last executing test programs: 1m2.356537436s ago: executing program 2 (id=728): readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x9, 0x10001, 0x0, 0xa, 0x0, 0x0, 0x6, 0xfdfd, 0x6}}) 1m2.356225905s ago: executing program 2 (id=730): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r6 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r6, 0x1107}, {0xffffffffffffffff, 0x1400}, {r6, 0x1f3}], 0x20000000000000e0, 0x41) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x17, 0x0, 0xa9}) 1m2.286192914s ago: executing program 2 (id=732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x3, 0x7f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000080)=0x40, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000140)="ae1e8b8010f7143de92341503a578cbf6aa1bd415b0acc782b", 0x19, 0x50, &(0x7f00000005c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x7264, 0xb}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) timer_create(0x3, 0x0, &(0x7f00000003c0)=0x0) timer_settime(r7, 0x1, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000640)={{}, {0x0, 0x3938700}}, &(0x7f0000000680)) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m1.300826209s ago: executing program 2 (id=755): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0xf, 0x4000000, [{}]}]}}, 0x0, 0x2e}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = dup2(r2, r1) flock(r3, 0x8) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x30}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) syz_clone3(&(0x7f0000000380)={0x102142280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x120, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m1.230351123s ago: executing program 2 (id=758): mkdir(&(0x7f0000000400)='./file0\x00', 0x16c) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) linkat(r1, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x400) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)="0c37f8246f3e4c0f268894edcd5b1a9964c8dae6b413258a16aa77258ad9a416bb6c2ed80e4c948037035c05a300d188b7f720f619c3aed8885056565487fbfcf347f9759031056a5c6f6510bba78a970af194a3bfff9ee162bfd08f9d87b199bad71d4b704bbe05f9458f7edb6ea6df3da93d4439b26d0a2fd23b7969b4ccf926f6c02246b837960e2e6ffd0b628381b7c8c561b6725dee2e9c9811186a4669fded634db20e87be54172631e50b4a2fbcdca4b1183a659e6fd8aab4ea50c47496f9af36f445ea0840eb2ad6c92626d152f73b5070e4681a3f4ecf3759979dcddaa6a5f41cc65f426469206f569643536d8d004b935dacded93a9582725093b9b94252ca5e6e829d61f0de5b0b660ba89e1458b1d03fd90ed22573f93303f57eb2a451759f2fe719e4073a45afeb74afbadc05d3a60bb791f752d1e38a15dcd26c2bd377209678da7c7c05fddfff5f0b4fbf978ed855bdf1cc4dd2c5eb0b44fc5c2cc3e06e3aecb0650de8c5cbf54d583a61dfb5954e252a2ba91f990b378d6ef47f30f81aca4282b8aa56ca937ef2d22f2292f05231c97aabc0109cb66759e925096b56331f65f4b2acebc48d60fab50bbc33fd596f4567fb886a50a278aa78aa324450ac4af0bca51256d291bd21e53b8175af27bcdda49f9e7444ea93243e24402330367a6dab792dc145da3c8d08749dc708b617d1f97ce8e73cc5bd1fa3329e41d50ae907dd8d3faf01fafd3dcc614b61584d4374e2b1a1035cf19d589e6bac791e11e17f927e9fb77a35ff185dba4119986a129b3fe1074888fb", 0x23d}, {&(0x7f0000000440)='0', 0x1}], 0x2) 1m0.661320067s ago: executing program 2 (id=767): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = socket$l2tp(0x2, 0x2, 0x73) dup2(r4, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0xf983e000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4d, &(0x7f0000000180), 0x0) 1m0.62043378s ago: executing program 32 (id=767): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = socket$l2tp(0x2, 0x2, 0x73) dup2(r4, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0xf983e000) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4d, &(0x7f0000000180), 0x0) 44.888319006s ago: executing program 3 (id=961): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000001060103000000000000000007050000009f7cf544e439296cfe7fd690be13ef030c0407f756a9900436a20a"], 0x24}, 0x1, 0x0, 0x0, 0x4003}, 0x40880) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) close_range(r0, r1, 0x0) r3 = fsmount(r1, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000980)="0f20e06635100000000f22e02639ff66b95a0800000f326433d20f51c4baf80c66b82a21d38666efbafc0cb0b8ee260f01c0660ff8d9c0ffb3f3ab", 0x3b}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) pwritev2(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="9a7578372c", 0x5}], 0x1, 0x2, 0x1, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 44.603323711s ago: executing program 3 (id=967): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001640)={0x20, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x800) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x20000, 0x800, 0x7f, 0x1}, 0x20) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e90110", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "271e46", 0x0, 0x33, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing={0x29, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000b40)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0xe0, 0x0, 0x204, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x99}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfa}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, r5, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x402}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000640)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x20, 0x20, 0x45, 0x6, {{0x6, 0x4, 0x0, 0x23, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@ra={0x94, 0x4}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0xea, 0x4, 0x11, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x6, 0x2}}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1dc, r5, 0x4, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0xa0}, 0x8001) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x20}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r13 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) fsetxattr$security_ima(r13, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 43.773011148s ago: executing program 3 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) pipe(&(0x7f0000000580)) r1 = socket$inet(0x2, 0x3, 0x7f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) timer_create(0x3, 0x0, &(0x7f00000003c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r5, 0x1, &(0x7f0000000640)={{}, {0x0, 0x3938700}}, &(0x7f0000000680)) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 42.797116347s ago: executing program 3 (id=993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') (async) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$TIOCL_PASTESEL(r5, 0x4b47, &(0x7f0000000000)) (async) fallocate(r3, 0x0, 0x0, 0x1000f4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x402, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x400, 0x5, 0x2, 0x3, 0x5}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.662513615s ago: executing program 3 (id=999): mkdir(&(0x7f0000000400)='./file0\x00', 0x16c) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) linkat(r1, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x400) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)="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", 0x24f}, {&(0x7f0000000440)='0', 0x1}], 0x2) 42.17245014s ago: executing program 3 (id=1004): mkdir(&(0x7f0000000400)='./file0\x00', 0x16c) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) linkat(r1, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x400) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x2020) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setregid(0x0, r3) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) recvmmsg$unix(r2, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000001c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)=""/25, 0x19}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000000480)=""/10, 0xa}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000009c0)=""/101, 0x65}, {&(0x7f0000000a40)=""/239, 0xef}, {&(0x7f0000000b40)=""/81, 0x51}], 0x3, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/54, 0x36}, {&(0x7f0000000dc0)=""/175, 0xaf}], 0x3, &(0x7f0000000ec0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xb8}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)=""/103, 0x67}, {&(0x7f0000006280)=""/4096, 0x1000}], 0x2, &(0x7f00000010c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}], 0x5, 0x10000, &(0x7f00000012c0)={0x77359400}) writev(r2, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}, {&(0x7f0000000080)="37c870ef0c000000e20ecbf61fc3", 0xe}], 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0xb6e96000) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)="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", 0x24f}, {&(0x7f0000000440)='0', 0x1}], 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000001300)={0x0, 0x0, r6}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) 42.120512126s ago: executing program 33 (id=1004): mkdir(&(0x7f0000000400)='./file0\x00', 0x16c) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) linkat(r1, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x400) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r2, &(0x7f0000002240)={0x2020}, 0x2020) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setregid(0x0, r3) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) recvmmsg$unix(r2, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000001c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)=""/25, 0x19}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000000480)=""/10, 0xa}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000009c0)=""/101, 0x65}, {&(0x7f0000000a40)=""/239, 0xef}, {&(0x7f0000000b40)=""/81, 0x51}], 0x3, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/54, 0x36}, {&(0x7f0000000dc0)=""/175, 0xaf}], 0x3, &(0x7f0000000ec0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xb8}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000001000)=""/103, 0x67}, {&(0x7f0000006280)=""/4096, 0x1000}], 0x2, &(0x7f00000010c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}], 0x5, 0x10000, &(0x7f00000012c0)={0x77359400}) writev(r2, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}, {&(0x7f0000000080)="37c870ef0c000000e20ecbf61fc3", 0xe}], 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0xb6e96000) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)="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", 0x24f}, {&(0x7f0000000440)='0', 0x1}], 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000001300)={0x0, 0x0, r6}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) 31.234215408s ago: executing program 5 (id=1200): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x30d00) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x81) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0xff, 0x4) (async) shutdown(r2, 0x1) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000140)={0x1, 0x2, 0x800, 0x9, 0x17, "aac21a3c488477206fd05aee57bd2fc3395266"}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x20, 0x2, 0x7, {{0xd, 0x4, 0x0, 0xc, 0x34, 0x67, 0x0, 0x80, 0x0, 0x0, @remote, @multicast2, {[@rr={0x7, 0xb, 0x9c, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x10, 0x2c, 0x0, 0x4, [0x4, 0x7, 0x2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', r3, 0x1, 0x1, 0x5000000, 0x9, {{0x2f, 0x4, 0x1, 0x3f, 0xbc, 0x64, 0x0, 0x3b, 0x2f, 0x0, @private=0xa010102, @private=0xa010100, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x50, 0x1, 0x5, [{@multicast2, 0x7}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xe66}, {@private=0xa010102, 0x7}, {@broadcast, 0xc}, {@multicast2, 0x9}, {@private=0xa010100, 0xe8}, {@multicast2, 0xfff}]}, @timestamp={0x44, 0x1c, 0xd1, 0x0, 0x6, [0x8e3, 0x3ff, 0xe5, 0x2, 0x3, 0x36f0000]}, @noop, @timestamp_addr={0x44, 0x14, 0x3d, 0x1, 0x5, [{@loopback, 0x1c}, {@remote, 0x4}]}, @timestamp_addr={0x44, 0x14, 0x24, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x21}, 0xde}, {@loopback, 0x1}]}, @end, @timestamp={0x44, 0x18, 0xd, 0x0, 0x5, [0x0, 0x1, 0x6, 0x6, 0x2]}]}}}}}) (async) read$hiddev(r2, &(0x7f0000000380)=""/204, 0xcc) (async) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0xcd, 0x608000) writev(r5, &(0x7f0000001940)=[{&(0x7f00000004c0)="f720b85b624a8bb984ce11e0904654b9c1cf47c02c433826e85ef4547e75e39332fa1d6dbe74c1a1b48c5d0b2494c711f5a3355165963658f27c2b3c76eb033381fabaae3f397a5f90513343c6473eabf4e2c8856e8db2ff494607c1b9be305bd50616e38bb5cd1ccbb8508c7134859c119c8033c11769a329c541963f5a738494e136", 