973 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855ba255 RDI=ffffffff9b0893a0 RBP=ffffffff9b089360 RSP=ffffc9000340e408 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b089360 R15=ffffffff855ba1f0 RIP=ffffffff855ba27f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe059e566c0 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe473d8cfeb CR3=000000010aad5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fff400 Opmask01=0000000000000003 Opmask02=000000003f000bff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000073752f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a2e 2573257325003a25 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffff0f0e0d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7273752f3a6e6962 2f3a6e6962732f72 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d72656c6c616b 00007fe473bd1d48 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6637633437636236 000055d8ce900560 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003938 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d8ce908270 0000000000000000 000000008700666e 6f63766c6f736572 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d8ce908270 0000000000000000 000000008700666e 6f63766c6f736572 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d8ce90825f 0000000000000000 0000000087004941 404c5943405c4a5d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20343031203d8120 3f812481205b8120 7c7c2031263e3220 6c6c756e2f766564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d8ce906918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8df0bdb2 RDI=ffffffff8c157920 RBP=0000000000000002 RSP=ffffc9000442dcd8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b8023cd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe059e566c0 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8eba7ab090 CR3=0000000035393000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000001 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff1468fa0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe059011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe059011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe059011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe059011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe059011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe059011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000021 RCX=ffffffff819b8272 RDX=ffff888028cba440 RSI=ffffffff819b8260 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc900060e7548 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000c1ceac R13=0000000000000200 R14=ffff8881001ea440 R15=ffffc900060e7618 RIP=ffffffff81bc1c56 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d6a53000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8eba77f100 CR3=0000000059402000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040101 Opmask01=0000000000000001 Opmask02=000000000307003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 779be03b0508b34a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69626572004d52 4c4147495300676e 697361656c657200 4d52455447495300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c474057004d52 4c4147495300424b 4c56444049405700 4d52455447495300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001001400000008 fd80400aa498944f 684e5a2000020014 0000004800000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 00000c8a00000c8a ffffffffffffffff 00060014cb08cb9e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fafc1c6600000000 000080fe00010014 00000008fd80400a a498944f684e5a20 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 0000008000080008 00000c8100000c81 ffffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006001447a82a97 f24854e500000000 000080fe00010014 00000007fd80400a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2033352020202020 2020360a63615f0a 0a0a695f63202033 3720646161206500 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000