0x83}, {&(0x7f0000000580)="1e1958758a89de11325dea600c104ddbb22858db2b5451e14d9a727fe5732ec93fbb28c532ad12cffd74441106f8ea68a4149d8df7ced424843aaef37ad05c0e9ae3f5ad71525b7c8e6add16ba17473a627adf1c487316ba31b17ab4879c8ec2a90b718ab31c2f98550467abd1c412190dec4a18c97b59c3408fb5329ec1dab17cee942945b3a2af8657a4908c5a33b72eb6602b3e8e048903c17e722e40ad4521cdc4de3d755be18f9e6f739e943bc6109798fb52c599479d9f96ab4caa73c85e8ab8a46e05192d8d468b2b455b128a7b95a2b956bcac56333c98e6504a988d356cb77825f7279bb3acdbdd12678540f21563a04a3c1eaf3de70392cc7e3aceef705304d5e56bc7195402fa9cf7573b5e165f457fa20550b3ae1a18d05c00b83a01e8c568338a0f2c9c581a02a061c9ff64cab7c46026e865130d10a5ad0a7af84e864df5bac0d6134f3059a952a1c6490b6aacaba248a15b3e5849f391abbacc6b92945bf0c4db47568c817d67499503a37e5f58db8ee512393d7dc6149b5ce44eb8d2f811f1b69a3e4c63b4cbeef83c85e1f2688cb46b54aa80f7cbd809637ab416bede69ac10a7511df94d7bb56b68c2993db5ef4280c2b98a1865a1fddab8600e8bc6b855400ff3f189c502688a71315ed931f50a56b084664486a8a59d44ff64b499e6020110f50ce0a77d8dd0b31ecaaccca46d0a2ee6a7f94bd1db47e1a6a1c0ac6ed0e5c0328b38e432157027e2ed7e404cd06efb9a4fbda8dc30d19aef67938845ea43fca890e39d3feab3b78447ef8621f2bb6b01a26ffd8e562fe6ca1c1a433595ab8577b08d4466c5741e2114c7e43414345ba8316758f6f0c0dfa281f53689b37bff469e6459406d5ee32446bee8add11276bad572f4ac3189502c69b00d6baa8c59564b4376b07d3f7082dbafa1cd3676f14832c73311d988dc31325244c30943d631c03a0f13126bdd59d15f31f524dec12105a595db3d5f76da4d4d5ae488988529655cdc78bb0bc60379d7071f7c96cfc425904a9fb4e479055ba38cd3a490ad5515f39eba5fd354a42ba2429e7006c28f673b2055c2af9e77fd08212886fda99e59458d8697ebde7aa2f48545b66e8456ddd8e257fb73fbdf865b835a795eb486c69418bb67ac673da9be4f359c1e80948fe12d35cc201f6efc6de7adbca66846dfb4d683ce4944496b675761e5d293880a7d0b7e35b4e57126eaac4ffc2e885ea2ce5eb0314ed63fe700973bda67291a5e6fc15af9a85fcbeaaff173bdfdaecfd4d712557531ed1ae42d11335310a06667f0f0802a758ef7cfd16961a349c521a2dc19d5d7239446ddddf58d6564812e7bb4ccbaceded770ee2c4ff6d16b344ea3830ddf714102f53aa528e9c99bd1c2a72b7178d59f597fd671e9f9d616d51b27d95b3898f0695af8c330413ff93a2d4ce0cba71dd9886b630a0cefae1758e088b5b6d5c02b7237b5b2f864a848b634b6bfe78b61504cec0569acdb86c56276dfa3da4be26ca559b8b7518eb02ae21bcb4d3cbd58abaccbf242a55236ad138c74375ebb067f3eea1bc91254b8eb8c0f3f2a85b1cab0f0e50917d52847a5041ec0efb021ef5d96d3f067367dbdf8c8d71b4baa8f82cc3e3ed27046827fd60fbafdfbaeac0eb02ca7bb70d0e42f29ff503ed16669855cfc0a352862a7dfd98850f4ab57b5f54897a3bfb3067e96fef2f788fad20a95b7c6153c1367a80864ab2093d5f43a19b1031e2ed7da2108482509c097303e68c16d6ba64711d27523f21c051ddceeb84621342e773e1f6fc85f07e35beb35c174219bad3c873a84152afb685bf3de13fb3359ca950030cd70395d851d91f3353706bf84109680fc2d721c909337a2962853c6c40d892871558987062a428e2f5c7200fd458bf51e5e7ff70e69079b91ad50d76e35e11659f93c7bc7948c216aa4f73cf23cf299516289e654cdb11d9da92b93d98f5d8b96ccfce2f6a346ab95ea3c1c2e74c1b0db727f8e6b3406123be90ae7fd21a6e3a0ff6a9e9b2b317bcc2e1f2915a21e8d8b9770df05155435b2c9a567718c894879726192ce00298d6adbbabd8d6b0303ac1e5c94c6e7ab04596cf6ad16d34f420f327e0990542feee2797dedcd204a971fb617fae1d3eda67055db5199b77b65e3158a590df69e0664473df10698d9e16935e901e4fc31c25855bbff79a2caec9e0643a5af3516c2bceb6b2286198cd19c02bedce192fc0235382c4065acf9601ccdef1947010c0c41f0a72937ae065f3f4671b1616263db7e98b66ac42e86caee598cccd8d91125751a18b3e27a248f2db1d9c4307d6a4c4ddcdcadeeeaa19ae2089640a53c59126dea9630fc866be351f942dc85d1ee29183a43f5d47f0272dabd8d4adba8f15fbde8b5fc2aa274dc90b38cded6f9e637fa0b183af327f6d77818a7af098ac71fe6a2afaf7f47b4d1ed7e9022817e2118ea01aeaa25c4e9c1fb75f677e071772dd197abc81e5c56ce181fec7c053f003d9f0f20395e9e057ac11e0755cb483c72026c60117afb5e5a3e6b667e0465ac934ffbeafca50c176fe05b2c72fcb706c7791f6af713e14bd3504a27d77ba46f3073c0099af9603a9419c20c7e7412d165c3a2a4d288777f6e830eeaf53624f0c5526324d5a075ce75279e4e540d4c972450a03463a74b680bdf1955f428ccb82520a973e249e2abf200670f5ee2c2719f84539c60bd846b9dc8542426d4dddeef3ac0b05a3e85afdc38da804907c8601e868a3b413a5f7521d15ab59cb4e344830c0dbf24310bb9cdd5cd2e5373621b51dbf2470b77e5c1483a02fefb7dbba765c81135883edcd24b9dea6187c6c829b702271edc1fe774c5347a0462abe683b317db7ea8eac43ff6ce83be88a736bacd6bbe3935db7d2c901131fd0c6b207def3ca8d3d19d0343d8cc9ffd347e2ef3166f0ab97868a80fc38d3cf0f25aa7bc5f3370cd81cb62235b05cf53b72caa9252a9f1aed7ba44f85a4b30bced5162b841bb9ff43d8a03dc62840d67f8ebd52a540c90542b6e795737aa11a033513e0ff07a0ca0ae067137061223bf042a3e8e74108ccbf9fcd5b347f4be44f0f1dfc4a6d8b094020db6e5886bb86e6c28e0e920dfe2e9e80944e5ef23aa8ce2ab6aa4deb63cf5ff6fc12a637b5d268d76c509b99d24c1a29f569be77faf925fd1ddae682eb79f36f61880a350d043a438d6cd154f5e42320faac02444dfc7e758b5f241f1461df25c21594f83c1c5e00a9d45409bcdd8a84b5ea1d0aa5a6294818d6eb5d884f92c5dd255a5a8b8e10796323f6392eb57531852d531575dc27fb2a047de181db5de3c52690b3984b4d064d2d58df7de38ebdd21303c7af24b59f62ce83161c92a0d76bfbeb979528687358ed5bbad1bb06e39e95d1acdeb8b6c5e98697a4ff68cf93785e83793d7849dea5705890fe504b3905144885039fb3aa89a6f02351a26c45a3769cd09003db803c24488497c831c798d25689656aea59019a53b8304b78a5ed7ba0c8e72fe992e428ff47feba09c4bd7cd0a7dd0524e592eeb2a6211070b844b489b4e8e0d7521437d32bcca185dbb62b649f775f7178116c608d500b980b7bf86f9ffc528ceb0b8d378cc2d875752d2432aa9385d79c34e21524e5bf10ab4042c769dd9aed5f69ddf49a7209071121e1a8fa8a7b45ec23e970875c874962feb9d731cb8e58948dc574a0636fad4c5b1179d863de660b7e785ec69758623b01d18ffc0397af38fb1fa54f09aff068aa350d0ea775ef1a8b37d116381ec4e727dc12abacb200a9b52afd885096ff5a24749767484cadf44a6b738f9dc66cf15b4ac4a58a4f127e53bec18f3e3f2e1095291b4fdc6ee8f1bbb04ff283eba0e1f55f0aa75fd4f9a7abb6db2ccd82f2503b50f651e2ea54fd83d3309011f99a70e83dedf2e3cd47c8de7a2fbb62e0a04e038933d59927fff54e6e955e350cd2614a0ea210266e21ff86a36a6eabfe8c2c59caeaaa38ba7d43854978ab5c22cf7197c35be88d0c5d33fcc08bf7710fd91604febac25303880b3a5050d014756868a93c16b5feb4bed359054e766b7fa8340f00fe253e39f3e3e3b1e4990232857f61f009b5f4b1df1fefd2721ba421ed18251eec25923cdfc81fd66d2d9eac75dd9e048f889cb7ef524e81710fcbad405a048af19887d4bd3abe230c7f53ae7ab480c5282fa28552eb11a33ae1732c844f146f1273ca4fde854ce6c4ee21ef069a1c80c0a07844d241df076b11ad9adf3f77d70be96006aad32e336bda959d267abeceda33ca3cb8fa7ddc743ee05d329f8530c2f1829767d16fce9d816ddf2653b4a059c3e964b82c2996f33d2676c47b33a088078b00b73399ea6baaba249469a7fa93c1ca125d617c7491775565f78cee686b28eda1f1f012af66ad07e1b82dca9ea3a3a33a55ac330d8c2d819a511e941dcb9e15702cc03fc9929e72038b143c7e90ea87cb150f712b3eb76187b7b29394aaad3bdc5e03f1f4f767cab4cd3d6afc88c9c08f9c49960470df3695cd97bf470f09f3e2a4134bbf08cd8705004f13ebbcbd16d0693af022c36fdef0ead5c60aad8bfe1880c1537079d249e5578610a45b160b6978d994e225de9e1257b0cf198f6816576f6d79b01d93307282070b9a72a89b60b05ffe1bbbbc6184e74aef4626227078210365e16c01f54d4e9dda49d64d30a505bb80215ddbb08befcb8cdff03622c26663dc69998728c758b9ca3e57d7ec74a862ea6507392dbc84cfcaae4c76bc1f1fd144ad14a370efd6dfbacc6b4ef6356ad06a426ad99db82fbba6fe744cdb933fa41ad86bc12a540b9b1d363df20c376fb3739a384e8cfe2fd4ef2718c9a4f50eaa48e9c69ada31094f85ff7d27b999104ad48dec6867a3dad22c15beebcd588ac6a9f6d495549f0e66d3d5fd0dceb2b60d288a25644d3f491f400210eae71ac44cece4cbd59264605cc5dfb0924dcd2870a3d58c1df4370d7ca4fcd9fd42eb2198bff21fc47b03efe5c55e922c2005a9adeefabfd94070dc9681fd230a7d589b6e830a9b1f5aec3978101765d8a7c36332b6a0d2ef2e898c62fcecbda09d1f2a4292551f7fcac7260c4c4d80687b0514357b477b4721f806c080d617b7ee9757d696564f9cc65437339e94d206b375198dbdb8dbf4f0a38f5c107dcdfde65e06caaf07d3d8b8c40be46bf0c25db183cf593b1e058237eecf3f4b954db8f2c36af99def44f2731167d7cf72f8e2ebf2667b1eea611bf0c1cde7b7e1186ac9ab8932fa4b3af45a1fc1a570cfb9522612f4bdd43614562fa5bda274af74127deb72f5c6cb18a777c843758dd0fc98a60c1a35682b9c3d6d5a2703e1707cec7e9bd12a65ab4d56c2b16468693db69a7cef24c79d30d1466a38abaf2cc468961ec428e56ce7b846ee50bfe0724eba49eae6938b81567a6a0045c20f72bda363f13894b6a320732cc4860fad075802c91a15f8bf24c823ad822287e515dba5a6cfea729df588eaabb9a3ff126b037eb3189ef755e25202b111bd9f2689c4c7528ed4887f7f29cad1324f3169a5f6bb0e92ec0996fbfce38454a88f88c45c26f52017f7abb2c4a52e5980a8997d937d3a3dab26556e951862bef7e122760bf9a4f1fbd3ab28239dd20bc7a178b413301e90348bf3756524c8ac89db6893e51c84f555b71f863ff74eba3b40cae8a2917059ed9ef6900f09a595979d329ca6aa918db4a6631f3eb6767e66a9acf36ea836858ee6b5a85213a50aad93907e182973e307a5debe71c635e5789f7f8529c22748d4c1417f925bf5762", 0x1000}, {&(0x7f0000001580)="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", 0xff}, {&(0x7f0000001680)="c4002cbca980c9839c3bdc9acede0ff2bdfad8ed49bac0c8aa966f57484085c1fce7d02341ee3d9960128c83a6bf2507bd234c9034be9928af6c75d213511ac4e1699d55ef54940fc407bec86bcdfc9d7e8d29f3f8ed0dae771b36f5a986cd1439ea7baa8ca5f837ecd7f6a6bb996692cb16e167c53640fa90ec0e36fba977bfb849c7cd242fbdde9c57b2572bc3cee4863eab8d", 0x94}, {&(0x7f0000001740)="e6f539c660cb5348eaa9181a28af8bb2ed56addb6f4c9b8a180a402763dfb27eedd92760c413293906b62d6105071b6d2ca1bbfd612e82fdd60993f6a1a45d20e47a074b82ff5589f3a7b8277af47f8eb62567ef9a51274de2a69a66e023746259bf2f79034e6e97ccc6fa55df74bb9fc1182212c5df3c6b089962da1b25a97163ddf6b5afc39848b90b98453e1f3ca6272f910009277f2a082954d53c7ec60f78e90aebc58b8841bd45ed9ea97b1bdbfc8606f66dca66ee3c396eb6b16ce97a5367267dbec7950096b3c88061fbfdc0ce7c5f255f739bbbcb274a850f335098dfad29f722f059aebbec", 0xea}, {&(0x7f0000001840)="f2d97f0ae5a70d930a3629f51a7fe24de5af85df9165bb5b6824a4aea5417d8333be1701c0caeb2153aa4d1fdc07398d1ab4ab41830298ff55b2d5ff99e5121121a06948d391d1ac81787684265b7237343bfc2a9e07c010f827d7b29221eb126b5f403ed0e86a027f74d7b4c54870c09035c1179e7e1a2bb8b9485e48700a5891d8073f318bb75d7ae4d3c3ad514644034d77c1b4f0b9bb8be2a2244bd5b04eea83f989304dceaa7a1cf0e1234adb4194f741519cb356e623083cc1264a40f34c8bfb775436ce1c0b8effe5", 0xcc}], 0x6) (async) ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) (async) r6 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) (async) writev(0xffffffffffffffff, &(0x7f0000002b00)=[{&(0x7f00000019c0)="c66a64ebb76e9ff95cb7b3f86ec6fe71e9f8f23aac9ee115616cdf399f048b8c012e775a7a21e425fb0a5fb7d4d2a17abf4ae74f2e272865c1233ccf357670406c8f1cf6c094a721bf860a58b2c63212eb971979a95498bb45a0157b4dd748629af935e1c8cc56f9382ecdee289667f1199881515febd4c60c5df03eafa2535645357796493556c75f80ccdf711f4b432218c579ed66c643d1539f6fd3ea0b0fc6e167914fca87b3eb8af00e564d607079197db152e73d88b8acb8", 0xbb}, {&(0x7f0000001a80)="ab0a6774907bcfcd00030f989a4ac4d0c122ad66b98b4da80d70eae25b8c2b6367aee4bba6ce391d8ba35ac6e00c93ddb1e98a617c6d0517e51ac294141881510aa499490d44f384e5e6909256d7cad407c2e3f6fb", 0x55}, {&(0x7f0000001b00)="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", 0x1000}], 0x3) (async) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r7, 0x5606, 0x8) (async) write$tun(r2, &(0x7f0000002b40)={@val={0x0, 0x9100}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @remote}}, 0x38) (async) r8 = openat(r0, &(0x7f0000002b80)='./file0\x00', 0x200, 0x44) writev(r8, &(0x7f0000003080)=[{&(0x7f0000002bc0)="67545bd3165396dfc2550795e6fa0efbe283f8e7cf6259996c9f2ce8dda507d53ede635e37118556fdd9dd41352785fe3447535d2a69d211479ef0bf43da20d9982f07f112b1b80bcc9ee0e39ffaee0c3ede1418cbd457a23c39f0da5ce92ddb5ee96fbf6cc93cc271be1c77ca75f739fa5846b70b8c2649f6b66c6fec", 0x7d}, {&(0x7f0000002c40)="6cb60b71f3453af63d64ee86cf7d8e0e8bc1f70d4478f164237eaae6e509539950cfe9a43ecda62507486f31ebeb05959dfc62d8ee4a4fb3c94ad54af033d91ff25d957462065ed5bb245bc6ddcc16d045ee8ba5a04c5b279ac9b4d71bf9bcaf87116443404072f0f1cd1605a54e10da4ccce11bdf9dc1a5db692477908d0afc687f", 0x82}, {&(0x7f0000002d00)="56a67897bc50e6fdc5c285fa1e39efd19f7f973ffe7faeedd2a2b77482745da68d30dbb0e76087b4007849d779e0fbc5be9f5a3fb2261dbb75e7fb1cf7c00b6e50256daa1582051bc398bff5eab89d5da49c8bfc360397a1e2f7ada7abf37cae9b6fe8d6da2ff810bf5b70795d6999105240ad91eb80dce022b7eaf1649854333235c55918eefde9ecb506a14f9f78cec1ef7b64f5e953d95352aa779ee08d95f425e9e0bba2f0167a909eec8f57e66cb2ae35776fd2e8ec76a616e1556a7033", 0xc0}, {&(0x7f0000002dc0)="8739d1684c50eaeb1ae9474975fc5643f48723767b3b8410b618b42f2fdaafbbb4223c3b5ce85b5827b40f559541c2856815c6cbf26931476083ab49e0f8af3cc61876d01dd452da6ccf40706c715db81877c4e5c5748f11f72ceea19239a4ed49dfa12361a23f7ba47ddaf1e11d08e8e88b04fd42a38092110b551fa8525e4785a0b84a", 0x84}, {&(0x7f0000002e80)="2ecc3f91a5fb7bab514661c75f01c440001351becef0f3845ee104cbe992afded9319f93c2df0834db8803c30c9e1794994fdcbca1aa95a83e876f2cb5046521eb3245c1c3be05447c6449d832d709c54d36a840b12a86cdbc1944d8884dc75f90888cb7ab62ed966123d196ffd94356ef885c4ec4afa97420f394e69c5e", 0x7e}, {&(0x7f0000002f00)="6e280c75fc59c6193af4a9be1599d256a1265b3a8fb0f394a8e20ef2f3094a10d2ae25f9a8213ed23a5e092244af82ac2710594d233b67caced747b1b7f8fece44c25b999330ac78879c636703f7f344380243a277cb4718dd733da1b1db44d40082d18fedee613fb6fdb7bd1d1d51c68d09c01b31540dfab5fe90aa4b537ecd5ff32734bc69f73ab1aa1748d89d30e7ae12e551fca2f3420d9648c424c44a3b1e", 0xa1}, {&(0x7f0000002fc0)="6e708bc35d60b3b9bc3467535ba5fd394f0fe3e5c3e98a770c17616c132fd882604aefe8f0ae8de72beb613ee3f2503014e373ee91e74ef4f56fc9bb38ee459e56c612caf21cdc7a6b4475063c7c086546d1d66c3c52caa6be34b4cf4df2f55e16f056050c7371c6bf16cea106077c3fa8311f1f3228f192aaca9f73a5419e2afc7f2b578a9235e84646b3c2aeb23c", 0x8f}], 0x7) accept4$rose(r8, 0x0, &(0x7f0000003100), 0x800) (async) r9 = add_key$keyring(&(0x7f00000031c0), &(0x7f0000003200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000003140), &(0x7f0000003180)={'syz', 0x0}, 0x0, 0x0, r9) (async) fcntl$getownex(r6, 0x10, &(0x7f0000003240)={0x0, 0x0}) sched_setscheduler(r10, 0x5, &(0x7f0000003280)=0xc) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) (async) pipe2(&(0x7f00000032c0)={0xffffffffffffffff}, 0x800) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003340), r8) sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f0000003440)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x58, r12, 0x800, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x800) 31.166901938s ago: executing program 5 (id=1202): add_key$keyring(&(0x7f0000002d40), &(0x7f0000002d80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000440)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) ptrace(0x10, r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mount$pvfs2(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2102020, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "ffb00afe4e70"}}}}}}}, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x440200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r7, 0x805c6103, &(0x7f0000000140)) ptrace$pokeuser(0x6, r2, 0x358, 0xfffffffffffffffe) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, &(0x7f0000000740)={0x2020}, 0x2020) rt_tgsigqueueinfo(r2, r2, 0x3b, &(0x7f0000000080)={0x21, 0x6, 0x3}) 30.321800935s ago: executing program 5 (id=1221): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r6 = epoll_create1(0x0) poll(&(0x7f0000000040), 0x0, 0x41) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 30.130833984s ago: executing program 5 (id=1226): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000500)='./file6\x00', 0xecf86c37d530495f) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) close_range(r0, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001200010a0000000013f8000000800000"], 0x14}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0xfffffffffffeffff, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000480)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000c6090a010400000000000000000a00000409998ba6a12b0cd599000000080005400000002b0900020073787a310000000008000a40fffffffc140000001100010000000000000000000100000a52909297429ff52a179ff8e9d5a3107275c07a9914c2d02984a185627adec8f14afc84f3690a69754b6b1063d2f51d3f"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r2, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800f0ff00000000000000060000000000002a86", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(r4, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x71) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 29.963022611s ago: executing program 5 (id=1231): add_key$keyring(&(0x7f0000002d40), &(0x7f0000002d80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000440)=0x19) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) ptrace(0x10, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mount$pvfs2(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x2102020, &(0x7f00000002c0)=ANY=[@ANYBLOB]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "ffb00afe4e70"}}}}}}}, 0x0) 29.114955514s ago: executing program 5 (id=1250): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x4, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r4, 0x5}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r8, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r10 = epoll_create1(0x0) poll(&(0x7f0000000040), 0x0, 0x41) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 29.038697897s ago: executing program 34 (id=1250): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x4, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40000000) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r4, 0x5}, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r8, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r10 = epoll_create1(0x0) poll(&(0x7f0000000040), 0x0, 0x41) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 11.015492205s ago: executing program 6 (id=1513): add_key$keyring(&(0x7f0000002d40), &(0x7f0000002d80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "ffb00afe4e70"}}}}}}}, 0x0) 10.944522219s ago: executing program 6 (id=1515): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000014"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r6 = epoll_create1(0x0) poll(&(0x7f0000000040), 0x0, 0x41) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 10.815514388s ago: executing program 6 (id=1516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000100)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='context', &(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000940)=0x6, 0x6}], 0x1, 0x0, 0x0, 0x1) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r4) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000a8e253499b23ebb39b00", @ANYRES16=r6, @ANYBLOB="95ab27bd7000fedbdf251f0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x945880e012d83e91, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 10.642191365s ago: executing program 6 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) fsetxattr(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='btwfs.\x00'], &(0x7f0000000340)='\x00', 0x1, 0x2) (async) fsetxattr(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='btwfs.\x00'], &(0x7f0000000340)='\x00', 0x1, 0x2) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xffeffff5, 0x0, 0x0, 0x3}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0xc, &(0x7f0000000000)=0x5402, 0x4) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0xc, &(0x7f0000000000)=0x5402, 0x4) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x19e109f, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000400), 0x55, 0x80100) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x55, 0x80100) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x5, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r7 = socket$kcm(0x10, 0x2, 0x10) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='ocfs2\x00', 0x200800, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000040000511d25a35400c00020001ffe420370000000c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="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", 0x407}], 0x2}, 0x10009004) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000005c0)=[{r5, 0x53853995d946c2cb}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000005c0)=[{r5, 0x53853995d946c2cb}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 10.426360948s ago: executing program 6 (id=1526): lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "1b84dd8100d870cb3bdef6646f43de8ae716de4b"}, 0x15, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000500000000000000000008000900010000001800018014000200776c616e3000000000000000000000000800070005000000"], 0x3c}}, 0x0) 10.058584002s ago: executing program 6 (id=1533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) pipe(&(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x0, 0x3938700}}, &(0x7f0000000680)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.877831433s ago: executing program 35 (id=1533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) pipe(&(0x7f0000000580)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x0, 0x3938700}}, &(0x7f0000000680)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.556112923s ago: executing program 0 (id=1655): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES16=r0, @ANYRES32=0x41424344, @ANYBLOB='`'], 0x0) 1.501318091s ago: executing program 0 (id=1657): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r4, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0xfffffffe, 0x0, 0x41c1}, 0x4040800) r6 = epoll_create1(0x0) poll(&(0x7f0000000040), 0x0, 0x41) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) 1.439683227s ago: executing program 1 (id=1660): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000e9ffff7b00f0ff7b00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca5671d30c20000000000000000000000900000000000000000000000900000000000000000000000902000086fa000000"], 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010004000000000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000c6aa7612b9f8c0dc62b00000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x72b4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000440)={r12, @in6={{0xa, 0x0, 0x6, @empty}}, 0xfffd, 0x80}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000005c0)={r12, 0x98, "ee21b44e62645c3c4c56c683ef6289cae7b744c0ca32c40b693c18f5dc292e08fd94cf231351365352e5820c28eddecee567ea3694b2fe349292aeb990362fa30620a292d3a9f7890343f46f84ac3f030b3e9fcfcf11cb96306c70e9b2dbc7f8fc2147c89f5b8f6fc834ae2b38f5574fd28394c0d29668a1853645c2c94fa8659d302f1e97f1278d6385c3594e0ede1b92953e7721173a5b"}, &(0x7f0000000100)=0xa0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) 1.370891065s ago: executing program 0 (id=1665): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) socket$kcm(0x2, 0xa, 0x2) (async) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000a2140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x13}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x80) keyctl$dh_compute(0x15, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) keyctl$dh_compute(0x15, &(0x7f00000000c0), 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) exit(0x80000000) (async) exit(0x80000000) timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = socket(0x10, 0x3, 0x6) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r10, 0x10c, 0x1, &(0x7f0000000180)=0x64, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r3) (async) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r3) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x54, r11, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008080}, 0x804) (async) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x54, r11, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008080}, 0x804) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00158018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 1.251607695s ago: executing program 0 (id=1667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001321ff00"], 0x4b) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0x3c, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x48}}, 0x14}}, 0x4048841) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r7, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r8, r8], 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000140)={r6, r8, 0x0, 0x7, 0x2}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f0000000080)="6766f4440f22c1c46159e90a6664f2af450f017d6767660f38816000c402cd3bea0f5396fe82fd59c42263f66d010f00db", 0x31}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.139131716s ago: executing program 1 (id=1668): r0 = socket(0x11, 0xa, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8010101}, 0x40858) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000005c0)={0x5, {0x6fb3, 0x2, 0xefa, 0x9, 0x140, 0x1}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x5eac, 0xc7, 0x3, 0x7}, 0x32, [0x1b1, 0x7, 0x7f, 0x7, 0x3, 0x1, 0xcc72, 0x4, 0xfffffff8, 0x6, 0x800, 0x3, 0x0, 0xffffff0c, 0x0, 0xfffffffa, 0x180, 0x80000001, 0x6, 0x40, 0xfffffff7, 0x9, 0x10001, 0x200, 0x10, 0x4, 0x5, 0x7fffffff, 0xfff, 0x0, 0x369c0d09, 0x5, 0x0, 0x0, 0x8000, 0x6, 0x6, 0x4, 0x1ff, 0x1000, 0x7ff, 0x1, 0x80, 0x4, 0x0, 0x7, 0x59, 0x8001, 0x3ff, 0x9, 0x5, 0x7, 0x4, 0xa, 0x0, 0x80000000, 0x0, 0xffff, 0xfffffffe, 0x12e, 0x9, 0xc6c, 0x3b, 0x1], [0xfffff71a, 0x2, 0x1b, 0x2, 0x3, 0x4, 0x4, 0x1, 0x8, 0x2, 0xffff, 0x7, 0x4, 0xc30c, 0xb0f, 0x9, 0x3, 0x4, 0x8, 0x2, 0xb1, 0x1, 0x3, 0xff, 0x9, 0xc, 0x6, 0x1, 0xa050, 0x10, 0x2, 0x7ff, 0x0, 0x2e5e, 0xfff, 0x5, 0x1ff, 0x1, 0x7ff, 0x6, 0x1, 0x5, 0x2, 0x0, 0x0, 0x9, 0x3, 0x8a, 0xfd, 0x4, 0x7fff, 0xea, 0x5, 0xac61, 0x9, 0xfffffffc, 0xffffffff, 0x5, 0x448, 0x6, 0x1c, 0x4b91d791, 0x96d, 0x34ac], [0x5, 0xb, 0x6, 0x100, 0xffffffbe, 0x5, 0x0, 0xe, 0xf80, 0xa, 0x9, 0x80000000, 0xbe3, 0xd8800000, 0x0, 0xfffffffe, 0xd2, 0x610f, 0x1, 0x0, 0xeb3e, 0x7, 0x7, 0xffff, 0x3, 0x1, 0xe4e, 0x5, 0x200, 0x0, 0x800, 0x5, 0x8, 0xffffffff, 0x6a0b, 0x1, 0x8830, 0x7, 0x9, 0x4, 0xfffffffc, 0x8, 0x6, 0x1, 0x588, 0x101, 0xbf, 0x0, 0x10001, 0x9, 0xb9, 0x5, 0xf, 0x40, 0x64c, 0x7, 0x789, 0x4, 0x8, 0x80000000, 0x4, 0x7, 0x8, 0x7], [0x80, 0x4, 0x6, 0x0, 0x0, 0x57d5159f, 0x3ce5, 0xaaf1, 0x7, 0x3ff, 0x4, 0x3, 0x0, 0xfffffffc, 0x6, 0x8, 0x800, 0x1, 0x7, 0x3, 0x3, 0x40, 0x9, 0x4, 0x5, 0xebf, 0x7, 0x1, 0x778, 0xfff, 0x22, 0x2, 0x3ff, 0xa64, 0x10000000, 0x0, 0x7, 0x10000, 0x8, 0xb9d8, 0x350, 0x80000001, 0x6, 0x3, 0x1, 0x1, 0xc79, 0x5, 0xfffffffc, 0x2, 0xe, 0xc, 0x3, 0x7, 0xfffffff8, 0x7fff, 0x65f, 0xfff, 0x1, 0x7, 0x9, 0x0, 0x101, 0x7000]}, 0x45c) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 1.138594466s ago: executing program 4 (id=1669): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000bdd000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r0, 0x8000000) r2 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x29ab, &(0x7f0000000380)={0x0, 0x5888, 0x10000, 0x1, 0x1c1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r5, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x1, {0x0, r7}}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 1.051241731s ago: executing program 4 (id=1670): mkdir(&(0x7f0000000400)='./file0\x00', 0x16c) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) linkat(r1, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000500)='./file0\x00', 0x400) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000600)="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", 0x24f}, {&(0x7f0000000440)='0', 0x1}], 0x2) (fail_nth: 69) 933.916095ms ago: executing program 4 (id=1671): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e22, @rand_addr=0x64010102}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 871.272797ms ago: executing program 4 (id=1672): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "ffb00afe4e70"}}}}}}}, 0x0) 870.635297ms ago: executing program 4 (id=1673): mkdir(&(0x7f0000000400)='./file6\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x0, 0x0, @SEQ_NOTEON}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') write$selinux_attr(r4, &(0x7f00000000c0)='system_u:object_r:dhcpc_exec_t:s0\x00', 0x22) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='net/netstat\x00') r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'ip6erspan0\x00', {0x2}, 0x8}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'macsec0\x00', {0x7}, 0x6}) write$sequencer(r1, &(0x7f0000000300)=[@e={0xff, 0x3, 0x0, 0x0, @SEQ_CONTROLLER=0xfe, 0x9, 0x8, 0x84}, @v={0x93, 0xe, 0x80, 0x19, @MIDI_NOTEON=@special, 0x5, 0x6}, @generic={0x6}, @n={0x3, 0x81, @SEQ_NOTEON=@note=0x60, 0x5}], 0x15) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000200)) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x101100) chdir(&(0x7f0000000140)='./file6\x00') creat(&(0x7f0000000500)='./file6\x00', 0xecf86c37d530495f) 800.935119ms ago: executing program 1 (id=1674): syz_emit_vhci(&(0x7f00000027c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x1000405, 0xfffffffe, 0xfe, 0xfffffffc, 0x0, 0x80000}}) 599.912814ms ago: executing program 1 (id=1675): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) writev(r0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)="b845d9", 0x3}], 0x2) chdir(&(0x7f00000000c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x1006, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r1], 0x50) creat(&(0x7f0000000000)='./file6/file0\x00', 0x8c) 599.670259ms ago: executing program 0 (id=1676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x1) 541.075379ms ago: executing program 7 (id=1677): socket(0x10, 0x80002, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r4, &(0x7f00000003c0)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x200, 0x70bd2a, 0xfff7ffff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x3, 0x3, {@ip4=@broadcast}}}]}, 0x38}}, 0x4c8c0) 540.831536ms ago: executing program 7 (id=1678): syz_emit_ethernet(0x4a, &(0x7f0000000d80)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0x8, [@multicast2, @multicast2, @empty]}, @timestamp={0x44, 0x4, 0x37, 0x0, 0x4}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0xffe7) umount2(&(0x7f0000000000)='./file0\x00', 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) setsockopt$inet6_int(r5, 0x29, 0xd1, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES16=r4, @ANYRES32=0x41424344, @ANYBLOB='`'], 0x0) 508.729409ms ago: executing program 1 (id=1679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000080)=0x5, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000080)=0x5, 0x4) (async) 440.932222ms ago: executing program 7 (id=1680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x8}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="24c0e326e3594a6937973d27ee0e00000021fe181835491762ede75e179043eb60fda23d4c7cc660ae93fb9a1c68", @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000050037000100000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x8}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="24c0e326e3594a6937973d27ee0e00000021fe181835491762ede75e179043eb60fda23d4c7cc660ae93fb9a1c68", @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000050037000100000008000300", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x80) (async) 440.577397ms ago: executing program 7 (id=1681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d4980fc7682bc4c2999aaddd8bceb38fe8eca2a80100000037c4e14ddee2660f38810b", 0x38}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 310.851282ms ago: executing program 0 (id=1682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) unshare(0x22020600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) r4 = openat$cgroup_ro(r3, &(0x7f0000001140)='cgroup.stat\x00', 0x5000000, 0x0) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) r8 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0xb, &(0x7f0000001180)=""/176, &(0x7f0000001100)=0xb0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x1, &(0x7f00000003c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x2004000, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 230.591672ms ago: executing program 7 (id=1683): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000500)='./file6\x00', 0xecf86c37d530495f) (fail_nth: 10) 230.002994ms ago: executing program 1 (id=1684): syz_emit_ethernet(0x126c, &(0x7f0000000000)={@local, @local, @void, {@mpls_mc={0x8848, {[{0x1, 0x0, 0x1}, {0x4}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x7}, {0x9}, {0x2}], @ipv4=@gre={{0x7, 0x4, 0x1, 0x8, 0x1242, 0x64, 0x0, 0x8, 0x2f, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x7, 0x8d, [@multicast1]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xef, 0x1, [0x29, 0xfff8], "165831df29630d7bca0f0ff7e7cbe565122ae1dbb72eaeca70e95889cbfc86dfca128e317dbbced7684dce52e31e293fc67a89010ba35b880da62e7c80ac297a23044b04d221486f4e764f0efba8d4c119b3c218ed643c8a61bd68e07fb43fbea221a66a4b1e270eec111a161cc0f2b8a95efd0fa3e5d2240c32c6ae1168aef93e661c24dffc326f4dbdf44996970bb19faef7d0472c0116e14963332babede214812847d9b6f224699caa973cd8ffc062c9bbea2a59962b6216fd73ad06e314f6bbcca4c7aa49e9ddecdcc52c7d9f78492be3ff223a4e389b54fb9c732d2efd81cda216dd667729702eac61ab5395"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "1d880df5a3415b45c646f996d9de4adeb1d86e3a049efca96ecaffe74d6c2abd3e3952b8d09e342e6af213f990d63bc7614cb2730707180ea7a9a643479a4bb94835d17543e43f8b4018f655c8a36e387e9df700a65eadf036a81007d915f2cc24407cc65ec477a4d7e5530360bc93f1ee6e37bd458ec2a4d4341f0e74c6320fbf6cfd6767289c00c23782da337fd763c0bff7d584daf220aa14db30e66363a3e6eda1c46f6d7e694dc761d2aa7ea4eed198ea6a"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x2, 0x0, 0x0, 0x2, 0x5, 0x9}, 0x1, {0xc598fad}}}, {0x8, 0x22eb, 0x1, {{0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x2, {0x10001, 0x1, 0x3, 0x6, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "e6c9041c511de59cd86729198dc4300b4cfc4a377297973e9dc07ada95f100bba4c2a7a7f5ba2fce6cc44904028b1fee9f0feef2501da49c126d52"}}}}}}}, &(0x7f0000001280)={0x0, 0x4, [0xc2c, 0x831, 0x17, 0xf52]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000012c0)={0x6, 0xffffffffffffffff, 0x2}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000001300)={@rand_addr=0x64010100, @loopback, 0x0, "a8b1c12097e6426e378bf1ea1d1c9043a9a1be68e5499c55339a473c1ebe919e", 0x5, 0xffff, 0x401, 0x6}, 0x3c) (async, rerun: 64) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000001340)) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000013c0)={0xffffffffffffffff}, 0x0, 0x7f1b14aa6a9fcdf0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000001440)={0x15, 0x110, 0xfa00, {r1, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x400, @mcast2, 0x7}, @in6={0xa, 0x4e22, 0xc, @empty, 0xb}}}, 0x118) (async) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001580), 0x4041, 0x0) fremovexattr(r2, &(0x7f00000015c0)=@known='system.posix_acl_default\x00') (async) syz_genetlink_get_family_id$smc(&(0x7f0000001600), r0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f0000001680)=@deltaction={0x17c, 0x31, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1276}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001880)=""/198, &(0x7f0000001980)=0xc6) (async) syz_emit_vhci(&(0x7f00000019c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LOCAL_NAME={{0x80}, 0x8}}}, 0x7) (async, rerun: 64) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000001a00)={'ah\x00'}, &(0x7f0000001a40)=0x1e) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_vhci(&(0x7f0000001a80)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000001ac0)='net/mcfilter6\x00') (async, rerun: 64) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000001b40)={&(0x7f0000001b00)=""/30, 0x1e, 0x3, 0x9}) (async, rerun: 32) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001b80)=0x221000, 0x4) (rerun: 32) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000001bc0)={0x0, 0x3}) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)={0x124, 0x14, 0x200, 0x70bd25, 0x25dfdbfb, {0x21, 0xbb}, [@INET_DIAG_REQ_BYTECODE={0x78, 0x1, "276231ff9b7fba80d1b67df4b0971dd026830c1687fde1faea8c8b786d0827246188e09d3bda834d3ef9daad74903c2c67472401ef5fd769c4363f28ab81ac113fc3ed8f211450ce41f522853a908eabf2f5b8c3cd6d47f9e2bfc6e4268ee10ffd42603e37ad681d4ed5c82a5581369fd4cc8f43"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "9ab915b7faa79f0ecebef7d10b20"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "520b9491df0ab384f3c8e44ebc6ffd82789fe5d981967da7e3c1c5d6cbc6149b9bc9802ee4beee83b5811992b2ae80e1e06819059465fc51c8f1a929ea39818ed6545717e2df9aa7a038a8f4a70ef7bf46b508e80d3aaa4c3c216f5e2a89ff1a68ec647d1ca1299ab9fc7ebc81be0175b6dd14fde74e582d71f57cdbf8ed5cb3"}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001e00), 0x10) fcntl$setownex(r0, 0xf, &(0x7f0000001e40)={0x1}) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000001e80)={0x9, [0xb4d, 0x13ed, 0x4, 0x5, 0x0, 0x7, 0x587, 0xbeda, 0x1, 0x3, 0x7, 0xf15a, 0x6, 0x0, 0x9, 0x7109, 0x1, 0x9, 0x2, 0x7, 0x4, 0x5, 0xf695, 0x4, 0x8001, 0x1, 0xe44, 0x5, 0x8001, 0x1, 0x7de9, 0x7, 0x3, 0x5, 0xb4, 0x5, 0xfff8, 0x0, 0x235c, 0xc, 0x7, 0x2, 0x100, 0x6, 0x1, 0x3, 0xfffe, 0x84], 0xa}) (async, rerun: 64) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001f00), 0x400000, 0x0) (rerun: 64) ioctl$PTP_ENABLE_PPS(r6, 0x40043d04, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000002040)={&(0x7f0000001f40), 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x50, 0x1405, 0x400, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x804) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x6, &(0x7f0000002080)=""/228) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000021c0)={0x4, "08897a24e25887155c4097ca6adcdd10a86197c7b6c53d019d7c9ed441340a68", 0x0, 0x0, 0x6, 0x2, 0x5}) 171.321768ms ago: executing program 7 (id=1685): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1686): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = syz_io_uring_setup(0x5a08, &(0x7f0000000600)={0x0, 0x800c110, 0x100, 0x0, 0x3e7}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x37, 0x0, 0x0, 0x8000004}]}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x28, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): p_out_of_memory+0x118/0x130 [ 141.534073][T10906] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 141.534092][T10906] ? do_raw_spin_unlock+0x172/0x230 [ 141.534107][T10906] try_charge_memcg+0x72b/0xd50 [ 141.534122][T10906] ? __pfx_try_charge_memcg+0x10/0x10 [ 141.534134][T10906] ? find_held_lock+0x1/0x80 [ 141.534148][T10906] ? rcu_read_unlock+0x17/0x60 [ 141.534164][T10906] charge_memcg+0x8a/0x230 [ 141.534176][T10906] __mem_cgroup_charge+0x2b/0x1e0 [ 141.534191][T10906] filemap_add_folio+0x88/0x220 [ 141.534203][T10906] ? __pfx_filemap_add_folio+0x10/0x10 [ 141.534220][T10906] __filemap_get_folio+0x510/0xc30 [ 141.534236][T10906] __getblk_slow+0x13e/0x560 [ 141.534258][T10906] bdev_getblk+0xd4/0xe0 [ 141.534274][T10906] __read_extent_tree_block+0x136/0x640 [ 141.534295][T10906] ext4_find_extent+0x4a2/0xa70 [ 141.534314][T10906] ext4_ext_map_blocks+0x290/0x5fe0 [ 141.534337][T10906] ? shrink_slab+0x54d/0x12b0 [ 141.534354][T10906] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 141.534397][T10906] ? rcu_read_unlock+0x17/0x60 [ 141.534416][T10906] ? mem_cgroup_iter+0x382/0x710 [ 141.534428][T10906] ? __lock_acquire+0xb97/0x1ce0 [ 141.534455][T10906] ext4_map_query_blocks+0x114/0x8a0 [ 141.534468][T10906] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 141.534480][T10906] ? __pfx_down_read+0x10/0x10 [ 141.534496][T10906] ? ext4_es_lookup_extent+0xc7/0xc50 [ 141.534519][T10906] ext4_map_blocks+0x3c5/0x1400 [ 141.534631][T10906] ? find_held_lock+0x2b/0x80 [ 141.534658][T10906] ? __pfx_ext4_map_blocks+0x10/0x10 [ 141.534679][T10906] ? xa_load+0x153/0x2c0 [ 141.534698][T10906] ? __pfx_xa_load+0x10/0x10 [ 141.534719][T10906] ? __add_to_free_list+0x2c0/0x5b0 [ 141.534745][T10906] ext4_mpage_readpages+0xdf2/0x19d0 [ 141.534781][T10906] ? __pfx_ext4_mpage_readpages+0x10/0x10 [ 141.534811][T10906] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 141.534827][T10906] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.534843][T10906] ? find_held_lock+0x2b/0x80 [ 141.534865][T10906] ext4_readahead+0x102/0x140 [ 141.534882][T10906] ? __pfx_ext4_readahead+0x10/0x10 [ 141.534897][T10906] read_pages+0x1c4/0xc70 [ 141.534912][T10906] ? _raw_spin_unlock+0x28/0x50 [ 141.534926][T10906] ? __free_frozen_pages+0x8ec/0x10f0 [ 141.534951][T10906] ? __pfx_read_pages+0x10/0x10 [ 141.534978][T10906] page_cache_ra_unbounded+0x421/0x7d0 [ 141.535003][T10906] page_cache_ra_order+0xa41/0xd70 [ 141.535020][T10906] ? kiocb_write_and_wait+0x180/0x1f0 [ 141.535048][T10906] filemap_fault+0x152e/0x2930 [ 141.535076][T10906] ? __pfx_filemap_fault+0x10/0x10 [ 141.535101][T10906] ? __pfx_filemap_map_pages+0x10/0x10 [ 141.535121][T10906] ? pte_alloc_one+0x2b6/0x3a0 [ 141.535146][T10906] ? __pfx_filemap_map_pages+0x10/0x10 [ 141.535162][T10906] __do_fault+0x10d/0x490 [ 141.535183][T10906] ? __pfx_filemap_map_pages+0x10/0x10 [ 141.535199][T10906] do_pte_missing+0x1a6/0x3ba0 [ 141.535225][T10906] ? find_held_lock+0x2b/0x80 [ 141.535248][T10906] ? __lock_acquire+0x62e/0x1ce0 [ 141.535276][T10906] __handle_mm_fault+0x152a/0x2a50 [ 141.535311][T10906] ? __pfx___handle_mm_fault+0x10/0x10 [ 141.535337][T10906] ? lock_vma_under_rcu+0x1eb/0x530 [ 141.535370][T10906] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 141.535402][T10906] handle_mm_fault+0x589/0xd10 [ 141.535426][T10906] ? __bpf_trace_exceptions+0x1/0x40 [ 141.535458][T10906] do_user_addr_fault+0x60c/0x1370 [ 141.535471][T10906] ? rcu_is_watching+0x12/0xc0 [ 141.535488][T10906] exc_page_fault+0x5c/0xb0 [ 141.535500][T10906] asm_exc_page_fault+0x26/0x30 [ 141.535512][T10906] RIP: 0033:0x7f028146ecb7 [ 141.535525][T10906] Code: 49 89 ee 41 83 e6 03 0f 85 0e 02 00 00 48 89 df be 04 00 00 00 e8 d9 7d fe ff 48 8b 43 38 83 43 28 04 48 8d 50 fc 48 89 53 38 <44> 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 141.535536][T10906] RSP: 002b:00007ffe3be33210 EFLAGS: 00010202 [ 141.535546][T10906] RAX: 0000001b31d24000 RBX: 00007f02822e5720 RCX: 0000001b31924218 [ 141.535558][T10906] RDX: 0000001b31d23ffc RSI: 00000000003ffde8 RDI: 00007f02822e5700 [ 141.535565][T10906] RBP: 0000000000000000 R08: 00007f02817b6038 R09: 00007f02817a2000 [ 141.535572][T10906] R10: 00007f02822e5700 R11: 0000000000000000 R12: 0000000000000000 [ 141.535579][T10906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000e58 [ 141.535593][T10906] [ 141.535599][T10906] memory: usage 307200kB, limit 307200kB, failcnt 8272 [ 141.713524][T10906] memory+swap: usage 340704kB, limit 9007199254740988kB, failcnt 0 [ 141.713868][ T63] Bluetooth: hci1: command tx timeout [ 141.716314][T10906] kmem: usage 10652kB, limit 9007199254740988kB, failcnt 0 [ 141.716399][T10906] Memory cgroup stats for /syz0: [ 141.723386][T10906] cache 302796800 [ 141.727453][T10906] rss 843776 [ 141.728901][T10906] rss_huge 0 [ 141.729972][T10906] shmem 302546944 [ 141.731217][T10906] mapped_file 0 [ 141.732869][T10906] dirty 0 [ 141.733818][T10906] writeback 0 [ 141.734896][T10906] workingset_refault_anon 4 [ 141.736365][T10906] workingset_refault_file 4342 [ 141.738229][T10906] swap 34308096 [ 141.760101][T10906] swapcached 0 [ 141.766994][T10906] pgpgin 147701 [ 141.768321][T10906] pgpgout 73570 [ 141.769704][T10906] pgfault 74084 [ 141.770948][T10906] pgmajfault 177 [ 141.778509][T10906] inactive_anon 161058816 [ 141.780318][T10906] active_anon 142331904 [ 141.781598][T10906] inactive_file 16384 [ 141.787368][T10906] active_file 233472 [ 141.789545][T10906] unevictable 0 [ 141.790894][T10906] hierarchical_memory_limit 314572800 [ 141.795247][T10906] hierarchical_memsw_limit 9223372036854771712 [ 141.802580][T10906] total_cache 302796800 [ 141.804319][T10906] total_rss 843776 [ 141.805656][T10906] total_rss_huge 0 [ 141.807102][T10906] total_shmem 302546944 [ 141.808504][T10906] total_mapped_file 0 [ 141.809986][T10906] total_dirty 0 [ 141.814495][T10906] total_writeback 0 [ 141.815777][T10906] total_workingset_refault_anon 4 [ 141.817530][T10906] total_workingset_refault_file 4342 [ 141.819408][T10906] total_swap 34308096 [ 141.820816][T10906] total_swapcached 0 [ 141.823251][T10906] total_pgpgin 147701 [ 141.826494][T10906] total_pgpgout 73570 [ 141.830438][T10906] total_pgfault 74084 [ 141.831690][T10906] total_pgmajfault 177 [ 141.833207][T10906] total_inactive_anon 161058816 [ 141.834784][T10906] total_active_anon 142331904 [ 141.836343][T10906] total_inactive_file 16384 [ 141.838006][T10906] total_active_file 233472 [ 141.839723][T10906] total_unevictable 0 [ 141.841270][T10906] anon_cost 0 [ 141.842785][T10906] file_cost 0 [ 141.843898][T10906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1555,pid=10906,uid=0 [ 141.850273][T10906] Memory cgroup out of memory: Killed process 10906 (syz.0.1555) total-vm:101828kB, anon-rss:732kB, file-rss:21028kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 141.901400][T10841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.926824][T10927] syz.1.1561 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 141.930131][T10927] CPU: 1 UID: 0 PID: 10927 Comm: syz.1.1561 Not tainted syzkaller #0 PREEMPT(full) [ 141.930147][T10927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.930154][T10927] Call Trace: [ 141.930158][T10927] [ 141.930162][T10927] dump_stack_lvl+0x16c/0x1f0 [ 141.930178][T10927] dump_header+0x101/0x930 [ 141.930193][T10927] oom_kill_process+0x272/0xa40 [ 141.930207][T10927] out_of_memory+0x350/0x1700 [ 141.930222][T10927] ? __pfx_out_of_memory+0x10/0x10 [ 141.930238][T10927] mem_cgroup_out_of_memory+0x118/0x130 [ 141.930254][T10927] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 141.930273][T10927] ? do_raw_spin_unlock+0x172/0x230 [ 141.930288][T10927] try_charge_memcg+0x72b/0xd50 [ 141.930303][T10927] ? __pfx_try_charge_memcg+0x10/0x10 [ 141.930315][T10927] ? find_held_lock+0x1/0x80 [ 141.930329][T10927] ? rcu_read_unlock+0x17/0x60 [ 141.930346][T10927] charge_memcg+0x8a/0x230 [ 141.930358][T10927] __mem_cgroup_charge+0x2b/0x1e0 [ 141.930396][T10927] shmem_alloc_and_add_folio+0x514/0xc20 [ 141.930421][T10927] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 141.930441][T10927] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 141.930455][T10927] shmem_get_folio_gfp+0x67f/0x1600 [ 141.930470][T10927] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 141.930485][T10927] shmem_write_begin+0x160/0x300 [ 141.930498][T10927] ? __pfx_shmem_write_begin+0x10/0x10 [ 141.930508][T10927] ? timestamp_truncate+0x21e/0x2d0 [ 141.930523][T10927] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 141.930542][T10927] generic_perform_write+0x3c2/0x900 [ 141.930565][T10927] ? __pfx_generic_perform_write+0x10/0x10 [ 141.930583][T10927] ? inode_needs_update_time.part.0+0x191/0x270 [ 141.930605][T10927] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 141.930618][T10927] shmem_file_write_iter+0x10e/0x140 [ 141.930633][T10927] __kernel_write_iter+0x317/0xb10 [ 141.930658][T10927] ? __pfx___kernel_write_iter+0x10/0x10 [ 141.930671][T10927] ? __up_read+0x1f8/0x750 [ 141.930684][T10927] ? dump_user_range+0x756/0xb70 [ 141.930699][T10927] dump_user_range+0x413/0xb70 [ 141.930714][T10927] ? __pfx_dump_user_range+0x10/0x10 [ 141.930727][T10927] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 141.930742][T10927] ? __pfx_writenote+0x10/0x10 [ 141.930759][T10927] elf_core_dump+0x2929/0x3b60 [ 141.930780][T10927] ? __pfx_elf_core_dump+0x10/0x10 [ 141.930792][T10927] ? kasan_save_stack+0x42/0x60 [ 141.930803][T10927] ? kasan_save_stack+0x33/0x60 [ 141.930812][T10927] ? kasan_save_track+0x14/0x30 [ 141.930822][T10927] ? __kasan_kmalloc+0xaa/0xb0 [ 141.930831][T10927] ? vfs_coredump+0x1dca/0x5670 [ 141.930842][T10927] ? get_signal+0x22e3/0x26d0 [ 141.930855][T10927] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 141.930872][T10927] ? 0xffffffffff600000 [ 141.930906][T10927] ? vfs_coredump+0x2b97/0x5670 [ 141.930916][T10927] vfs_coredump+0x2b97/0x5670 [ 141.930933][T10927] ? __pfx_vfs_coredump+0x10/0x10 [ 141.930945][T10927] ? __lock_acquire+0x62e/0x1ce0 [ 141.930965][T10927] ? __lock_acquire+0x62e/0x1ce0 [ 141.930984][T10927] ? lock_acquire+0x179/0x350 [ 141.931007][T10927] ? is_bpf_text_address+0x8a/0x1a0 [ 141.931020][T10927] ? bpf_ksym_find+0x127/0x1c0 [ 141.931037][T10927] ? __kernel_text_address+0xd/0x40 [ 141.931050][T10927] ? unwind_get_return_address+0x59/0xa0 [ 141.931063][T10927] ? arch_stack_walk+0xa6/0x100 [ 141.931082][T10927] ? stack_trace_save+0x8e/0xc0 [ 141.931097][T10927] ? __pfx_stack_trace_save+0x10/0x10 [ 141.931112][T10927] ? stack_depot_save_flags+0x29/0x9c0 [ 141.931125][T10927] ? __lock_acquire+0xb97/0x1ce0 [ 141.931167][T10927] ? proc_coredump_connector+0x2d1/0x4f0 [ 141.931184][T10927] ? __pfx_proc_coredump_connector+0x10/0x10 [ 141.931204][T10927] ? rcu_is_watching+0x12/0xc0 [ 141.931221][T10927] get_signal+0x22e3/0x26d0 [ 141.931239][T10927] ? force_sig_fault+0xc4/0x100 [ 141.931253][T10927] ? __pfx_get_signal+0x10/0x10 [ 141.931271][T10927] arch_do_signal_or_restart+0x8f/0x7d0 [ 141.931285][T10927] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 141.931299][T10927] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 141.931322][T10927] irqentry_exit_to_user_mode+0x12a/0x270 [ 141.931337][T10927] asm_exc_page_fault+0x26/0x30 [ 141.931348][T10927] RIP: 0033:0x7f9fd9f8ebf1 [ 141.931357][T10927] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 141.931368][T10927] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 141.931377][T10927] RAX: 0000000000000000 RBX: 00007f9fda1b5fa0 RCX: 00007f9fd9f8ebe9 [ 141.931384][T10927] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 141.931390][T10927] RBP: 00007f9fda011e19 R08: 0000000000000000 R09: 0000000000000000 [ 141.931396][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.931403][T10927] R13: 00007f9fda1b6038 R14: 00007f9fda1b5fa0 R15: 00007fff60a9c3f8 [ 141.931418][T10927] [ 141.989220][T10931] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 141.993271][T10927] memory: usage 307200kB, limit 307200kB, failcnt 21320 [ 141.993284][T10927] memory+swap: usage 384048kB, limit 9007199254740988kB, failcnt 0 [ 141.993292][T10927] kmem: usage 5052kB, limit 9007199254740988kB, failcnt 0 [ 141.993299][T10927] Memory cgroup stats for /syz1: [ 141.993448][T10927] cache 309030912 [ 141.993453][T10927] rss 217088 [ 141.993458][T10927] rss_huge 0 [ 141.993462][T10927] shmem 309030912 [ 141.993466][T10927] mapped_file 0 [ 141.993471][T10927] dirty 0 [ 141.993475][T10927] writeback 0 [ 141.993479][T10927] workingset_refault_anon 55 [ 141.993483][T10927] workingset_refault_file 1162 [ 141.993488][T10927] swap 78692352 [ 141.993492][T10927] swapcached 167936 [ 141.993497][T10927] pgpgin 162193 [ 141.993501][T10927] pgpgout 87168 [ 141.993505][T10927] pgfault 59380 [ 141.993509][T10927] pgmajfault 95 [ 141.993514][T10927] inactive_anon 66408448 [ 141.993518][T10927] active_anon 242987008 [ 141.993523][T10927] inactive_file 0 [ 141.993527][T10927] active_file 0 [ 141.993531][T10927] unevictable 0 [ 141.993536][T10927] hierarchical_memory_limit 314572800 [ 141.993541][T10927] hierarchical_memsw_limit 9223372036854771712 [ 141.993546][T10927] total_cache 309030912 [ 141.993550][T10927] total_rss 217088 [ 141.993555][T10927] total_rss_huge 0 [ 141.993559][T10927] total_shmem 309030912 [ 141.993564][T10927] total_mapped_file 0 [ 141.993568][T10927] total_dirty 0 [ 141.993572][T10927] total_writeback 0 [ 141.993577][T10927] total_workingset_refault_anon 55 [ 141.993582][T10927] total_workingset_refault_file 1162 [ 141.993587][T10927] total_swap 78692352 [ 141.993591][T10927] total_swapcached 167936 [ 141.993595][T10927] total_pgpgin 162193 [ 141.993600][T10927] total_pgpgout 87168 [ 141.993604][T10927] total_pgfault 59380 [ 141.993608][T10927] total_pgmajfault 95 [ 141.993613][T10927] total_inactive_anon 66408448 [ 141.993627][T10927] total_active_anon 242987008 [ 141.993632][T10927] total_inactive_file 0 [ 141.993636][T10927] total_active_file 0 [ 141.993640][T10927] total_unevictable 0 [ 141.993645][T10927] anon_cost 0 [ 141.993649][T10927] file_cost 0 [ 141.993653][T10927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1561,pid=10924,uid=0 [ 141.995159][T10927] Memory cgroup out of memory: Killed process 10924 (syz.1.1561) total-vm:101828kB, anon-rss:924kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 142.055253][T10927] syz.1.1561 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 142.182457][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.1.1561 Not tainted syzkaller #0 PREEMPT(full) [ 142.182473][T10927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.182480][T10927] Call Trace: [ 142.182485][T10927] [ 142.182489][T10927] dump_stack_lvl+0x16c/0x1f0 [ 142.182506][T10927] dump_header+0x101/0x930 [ 142.182521][T10927] oom_kill_process+0x272/0xa40 [ 142.182540][T10927] out_of_memory+0x350/0x1700 [ 142.182563][T10927] ? __pfx_out_of_memory+0x10/0x10 [ 142.182589][T10927] mem_cgroup_out_of_memory+0x118/0x130 [ 142.182609][T10927] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 142.182647][T10927] ? do_raw_spin_unlock+0x172/0x230 [ 142.182665][T10927] try_charge_memcg+0x72b/0xd50 [ 142.182680][T10927] ? __pfx_try_charge_memcg+0x10/0x10 [ 142.182692][T10927] ? find_held_lock+0x1/0x80 [ 142.182706][T10927] ? rcu_read_unlock+0x17/0x60 [ 142.182723][T10927] charge_memcg+0x8a/0x230 [ 142.182750][T10927] __mem_cgroup_charge+0x2b/0x1e0 [ 142.182770][T10927] shmem_alloc_and_add_folio+0x514/0xc20 [ 142.182796][T10927] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 142.182816][T10927] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 142.182830][T10927] shmem_get_folio_gfp+0x67f/0x1600 [ 142.182849][T10927] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 142.182865][T10927] shmem_write_begin+0x160/0x300 [ 142.182877][T10927] ? __pfx_shmem_write_begin+0x10/0x10 [ 142.182888][T10927] ? timestamp_truncate+0x21e/0x2d0 [ 142.182902][T10927] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 142.182921][T10927] generic_perform_write+0x3c2/0x900 [ 142.182944][T10927] ? __pfx_generic_perform_write+0x10/0x10 [ 142.182963][T10927] ? inode_needs_update_time.part.0+0x191/0x270 [ 142.182981][T10927] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 142.182994][T10927] shmem_file_write_iter+0x10e/0x140 [ 142.183008][T10927] __kernel_write_iter+0x317/0xb10 [ 142.183025][T10927] ? __pfx___kernel_write_iter+0x10/0x10 [ 142.183037][T10927] ? __up_read+0x1f8/0x750 [ 142.183052][T10927] ? dump_user_range+0x756/0xb70 [ 142.183067][T10927] dump_user_range+0x413/0xb70 [ 142.183082][T10927] ? __pfx_dump_user_range+0x10/0x10 [ 142.183095][T10927] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 142.183110][T10927] ? __pfx_writenote+0x10/0x10 [ 142.183127][T10927] elf_core_dump+0x2929/0x3b60 [ 142.183148][T10927] ? __pfx_elf_core_dump+0x10/0x10 [ 142.183160][T10927] ? kasan_save_stack+0x42/0x60 [ 142.183171][T10927] ? kasan_save_stack+0x33/0x60 [ 142.183181][T10927] ? kasan_save_track+0x14/0x30 [ 142.183191][T10927] ? __kasan_kmalloc+0xaa/0xb0 [ 142.183201][T10927] ? vfs_coredump+0x1dca/0x5670 [ 142.183211][T10927] ? get_signal+0x22e3/0x26d0 [ 142.183230][T10927] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 142.183254][T10927] ? 0xffffffffff600000 [ 142.183309][T10927] ? vfs_coredump+0x2b97/0x5670 [ 142.183325][T10927] vfs_coredump+0x2b97/0x5670 [ 142.183352][T10927] ? __pfx_vfs_coredump+0x10/0x10 [ 142.183371][T10927] ? __lock_acquire+0x62e/0x1ce0 [ 142.183401][T10927] ? __lock_acquire+0x62e/0x1ce0 [ 142.183427][T10927] ? lock_acquire+0x179/0x350 [ 142.183463][T10927] ? is_bpf_text_address+0x8a/0x1a0 [ 142.183481][T10927] ? bpf_ksym_find+0x127/0x1c0 [ 142.183507][T10927] ? __kernel_text_address+0xd/0x40 [ 142.183526][T10927] ? unwind_get_return_address+0x59/0xa0 [ 142.183546][T10927] ? arch_stack_walk+0xa6/0x100 [ 142.183574][T10927] ? stack_trace_save+0x8e/0xc0 [ 142.183596][T10927] ? __pfx_stack_trace_save+0x10/0x10 [ 142.183614][T10927] ? stack_depot_save_flags+0x29/0x9c0 [ 142.183629][T10927] ? __lock_acquire+0xb97/0x1ce0 [ 142.183690][T10927] ? proc_coredump_connector+0x2d1/0x4f0 [ 142.183713][T10927] ? __pfx_proc_coredump_connector+0x10/0x10 [ 142.183733][T10927] ? rcu_is_watching+0x12/0xc0 [ 142.183749][T10927] get_signal+0x22e3/0x26d0 [ 142.183767][T10927] ? force_sig_fault+0xc4/0x100 [ 142.183781][T10927] ? __pfx_get_signal+0x10/0x10 [ 142.183800][T10927] arch_do_signal_or_restart+0x8f/0x7d0 [ 142.183814][T10927] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 142.183828][T10927] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 142.183855][T10927] irqentry_exit_to_user_mode+0x12a/0x270 [ 142.183870][T10927] asm_exc_page_fault+0x26/0x30 [ 142.183881][T10927] RIP: 0033:0x7f9fd9f8ebf1 [ 142.183894][T10927] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 142.183907][T10927] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 142.183917][T10927] RAX: 0000000000000000 RBX: 00007f9fda1b5fa0 RCX: 00007f9fd9f8ebe9 [ 142.183923][T10927] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 142.183930][T10927] RBP: 00007f9fda011e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.183936][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.183943][T10927] R13: 00007f9fda1b6038 R14: 00007f9fda1b5fa0 R15: 00007fff60a9c3f8 [ 142.183960][T10927] [ 142.379702][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.382292][T10927] memory: usage 307200kB, limit 307200kB, failcnt 21447 [ 142.385219][T10932] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.391458][T10927] memory+swap: usage 384048kB, limit 9007199254740988kB, failcnt 0 [ 142.396723][T10927] kmem: usage 4884kB, limit 9007199254740988kB, failcnt 0 [ 142.400162][T10927] Memory cgroup stats for /syz1: [ 142.400292][T10927] cache 309067776 [ 142.410790][T10927] rss 208896 [ 142.411993][T10927] rss_huge 0 [ 142.413801][T10927] shmem 309063680 [ 142.415509][T10927] mapped_file 4096 [ 142.416937][T10927] dirty 0 [ 142.418119][T10927] writeback 0 [ 142.419366][T10927] workingset_refault_anon 55 [ 142.421109][T10927] workingset_refault_file 1179 [ 142.422728][T10927] swap 78692352 [ 142.428090][T10927] swapcached 167936 [ 142.429869][T10927] pgpgin 162222 [ 142.431405][T10927] pgpgout 87190 [ 142.432881][T10927] pgfault 59402 [ 142.434760][T10927] pgmajfault 97 [ 142.436236][T10927] inactive_anon 225665024 [ 142.438073][T10927] active_anon 83755008 [ 142.439711][T10927] inactive_file 4096 [ 142.441198][T10927] active_file 0 [ 142.442438][T10927] unevictable 0 [ 142.445866][T10927] hierarchical_memory_limit 314572800 [ 142.447782][T10927] hierarchical_memsw_limit 9223372036854771712 [ 142.450055][T10927] total_cache 309067776 [ 142.451543][T10927] total_rss 208896 [ 142.455164][T10927] total_rss_huge 0 [ 142.456576][T10927] total_shmem 309063680 [ 142.457946][T10927] total_mapped_file 4096 [ 142.459614][T10927] total_dirty 0 [ 142.461037][T10927] total_writeback 0 [ 142.462624][T10927] total_workingset_refault_anon 55 [ 142.464776][T10927] total_workingset_refault_file 1179 [ 142.466832][T10927] total_swap 78692352 [ 142.468554][T10927] total_swapcached 167936 [ 142.470022][T10927] total_pgpgin 162222 [ 142.471633][T10927] total_pgpgout 87190 [ 142.474122][T10927] total_pgfault 59402 [ 142.476008][T10927] total_pgmajfault 97 [ 142.477759][T10927] total_inactive_anon 225665024 [ 142.479777][T10927] total_active_anon 83755008 [ 142.481628][T10927] total_inactive_file 4096 [ 142.484851][T10927] total_active_file 0 [ 142.486735][T10927] total_unevictable 0 [ 142.488436][T10927] anon_cost 0 [ 142.491300][T10927] file_cost 0 [ 142.492533][T10927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.217,pid=6739,uid=0 [ 142.500594][T10927] Memory cgroup out of memory: Killed process 6739 (syz.1.217) total-vm:101824kB, anon-rss:1108kB, file-rss:20608kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 142.509829][T10841] veth0_vlan: entered promiscuous mode [ 142.527118][T10841] veth1_vlan: entered promiscuous mode [ 142.537668][T10927] syz.1.1561 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 142.540758][T10841] veth0_macvtap: entered promiscuous mode [ 142.541352][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.1.1561 Not tainted syzkaller #0 PREEMPT(full) [ 142.541372][T10927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.541381][T10927] Call Trace: [ 142.541387][T10927] [ 142.541393][T10927] dump_stack_lvl+0x16c/0x1f0 [ 142.541413][T10927] dump_header+0x101/0x930 [ 142.541429][T10927] oom_kill_process+0x272/0xa40 [ 142.541444][T10927] out_of_memory+0x350/0x1700 [ 142.541459][T10927] ? __pfx_out_of_memory+0x10/0x10 [ 142.541530][T10927] mem_cgroup_out_of_memory+0x118/0x130 [ 142.541550][T10927] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 142.541571][T10927] ? do_raw_spin_unlock+0x172/0x230 [ 142.541590][T10927] try_charge_memcg+0x72b/0xd50 [ 142.541607][T10927] ? __pfx_try_charge_memcg+0x10/0x10 [ 142.541621][T10927] ? find_held_lock+0x1/0x80 [ 142.541636][T10927] ? rcu_read_unlock+0x17/0x60 [ 142.541663][T10927] charge_memcg+0x8a/0x230 [ 142.541682][T10927] __mem_cgroup_charge+0x2b/0x1e0 [ 142.541704][T10927] shmem_alloc_and_add_folio+0x514/0xc20 [ 142.541737][T10927] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 142.541768][T10927] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 142.541789][T10927] shmem_get_folio_gfp+0x67f/0x1600 [ 142.541814][T10927] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 142.541838][T10927] shmem_write_begin+0x160/0x300 [ 142.541860][T10927] ? __pfx_shmem_write_begin+0x10/0x10 [ 142.541875][T10927] ? timestamp_truncate+0x21e/0x2d0 [ 142.541896][T10927] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 142.541917][T10927] generic_perform_write+0x3c2/0x900 [ 142.541941][T10927] ? __pfx_generic_perform_write+0x10/0x10 [ 142.541961][T10927] ? inode_needs_update_time.part.0+0x191/0x270 [ 142.541980][T10927] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 142.541994][T10927] shmem_file_write_iter+0x10e/0x140 [ 142.542010][T10927] __kernel_write_iter+0x317/0xb10 [ 142.542030][T10927] ? __pfx___kernel_write_iter+0x10/0x10 [ 142.542042][T10927] ? __up_read+0x1f8/0x750 [ 142.542055][T10927] ? dump_user_range+0x756/0xb70 [ 142.542073][T10927] dump_user_range+0x413/0xb70 [ 142.542089][T10927] ? __pfx_dump_user_range+0x10/0x10 [ 142.542102][T10927] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 142.542119][T10927] ? __pfx_writenote+0x10/0x10 [ 142.542137][T10927] elf_core_dump+0x2929/0x3b60 [ 142.542158][T10927] ? __pfx_elf_core_dump+0x10/0x10 [ 142.542172][T10927] ? kasan_save_stack+0x42/0x60 [ 142.542184][T10927] ? kasan_save_stack+0x33/0x60 [ 142.542195][T10927] ? kasan_save_track+0x14/0x30 [ 142.542205][T10927] ? __kasan_kmalloc+0xaa/0xb0 [ 142.542215][T10927] ? vfs_coredump+0x1dca/0x5670 [ 142.542228][T10927] ? get_signal+0x22e3/0x26d0 [ 142.542243][T10927] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 142.542262][T10927] ? 0xffffffffff600000 [ 142.542296][T10927] ? vfs_coredump+0x2b97/0x5670 [ 142.542307][T10927] vfs_coredump+0x2b97/0x5670 [ 142.542325][T10927] ? __pfx_vfs_coredump+0x10/0x10 [ 142.542337][T10927] ? __lock_acquire+0x62e/0x1ce0 [ 142.542358][T10927] ? __lock_acquire+0x62e/0x1ce0 [ 142.542415][T10927] ? lock_acquire+0x179/0x350 [ 142.542444][T10927] ? is_bpf_text_address+0x8a/0x1a0 [ 142.542457][T10927] ? bpf_ksym_find+0x127/0x1c0 [ 142.542476][T10927] ? __kernel_text_address+0xd/0x40 [ 142.542490][T10927] ? unwind_get_return_address+0x59/0xa0 [ 142.542504][T10927] ? arch_stack_walk+0xa6/0x100 [ 142.542524][T10927] ? stack_trace_save+0x8e/0xc0 [ 142.542541][T10927] ? __pfx_stack_trace_save+0x10/0x10 [ 142.542556][T10927] ? stack_depot_save_flags+0x29/0x9c0 [ 142.542572][T10927] ? __lock_acquire+0xb97/0x1ce0 [ 142.542614][T10927] ? proc_coredump_connector+0x2d1/0x4f0 [ 142.542633][T10927] ? __pfx_proc_coredump_connector+0x10/0x10 [ 142.542654][T10927] ? rcu_is_watching+0x12/0xc0 [ 142.542672][T10927] get_signal+0x22e3/0x26d0 [ 142.542691][T10927] ? force_sig_fault+0xc4/0x100 [ 142.542707][T10927] ? __pfx_get_signal+0x10/0x10 [ 142.542726][T10927] arch_do_signal_or_restart+0x8f/0x7d0 [ 142.542742][T10927] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 142.542757][T10927] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 142.542781][T10927] irqentry_exit_to_user_mode+0x12a/0x270 [ 142.542814][T10927] asm_exc_page_fault+0x26/0x30 [ 142.542829][T10927] RIP: 0033:0x7f9fd9f8ebf1 [ 142.542842][T10927] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 142.542859][T10927] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 142.542875][T10927] RAX: 0000000000000000 RBX: 00007f9fda1b5fa0 RCX: 00007f9fd9f8ebe9 [ 142.542886][T10927] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 142.542900][T10927] RBP: 00007f9fda011e19 R08: 0000000000000000 R09: 0000000000000000 [ 142.542911][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.542922][T10927] R13: 00007f9fda1b6038 R14: 00007f9fda1b5fa0 R15: 00007fff60a9c3f8 [ 142.542949][T10927] [ 142.543472][T10927] memory: usage 307200kB, limit 307200kB, failcnt 21579 [ 142.557391][T10841] veth1_macvtap: entered promiscuous mode [ 142.557721][T10927] memory+swap: usage 384080kB, limit 9007199254740988kB, failcnt 0 [ 142.582056][T10841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.584352][T10927] kmem: usage 4796kB, limit 9007199254740988kB, failcnt 0 [ 142.584368][T10927] Memory cgroup stats for /syz1: [ 142.584444][T10927] cache 309202944 [ 142.584451][T10927] rss 208896 [ 142.584456][T10927] rss_huge 0 [ 142.584461][T10927] shmem 309202944 [ 142.584466][T10927] mapped_file 0 [ 142.584471][T10927] dirty 0 [ 142.584476][T10927] writeback 0 [ 142.584481][T10927] workingset_refault_anon 55 [ 142.584486][T10927] workingset_refault_file 1179 [ 142.584492][T10927] swap 78725120 [ 142.584497][T10927] swapcached 167936 [ 142.584502][T10927] pgpgin 162304 [ 142.584507][T10927] pgpgout 87239 [ 142.592390][T10841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.594601][T10927] pgfault 59408 [ 142.604570][ T1177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.606092][T10927] pgmajfault 97 [ 142.608566][ T1177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.610297][T10927] inactive_anon 241016832 [ 142.617419][ T1177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.617649][T10927] active_anon 68120576 [ 142.781348][T10927] inactive_file 0 [ 142.781358][T10927] active_file 0 [ 142.781362][T10927] unevictable 0 [ 142.781367][T10927] hierarchical_memory_limit 314572800 [ 142.781374][T10927] hierarchical_memsw_limit 9223372036854771712 [ 142.781382][T10927] total_cache 309202944 [ 142.781389][T10927] total_rss 208896 [ 142.781397][T10927] total_rss_huge 0 [ 142.781403][T10927] total_shmem 309202944 [ 142.781409][T10927] total_mapped_file 0 [ 142.781419][T10927] total_dirty 0 [ 142.781425][T10927] total_writeback 0 [ 142.781431][T10927] total_workingset_refault_anon 55 [ 142.781439][T10927] total_workingset_refault_file 1179 [ 142.781446][T10927] total_swap 78725120 [ 142.781453][T10927] total_swapcached 167936 [ 142.781459][T10927] total_pgpgin 162304 [ 142.781531][T10927] total_pgpgout 87239 [ 142.781542][T10927] total_pgfault 59408 [ 142.781548][T10927] total_pgmajfault 97 [ 142.781555][T10927] total_inactive_anon 241016832 [ 142.781562][T10927] total_active_anon 68120576 [ 142.781568][T10927] total_inactive_file 0 [ 142.781575][T10927] total_active_file 0 [ 142.781582][T10927] total_unevictable 0 [ 142.781588][T10927] anon_cost 0 [ 142.781594][T10927] file_cost 0 [ 142.781601][T10927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1395,pid=10392,uid=0 [ 142.781744][T10927] Memory cgroup out of memory: Killed process 10392 (syz.1.1395) total-vm:101828kB, anon-rss:1116kB, file-rss:20608kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 142.800546][ T1177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.854154][T10949] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 142.872255][T10949] CPU: 1 UID: 0 PID: 10949 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 142.872283][T10949] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.872295][T10949] Call Trace: [ 142.872302][T10949] [ 142.872310][T10949] dump_stack_lvl+0x16c/0x1f0 [ 142.872337][T10949] dump_header+0x101/0x930 [ 142.872361][T10949] oom_kill_process+0x272/0xa40 [ 142.872384][T10949] out_of_memory+0x350/0x1700 [ 142.872409][T10949] ? __pfx_out_of_memory+0x10/0x10 [ 142.872437][T10949] mem_cgroup_out_of_memory+0x118/0x130 [ 142.872462][T10949] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 142.872493][T10949] ? do_raw_spin_unlock+0x172/0x230 [ 142.872518][T10949] try_charge_memcg+0x72b/0xd50 [ 142.872547][T10949] ? __pfx_try_charge_memcg+0x10/0x10 [ 142.872567][T10949] ? peak_open+0x21/0x50 [ 142.872592][T10949] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 142.872622][T10949] obj_cgroup_charge_pages+0x22/0x1f0 [ 142.872645][T10949] obj_cgroup_charge_account+0x5c/0xa0 [ 142.872667][T10949] __memcg_slab_post_alloc_hook+0x30c/0x960 [ 142.872693][T10949] ? kasan_save_track+0x14/0x30 [ 142.872715][T10949] kmem_cache_alloc_lru_noprof+0x30f/0x3b0 [ 142.872735][T10949] ? proc_alloc_inode+0x25/0x200 [ 142.872764][T10949] ? __pfx_proc_alloc_inode+0x10/0x10 [ 142.872788][T10949] proc_alloc_inode+0x25/0x200 [ 142.872813][T10949] alloc_inode+0x64/0x240 [ 142.872839][T10949] new_inode+0x22/0x1c0 [ 142.872868][T10949] proc_pid_make_inode+0x22/0x160 [ 142.872904][T10949] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 142.872935][T10949] proc_pid_instantiate+0x51/0x1e0 [ 142.872981][T10949] proc_pid_lookup+0x1fc/0x4d0 [ 142.873012][T10949] proc_root_lookup+0x23/0x70 [ 142.873041][T10949] __lookup_slow+0x24e/0x460 [ 142.873070][T10949] ? __pfx___lookup_slow+0x10/0x10 [ 142.873113][T10949] ? lookup_fast+0x156/0x610 [ 142.873136][T10949] walk_component+0x353/0x5b0 [ 142.873156][T10949] link_path_walk+0x511/0xe20 [ 142.873186][T10949] path_openat+0x1b0/0x2cb0 [ 142.873204][T10949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.873234][T10949] ? __pfx_path_openat+0x10/0x10 [ 142.873262][T10949] do_filp_open+0x20b/0x470 [ 142.873283][T10949] ? __pfx_do_filp_open+0x10/0x10 [ 142.873314][T10949] ? __pfx_kfree_link+0x10/0x10 [ 142.873350][T10949] ? alloc_fd+0x471/0x7d0 [ 142.873378][T10949] do_sys_openat2+0x11b/0x1d0 [ 142.873402][T10949] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.873425][T10949] ? find_held_lock+0x2b/0x80 [ 142.873447][T10949] ? handle_mm_fault+0x2ab/0xd10 [ 142.873482][T10949] __x64_sys_openat+0x174/0x210 [ 142.873507][T10949] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.873533][T10949] ? do_user_addr_fault+0x843/0x1370 [ 142.873561][T10949] do_syscall_64+0xcd/0x4c0 [ 142.873584][T10949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.873602][T10949] RIP: 0033:0x7f9fd9f8d550 [ 142.873618][T10949] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 142.873635][T10949] RSP: 002b:00007fff60a9c200 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 142.873653][T10949] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f9fd9f8d550 [ 142.873665][T10949] RDX: 0000000000080001 RSI: 00007f9fda0136a0 RDI: 00000000ffffff9c [ 142.873677][T10949] RBP: 00007f9fda0136a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.873688][T10949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 142.873699][T10949] R13: 00007fff60a9c2a0 R14: 00000000000227de R15: 00007fff60a9c810 [ 142.873726][T10949] [ 143.000710][T10949] memory: usage 307200kB, limit 307200kB, failcnt 21829 [ 143.007272][T10949] memory+swap: usage 384304kB, limit 9007199254740988kB, failcnt 0 [ 143.009804][T10949] kmem: usage 4672kB, limit 9007199254740988kB, failcnt 0 [ 143.012616][T10949] Memory cgroup stats for /syz1: [ 143.012811][T10949] cache 309239808 [ 143.017797][T10949] rss 241664 [ 143.019066][T10949] rss_huge 0 [ 143.020338][T10949] shmem 309239808 [ 143.022283][T10949] mapped_file 0 [ 143.023805][T10949] dirty 0 [ 143.024038][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.025081][T10949] writeback 0 [ 143.027744][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.029028][T10949] workingset_refault_anon 55 [ 143.029036][T10949] workingset_refault_file 1243 [ 143.029041][T10949] swap 78954496 [ 143.037685][T10949] swapcached 159744 [ 143.039027][T10949] pgpgin 162480 [ 143.040118][T10949] pgpgout 87400 [ 143.041214][T10949] pgfault 59444 [ 143.042311][T10949] pgmajfault 101 [ 143.043506][T10949] inactive_anon 217022464 [ 143.043839][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.044823][T10949] active_anon 92598272 [ 143.044831][T10949] inactive_file 0 [ 143.044836][T10949] active_file 0 [ 143.044841][T10949] unevictable 0 [ 143.044845][T10949] hierarchical_memory_limit 314572800 [ 143.044851][T10949] hierarchical_memsw_limit 9223372036854771712 [ 143.044856][T10949] total_cache 309239808 [ 143.047347][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.061094][T10949] total_rss 241664 [ 143.062291][T10949] total_rss_huge 0 [ 143.063967][T10949] total_shmem 309239808 [ 143.065300][T10949] total_mapped_file 0 [ 143.066620][T10949] total_dirty 0 [ 143.067706][T10949] total_writeback 0 [ 143.068868][T10949] total_workingset_refault_anon 55 [ 143.070933][T10949] total_workingset_refault_file 1243 [ 143.072706][T10949] total_swap 78954496 [ 143.074226][T10949] total_swapcached 159744 [ 143.075591][T10949] total_pgpgin 162480 [ 143.076804][T10949] total_pgpgout 87400 [ 143.078053][T10949] total_pgfault 59444 [ 143.079509][T10949] total_pgmajfault 101 [ 143.080854][T10949] total_inactive_anon 217022464 [ 143.082428][T10949] total_active_anon 92598272 [ 143.084096][T10949] total_inactive_file 0 [ 143.085430][T10949] total_active_file 0 [ 143.086788][T10949] total_unevictable 0 [ 143.088405][T10949] anon_cost 0 [ 143.090214][T10949] file_cost 0 [ 143.091620][T10949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1561,pid=10927,uid=0 [ 143.101114][T10949] Memory cgroup out of memory: Killed process 10927 (syz.1.1561) total-vm:101828kB, anon-rss:956kB, file-rss:21192kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 143.101495][T10951] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 143.140972][T10951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 143.174961][T10956] syz.1.1564 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 143.179369][T10956] CPU: 2 UID: 0 PID: 10956 Comm: syz.1.1564 Not tainted syzkaller #0 PREEMPT(full) [ 143.179386][T10956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.179394][T10956] Call Trace: [ 143.179398][T10956] [ 143.179403][T10956] dump_stack_lvl+0x16c/0x1f0 [ 143.179421][T10956] dump_header+0x101/0x930 [ 143.179436][T10956] oom_kill_process+0x272/0xa40 [ 143.179450][T10956] out_of_memory+0x350/0x1700 [ 143.179466][T10956] ? __pfx_out_of_memory+0x10/0x10 [ 143.179483][T10956] mem_cgroup_out_of_memory+0x118/0x130 [ 143.179499][T10956] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 143.179519][T10956] ? do_raw_spin_unlock+0x172/0x230 [ 143.179536][T10956] try_charge_memcg+0x72b/0xd50 [ 143.179552][T10956] ? __pfx_try_charge_memcg+0x10/0x10 [ 143.179564][T10956] ? peak_open+0x21/0x50 [ 143.179579][T10956] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 143.179599][T10956] obj_cgroup_charge_pages+0x22/0x1f0 [ 143.179612][T10956] __memcg_kmem_charge_page+0xc2/0x2e0 [ 143.179627][T10956] __alloc_frozen_pages_noprof+0x325/0x23f0 [ 143.179640][T10956] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 143.179656][T10956] ? __lock_acquire+0x62e/0x1ce0 [ 143.179675][T10956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.179687][T10956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.179708][T10956] ? __lock_acquire+0xb97/0x1ce0 [ 143.179724][T10956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.179739][T10956] ? policy_nodemask+0xea/0x4e0 [ 143.179754][T10956] alloc_pages_mpol+0x1fb/0x550 [ 143.179767][T10956] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 143.179780][T10956] ? do_raw_spin_lock+0x12c/0x2b0 [ 143.179792][T10956] ? find_held_lock+0x2b/0x80 [ 143.179808][T10956] alloc_pages_noprof+0x131/0x390 [ 143.179822][T10956] __pmd_alloc+0x3b/0x930 [ 143.179837][T10956] ? __pud_alloc+0x526/0x750 [ 143.179853][T10956] copy_page_range+0x3eaf/0x5c80 [ 143.179872][T10956] ? copy_process+0x4081/0x7690 [ 143.179897][T10956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 143.179911][T10956] ? mas_wr_store_entry+0xa14/0x2550 [ 143.179931][T10956] ? mas_destroy+0x5de/0xa20 [ 143.179945][T10956] ? __pfx_copy_page_range+0x10/0x10 [ 143.179964][T10956] ? mas_store+0x7a9/0x1160 [ 143.179978][T10956] ? find_held_lock+0x2b/0x80 [ 143.179992][T10956] ? __pfx_mas_store+0x10/0x10 [ 143.180005][T10956] ? __vma_enter_locked+0x163/0x3f0 [ 143.180030][T10956] dup_mmap+0xe88/0x21d0 [ 143.180052][T10956] ? __pfx_dup_mmap+0x10/0x10 [ 143.180076][T10956] copy_process+0x4081/0x7690 [ 143.180092][T10956] ? __pfx___futex_wait+0x10/0x10 [ 143.180110][T10956] ? __pfx_copy_process+0x10/0x10 [ 143.180126][T10956] ? futex_private_hash_put+0x176/0x300 [ 143.180144][T10956] ? futex_private_hash_put+0x18a/0x300 [ 143.180164][T10956] kernel_clone+0xfc/0x930 [ 143.180180][T10956] ? __pfx_kernel_clone+0x10/0x10 [ 143.180204][T10956] __do_sys_clone+0xce/0x120 [ 143.180220][T10956] ? __pfx___do_sys_clone+0x10/0x10 [ 143.180242][T10956] ? xfd_validate_state+0x61/0x180 [ 143.180260][T10956] ? __pfx_ksys_read+0x10/0x10 [ 143.180277][T10956] do_syscall_64+0xcd/0x4c0 [ 143.180291][T10956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.180304][T10956] RIP: 0033:0x7f9fd9f8ebe9 [ 143.180314][T10956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.180325][T10956] RSP: 002b:00007f9fdad16fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 143.180336][T10956] RAX: ffffffffffffffda RBX: 00007f9fda1b5fa0 RCX: 00007f9fd9f8ebe9 [ 143.180344][T10956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 143.180350][T10956] RBP: 00007f9fda011e19 R08: 0000000000000000 R09: 0000000000000000 [ 143.180357][T10956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.180364][T10956] R13: 00007f9fda1b6038 R14: 00007f9fda1b5fa0 R15: 00007fff60a9c3f8 [ 143.180379][T10956] [ 143.180383][T10956] memory: usage 307200kB, limit 307200kB, failcnt 21997 [ 143.181185][T10951] bond3: (slave ip6gretap1): making interface the new active one [ 143.191763][T10956] memory+swap: usage 384304kB, limit 9007199254740988kB, failcnt 0 [ 143.193712][T10951] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 143.196300][T10956] kmem: usage 4688kB, limit 9007199254740988kB, failcnt 0 [ 143.349453][T10956] Memory cgroup stats for /syz1: [ 143.349645][T10956] cache 309317632 [ 143.353440][T10956] rss 200704 [ 143.355735][T10956] rss_huge 0 [ 143.356860][T10956] shmem 309313536 [ 143.358008][T10956] mapped_file 8192 [ 143.359323][T10956] dirty 0 [ 143.360334][T10956] writeback 0 [ 143.361469][T10956] workingset_refault_anon 55 [ 143.363087][T10956] workingset_refault_file 1244 [ 143.364904][T10956] swap 78954496 [ 143.366126][T10956] swapcached 159744 [ 143.367633][T10956] pgpgin 162527 [ 143.369125][T10956] pgpgout 87438 [ 143.370234][T10956] pgfault 59525 [ 143.371454][T10956] pgmajfault 101 [ 143.372706][T10956] inactive_anon 215916544 [ 143.374769][T10956] active_anon 93736960 [ 143.376329][T10956] inactive_file 4096 [ 143.378301][T10956] active_file 0 [ 143.380095][T10956] unevictable 0 [ 143.381968][T10956] hierarchical_memory_limit 314572800 [ 143.393301][T10956] hierarchical_memsw_limit 9223372036854771712 [ 143.395641][T10956] total_cache 309317632 [ 143.396926][T10956] total_rss 200704 [ 143.398097][T10956] total_rss_huge 0 [ 143.399274][T10956] total_shmem 309313536 [ 143.400528][T10956] total_mapped_file 8192 [ 143.401846][T10956] total_dirty 0 [ 143.415910][T10956] total_writeback 0 [ 143.424598][T10956] total_workingset_refault_anon 55 [ 143.433119][T10956] total_workingset_refault_file 1244 [ 143.439140][T10956] total_swap 78954496 [ 143.441574][T10956] total_swapcached 159744 [ 143.443941][T10956] total_pgpgin 162527 [ 143.445713][T10956] total_pgpgout 87438 [ 143.447437][T10956] total_pgfault 59525 [ 143.449225][T10956] total_pgmajfault 101 [ 143.450835][T10956] total_inactive_anon 215916544 [ 143.452370][T10956] total_active_anon 93736960 [ 143.455945][T10956] total_inactive_file 4096 [ 143.457888][T10956] total_active_file 0 [ 143.459969][T10956] total_unevictable 0 [ 143.461830][T10956] anon_cost 0 [ 143.463797][T10956] file_cost 0 [ 143.465196][T10956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1564,pid=10949,uid=0 [ 143.475568][T10956] Memory cgroup out of memory: Killed process 10949 (syz.1.1564) total-vm:101828kB, anon-rss:1052kB, file-rss:22840kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 143.783590][ T63] Bluetooth: hci1: command tx timeout [ 143.788793][T10985] dvmrp1: entered allmulticast mode [ 144.069369][T10998] syz.0.1584 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 144.072333][T10998] CPU: 3 UID: 0 PID: 10998 Comm: syz.0.1584 Not tainted syzkaller #0 PREEMPT(full) [ 144.072349][T10998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.072356][T10998] Call Trace: [ 144.072361][T10998] [ 144.072365][T10998] dump_stack_lvl+0x16c/0x1f0 [ 144.072383][T10998] dump_header+0x101/0x930 [ 144.072399][T10998] oom_kill_process+0x272/0xa40 [ 144.072414][T10998] out_of_memory+0x350/0x1700 [ 144.072429][T10998] ? __pfx_out_of_memory+0x10/0x10 [ 144.072446][T10998] mem_cgroup_out_of_memory+0x118/0x130 [ 144.072463][T10998] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 144.072482][T10998] ? do_raw_spin_unlock+0x172/0x230 [ 144.072498][T10998] try_charge_memcg+0x72b/0xd50 [ 144.072512][T10998] ? __pfx_try_charge_memcg+0x10/0x10 [ 144.072525][T10998] ? find_held_lock+0x1/0x80 [ 144.072539][T10998] ? rcu_read_unlock+0x17/0x60 [ 144.072556][T10998] charge_memcg+0x8a/0x230 [ 144.072568][T10998] __mem_cgroup_charge+0x2b/0x1e0 [ 144.072582][T10998] shmem_alloc_and_add_folio+0x514/0xc20 [ 144.072605][T10998] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 144.072626][T10998] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 144.072640][T10998] shmem_get_folio_gfp+0x67f/0x1600 [ 144.072655][T10998] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 144.072671][T10998] shmem_write_begin+0x160/0x300 [ 144.072683][T10998] ? __pfx_shmem_write_begin+0x10/0x10 [ 144.072694][T10998] ? timestamp_truncate+0x21e/0x2d0 [ 144.072709][T10998] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 144.072728][T10998] generic_perform_write+0x3c2/0x900 [ 144.072751][T10998] ? __pfx_generic_perform_write+0x10/0x10 [ 144.072770][T10998] ? inode_needs_update_time.part.0+0x191/0x270 [ 144.072791][T10998] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 144.072805][T10998] shmem_file_write_iter+0x10e/0x140 [ 144.072821][T10998] __kernel_write_iter+0x317/0xb10 [ 144.072891][T10998] ? __pfx___kernel_write_iter+0x10/0x10 [ 144.072904][T10998] ? __up_read+0x1f8/0x750 [ 144.072923][T10998] ? dump_user_range+0x756/0xb70 [ 144.072939][T10998] dump_user_range+0x413/0xb70 [ 144.072955][T10998] ? __pfx_dump_user_range+0x10/0x10 [ 144.072969][T10998] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 144.072988][T10998] ? __pfx_writenote+0x10/0x10 [ 144.073012][T10998] elf_core_dump+0x2929/0x3b60 [ 144.073034][T10998] ? __pfx_elf_core_dump+0x10/0x10 [ 144.073048][T10998] ? kasan_save_stack+0x42/0x60 [ 144.073060][T10998] ? kasan_save_stack+0x33/0x60 [ 144.073070][T10998] ? kasan_save_track+0x14/0x30 [ 144.073081][T10998] ? __kasan_kmalloc+0xaa/0xb0 [ 144.073092][T10998] ? vfs_coredump+0x1dca/0x5670 [ 144.073104][T10998] ? get_signal+0x22e3/0x26d0 [ 144.073119][T10998] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 144.073138][T10998] ? 0xffffffffff600000 [ 144.073173][T10998] ? vfs_coredump+0x2b97/0x5670 [ 144.073185][T10998] vfs_coredump+0x2b97/0x5670 [ 144.073203][T10998] ? __pfx_vfs_coredump+0x10/0x10 [ 144.073217][T10998] ? __lock_acquire+0x62e/0x1ce0 [ 144.073239][T10998] ? __lock_acquire+0x62e/0x1ce0 [ 144.073259][T10998] ? lock_acquire+0x179/0x350 [ 144.073314][T10998] ? is_bpf_text_address+0x8a/0x1a0 [ 144.073328][T10998] ? bpf_ksym_find+0x127/0x1c0 [ 144.073348][T10998] ? __kernel_text_address+0xd/0x40 [ 144.073362][T10998] ? unwind_get_return_address+0x59/0xa0 [ 144.073376][T10998] ? arch_stack_walk+0xa6/0x100 [ 144.073396][T10998] ? stack_trace_save+0x8e/0xc0 [ 144.073413][T10998] ? __pfx_stack_trace_save+0x10/0x10 [ 144.073430][T10998] ? stack_depot_save_flags+0x29/0x9c0 [ 144.073445][T10998] ? __lock_acquire+0xb97/0x1ce0 [ 144.073490][T10998] ? proc_coredump_connector+0x2d1/0x4f0 [ 144.073509][T10998] ? __pfx_proc_coredump_connector+0x10/0x10 [ 144.073532][T10998] ? rcu_is_watching+0x12/0xc0 [ 144.073552][T10998] get_signal+0x22e3/0x26d0 [ 144.073584][T10998] ? force_sig_fault+0xc4/0x100 [ 144.073601][T10998] ? __pfx_get_signal+0x10/0x10 [ 144.073621][T10998] arch_do_signal_or_restart+0x8f/0x7d0 [ 144.073637][T10998] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 144.073654][T10998] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 144.073682][T10998] irqentry_exit_to_user_mode+0x12a/0x270 [ 144.073698][T10998] asm_exc_page_fault+0x26/0x30 [ 144.073710][T10998] RIP: 0033:0x7f028158ebf1 [ 144.073723][T10998] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 144.073735][T10998] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 144.073746][T10998] RAX: 0000000000000000 RBX: 00007f02817b5fa0 RCX: 00007f028158ebe9 [ 144.073753][T10998] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 144.073761][T10998] RBP: 00007f0281611e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.073768][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.073775][T10998] R13: 00007f02817b6038 R14: 00007f02817b5fa0 R15: 00007ffe3be331d8 [ 144.073791][T10998] [ 144.136004][ T40] kauditd_printk_skb: 215 callbacks suppressed [ 144.136022][ T40] audit: type=1400 audit(1757371456.835:95551): avc: denied { append } for pid=10992 comm="syz.7.1583" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.140986][T10998] memory: usage 307200kB, limit 307200kB, failcnt 10716 [ 144.171049][ T40] audit: type=1400 audit(1757371456.865:95552): avc: denied { read } for pid=5680 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 144.176338][T10998] memory+swap: usage 340704kB, limit 9007199254740988kB, failcnt 0 [ 144.197453][ T40] audit: type=1400 audit(1757371456.895:95553): avc: denied { listen } for pid=11002 comm="syz.4.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.197997][T10998] kmem: usage 10776kB, limit 9007199254740988kB, failcnt 0 [ 144.200699][ T40] audit: type=1400 audit(1757371456.895:95554): avc: denied { lock } for pid=11002 comm="syz.4.1586" path="socket:[39613]" dev="sockfs" ino=39613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 144.200949][T10998] Memory cgroup stats for [ 144.270793][ T40] audit: type=1400 audit(1757371456.965:95555): avc: denied { allowed } for pid=11002 comm="syz.4.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 144.276755][T10998] /syz0: [ 144.306278][T10998] cache 302637056 [ 144.308979][T10998] rss 901120 [ 144.310113][T10998] rss_huge 0 [ 144.311283][T10998] shmem 302632960 [ 144.312757][T10998] mapped_file 0 [ 144.314185][T10998] dirty 0 [ 144.315185][T10998] writeback 0 [ 144.317056][T10998] workingset_refault_anon 4 [ 144.319383][T10998] workingset_refault_file 5995 [ 144.321081][T10998] swap 34308096 [ 144.322262][T10998] swapcached 0 [ 144.323386][T10998] pgpgin 149769 [ 144.325132][T10998] pgpgout 75663 [ 144.326510][T10998] pgfault 74805 [ 144.328060][T10998] pgmajfault 226 [ 144.329579][T10998] inactive_anon 130273280 [ 144.330979][T10998] active_anon 173260800 [ 144.332287][T10998] inactive_file 4096 [ 144.333530][T10998] active_file 0 [ 144.335569][T10998] unevictable 0 [ 144.337072][T10998] hierarchical_memory_limit 314572800 [ 144.339185][T10998] hierarchical_memsw_limit 9223372036854771712 [ 144.341206][T10998] total_cache 302637056 [ 144.342501][T10998] total_rss 901120 [ 144.342887][ T40] audit: type=1400 audit(1757371457.035:95556): avc: denied { create } for pid=11002 comm="syz.4.1586" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.344519][T10998] total_rss_huge 0 [ 144.352907][ T40] audit: type=1400 audit(1757371457.035:95557): avc: denied { map } for pid=11002 comm="syz.4.1586" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.354153][T10998] total_shmem 302632960 [ 144.364387][ T40] audit: type=1400 audit(1757371457.035:95558): avc: denied { read write } for pid=11002 comm="syz.4.1586" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=41199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.366038][T10998] total_mapped_file 0 [ 144.379976][T10998] total_dirty 0 [ 144.381852][T10998] total_writeback 0 [ 144.386921][T10998] total_workingset_refault_anon 4 [ 144.388980][T10998] total_workingset_refault_file 5995 [ 144.391953][T10998] total_swap 34308096 [ 144.393862][T10998] total_swapcached 0 [ 144.395844][T10998] total_pgpgin 149769 [ 144.397274][T10998] total_pgpgout 75663 [ 144.398617][T10998] total_pgfault 74805 [ 144.400354][T10998] total_pgmajfault 226 [ 144.401746][T10998] total_inactive_anon 130273280 [ 144.403518][T10998] total_active_anon 173260800 [ 144.406415][T10998] total_inactive_file 4096 [ 144.411302][T10998] total_active_file 0 [ 144.412579][T10998] total_unevictable 0 [ 144.414376][T10998] anon_cost 0 [ 144.415684][T10998] file_cost 0 [ 144.416937][T10998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1584,pid=10991,uid=0 [ 144.423635][T10998] Memory cgroup out of memory: Killed process 10991 (syz.0.1584) total-vm:101828kB, anon-rss:732kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 144.482565][ T40] audit: type=1400 audit(1757371457.175:95559): avc: denied { write } for pid=11007 comm="syz.7.1587" name="softnet_stat" dev="proc" ino=4026532917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 144.483761][T10998] syz.0.1584 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 144.492811][T10998] CPU: 1 UID: 0 PID: 10998 Comm: syz.0.1584 Not tainted syzkaller #0 PREEMPT(full) [ 144.492834][T10998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.492841][T10998] Call Trace: [ 144.492846][T10998] [ 144.492851][T10998] dump_stack_lvl+0x16c/0x1f0 [ 144.492869][T10998] dump_header+0x101/0x930 [ 144.492884][T10998] oom_kill_process+0x272/0xa40 [ 144.492900][T10998] out_of_memory+0x350/0x1700 [ 144.492917][T10998] ? __pfx_out_of_memory+0x10/0x10 [ 144.492934][T10998] mem_cgroup_out_of_memory+0x118/0x130 [ 144.492951][T10998] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 144.492971][T10998] ? do_raw_spin_unlock+0x172/0x230 [ 144.492988][T10998] try_charge_memcg+0x72b/0xd50 [ 144.493003][T10998] ? __pfx_try_charge_memcg+0x10/0x10 [ 144.493016][T10998] ? find_held_lock+0x1/0x80 [ 144.493031][T10998] ? rcu_read_unlock+0x17/0x60 [ 144.493048][T10998] charge_memcg+0x8a/0x230 [ 144.493061][T10998] __mem_cgroup_charge+0x2b/0x1e0 [ 144.493075][T10998] shmem_alloc_and_add_folio+0x514/0xc20 [ 144.493098][T10998] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 144.493119][T10998] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 144.493133][T10998] shmem_get_folio_gfp+0x67f/0x1600 [ 144.493148][T10998] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 144.493163][T10998] shmem_write_begin+0x160/0x300 [ 144.493177][T10998] ? __pfx_shmem_write_begin+0x10/0x10 [ 144.493187][T10998] ? timestamp_truncate+0x21e/0x2d0 [ 144.493202][T10998] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 144.493222][T10998] generic_perform_write+0x3c2/0x900 [ 144.493244][T10998] ? __pfx_generic_perform_write+0x10/0x10 [ 144.493264][T10998] ? inode_needs_update_time.part.0+0x191/0x270 [ 144.493282][T10998] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 144.493295][T10998] shmem_file_write_iter+0x10e/0x140 [ 144.493310][T10998] __kernel_write_iter+0x317/0xb10 [ 144.493324][T10998] ? __pfx___kernel_write_iter+0x10/0x10 [ 144.493336][T10998] ? __up_read+0x1f8/0x750 [ 144.493350][T10998] ? dump_user_range+0x756/0xb70 [ 144.493366][T10998] dump_user_range+0x413/0xb70 [ 144.493389][T10998] ? __pfx_dump_user_range+0x10/0x10 [ 144.493402][T10998] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 144.493418][T10998] ? __pfx_writenote+0x10/0x10 [ 144.493435][T10998] elf_core_dump+0x2929/0x3b60 [ 144.493457][T10998] ? __pfx_elf_core_dump+0x10/0x10 [ 144.493470][T10998] ? kasan_save_stack+0x42/0x60 [ 144.493481][T10998] ? kasan_save_stack+0x33/0x60 [ 144.493491][T10998] ? kasan_save_track+0x14/0x30 [ 144.493501][T10998] ? __kasan_kmalloc+0xaa/0xb0 [ 144.493511][T10998] ? vfs_coredump+0x1dca/0x5670 [ 144.493522][T10998] ? get_signal+0x22e3/0x26d0 [ 144.493536][T10998] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 144.493554][T10998] ? 0xffffffffff600000 [ 144.493588][T10998] ? vfs_coredump+0x2b97/0x5670 [ 144.493599][T10998] vfs_coredump+0x2b97/0x5670 [ 144.493617][T10998] ? __pfx_vfs_coredump+0x10/0x10 [ 144.493630][T10998] ? __lock_acquire+0x62e/0x1ce0 [ 144.493650][T10998] ? __lock_acquire+0x62e/0x1ce0 [ 144.493669][T10998] ? lock_acquire+0x179/0x350 [ 144.493693][T10998] ? is_bpf_text_address+0x8a/0x1a0 [ 144.493706][T10998] ? bpf_ksym_find+0x127/0x1c0 [ 144.493724][T10998] ? __kernel_text_address+0xd/0x40 [ 144.493737][T10998] ? unwind_get_return_address+0x59/0xa0 [ 144.493750][T10998] ? arch_stack_walk+0xa6/0x100 [ 144.493769][T10998] ? stack_trace_save+0x8e/0xc0 [ 144.493798][T10998] ? __pfx_stack_trace_save+0x10/0x10 [ 144.493814][T10998] ? stack_depot_save_flags+0x29/0x9c0 [ 144.493831][T10998] ? __lock_acquire+0xb97/0x1ce0 [ 144.493874][T10998] ? proc_coredump_connector+0x2d1/0x4f0 [ 144.493893][T10998] ? __pfx_proc_coredump_connector+0x10/0x10 [ 144.493913][T10998] ? rcu_is_watching+0x12/0xc0 [ 144.493930][T10998] get_signal+0x22e3/0x26d0 [ 144.493948][T10998] ? force_sig_fault+0xc4/0x100 [ 144.493963][T10998] ? __pfx_get_signal+0x10/0x10 [ 144.493981][T10998] arch_do_signal_or_restart+0x8f/0x7d0 [ 144.493996][T10998] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 144.494010][T10998] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 144.494034][T10998] irqentry_exit_to_user_mode+0x12a/0x270 [ 144.494049][T10998] asm_exc_page_fault+0x26/0x30 [ 144.494060][T10998] RIP: 0033:0x7f028158ebf1 [ 144.494074][T10998] Code: Unable to access opcode bytes at 0x7f028158ebc7. [ 144.494079][T10998] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 144.494088][T10998] RAX: 0000000000000000 RBX: 00007f02817b5fa0 RCX: 00007f028158ebe9 [ 144.494096][T10998] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 144.494103][T10998] RBP: 00007f0281611e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.494109][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.494116][T10998] R13: 00007f02817b6038 R14: 00007f02817b5fa0 R15: 00007ffe3be331d8 [ 144.494131][T10998] [ 144.512041][T10998] memory: usage 307200kB, limit 307200kB, failcnt 10844 [ 144.671195][T10998] memory+swap: usage 340704kB, limit 9007199254740988kB, failcnt 0 [ 144.676069][T10998] kmem: usage 10696kB, limit 9007199254740988kB, failcnt 0 [ 144.678768][T10998] Memory cgroup stats for /syz0: [ 144.678850][T10998] cache 302776320 [ 144.681604][T10998] rss 843776 [ 144.682703][T10998] rss_huge 0 [ 144.683777][T10998] shmem 302772224 [ 144.685289][T10998] mapped_file 0 [ 144.686436][T10998] dirty 0 [ 144.687600][T10998] writeback 0 [ 144.689449][T10998] workingset_refault_anon 4 [ 144.692085][T10998] workingset_refault_file 5995 [ 144.694488][T10998] swap 34308096 [ 144.695992][T10998] swapcached 0 [ 144.697100][T10998] pgpgin 149804 [ 144.698228][T10998] pgpgout 75678 [ 144.699572][T10998] pgfault 74809 [ 144.701066][T10998] pgmajfault 226 [ 144.702551][T10998] inactive_anon 83476480 [ 144.704824][T10998] active_anon 220139520 [ 144.706475][T10998] inactive_file 0 [ 144.707969][T10998] active_file 4096 [ 144.709356][T10998] unevictable 0 [ 144.710852][T10998] hierarchical_memory_limit 314572800 [ 144.727529][T10998] hierarchical_memsw_limit 9223372036854771712 [ 144.730787][T10998] total_cache 302776320 [ 144.732475][T10998] total_rss 843776 [ 144.734074][T10998] total_rss_huge 0 [ 144.735581][T10998] total_shmem 302772224 [ 144.738428][T10998] total_mapped_file 0 [ 144.739746][T10998] total_dirty 0 [ 144.741100][T10998] total_writeback 0 [ 144.742398][T10998] total_workingset_refault_anon 4 [ 144.746296][ T40] audit: type=1400 audit(1757371457.445:95560): avc: denied { add_name } for pid=11011 comm="syz.4.1589" name="file6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.750706][T10998] total_workingset_refault_file 5995 [ 144.759140][T10998] total_swap 34308096 [ 144.761302][T10998] total_swapcached 0 [ 144.763092][T10998] total_pgpgin 149804 [ 144.765219][T10998] total_pgpgout 75678 [ 144.767019][T10998] total_pgfault 74809 [ 144.768844][T10998] total_pgmajfault 226 [ 144.770613][T10998] total_inactive_anon 83476480 [ 144.772534][T10998] total_active_anon 220139520 [ 144.775760][T10998] total_inactive_file 0 [ 144.777186][T10998] total_active_file 4096 [ 144.778766][T10998] total_unevictable 0 [ 144.780136][T10998] anon_cost 0 [ 144.781235][T10998] file_cost 0 [ 144.782417][T10998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1584,pid=10998,uid=0 [ 144.790707][T10998] Memory cgroup out of memory: Killed process 10998 (syz.0.1584) total-vm:101828kB, anon-rss:888kB, file-rss:20740kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 144.835257][T11017] Memory cgroup out of memory: Killed process 11017 (syz.0.1591) total-vm:101828kB, anon-rss:732kB, file-rss:21532kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 144.859026][T11013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=11013 comm=syz.7.1588 [ 144.915185][T11023] FAULT_INJECTION: forcing a failure. [ 144.915185][T11023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.920561][T11023] CPU: 3 UID: 0 PID: 11023 Comm: syz.0.1592 Not tainted syzkaller #0 PREEMPT(full) [ 144.920592][T11023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.920600][T11023] Call Trace: [ 144.920606][T11023] [ 144.920611][T11023] dump_stack_lvl+0x16c/0x1f0 [ 144.920651][T11023] should_fail_ex+0x512/0x640 [ 144.920676][T11023] strncpy_from_user+0x3b/0x2e0 [ 144.920693][T11023] getname_flags.part.0+0x8f/0x550 [ 144.920715][T11023] getname_flags+0x93/0xf0 [ 144.920728][T11023] do_sys_openat2+0xb8/0x1d0 [ 144.920758][T11023] ? __pfx_do_sys_openat2+0x10/0x10 [ 144.920778][T11023] ? __fget_files+0x20e/0x3c0 [ 144.920796][T11023] __x64_sys_creat+0xcc/0x120 [ 144.920814][T11023] ? __pfx___x64_sys_creat+0x10/0x10 [ 144.920831][T11023] ? __pfx_ksys_write+0x10/0x10 [ 144.920845][T11023] ? rcu_is_watching+0x12/0xc0 [ 144.920861][T11023] ? do_syscall_64+0x91/0x4c0 [ 144.920882][T11023] do_syscall_64+0xcd/0x4c0 [ 144.920904][T11023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.920923][T11023] RIP: 0033:0x7f028158ebe9 [ 144.920936][T11023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.920949][T11023] RSP: 002b:00007f028236d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 144.920961][T11023] RAX: ffffffffffffffda RBX: 00007f02817b5fa0 RCX: 00007f028158ebe9 [ 144.920969][T11023] RDX: 0000000000000000 RSI: ecf86c37d530495f RDI: 0000200000000500 [ 144.920977][T11023] RBP: 00007f028236d090 R08: 0000000000000000 R09: 0000000000000000 [ 144.920984][T11023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.920992][T11023] R13: 00007f02817b6038 R14: 00007f02817b5fa0 R15: 00007ffe3be331d8 [ 144.921016][T11023] [ 144.996295][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 145.167600][T11030] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 145.329040][T11042] Memory cgroup out of memory: Killed process 11042 (syz.0.1598) total-vm:101828kB, anon-rss:860kB, file-rss:22796kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 145.420022][T11045] Memory cgroup out of memory: Killed process 11045 (syz.0.1601) total-vm:101828kB, anon-rss:732kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 145.480002][T11053] Memory cgroup out of memory: Killed process 11053 (syz.0.1603) total-vm:101696kB, anon-rss:732kB, file-rss:21376kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 145.514621][T11055] FAULT_INJECTION: forcing a failure. [ 145.514621][T11055] name failslab, interval 1, probability 0, space 0, times 0 [ 145.519106][T11055] CPU: 0 UID: 0 PID: 11055 Comm: syz.7.1605 Not tainted syzkaller #0 PREEMPT(full) [ 145.519131][T11055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.519157][T11055] Call Trace: [ 145.519164][T11055] [ 145.519171][T11055] dump_stack_lvl+0x16c/0x1f0 [ 145.519216][T11055] should_fail_ex+0x512/0x640 [ 145.519242][T11055] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 145.519262][T11055] should_failslab+0xc2/0x120 [ 145.519281][T11055] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 145.519319][T11055] ? alloc_empty_file+0x55/0x1e0 [ 145.519346][T11055] alloc_empty_file+0x55/0x1e0 [ 145.519370][T11055] path_openat+0xda/0x2cb0 [ 145.519387][T11055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.519411][T11055] ? __pfx_path_openat+0x10/0x10 [ 145.519431][T11055] ? __lock_acquire+0xb97/0x1ce0 [ 145.519459][T11055] do_filp_open+0x20b/0x470 [ 145.519494][T11055] ? __pfx_do_filp_open+0x10/0x10 [ 145.519530][T11055] ? _raw_spin_unlock+0x28/0x50 [ 145.519555][T11055] ? alloc_fd+0x471/0x7d0 [ 145.519581][T11055] do_sys_openat2+0x11b/0x1d0 [ 145.519611][T11055] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.519634][T11055] ? __fget_files+0x20e/0x3c0 [ 145.519659][T11055] __x64_sys_creat+0xcc/0x120 [ 145.519682][T11055] ? __pfx___x64_sys_creat+0x10/0x10 [ 145.519702][T11055] ? __pfx_ksys_write+0x10/0x10 [ 145.519721][T11055] ? rcu_is_watching+0x12/0xc0 [ 145.519743][T11055] ? do_syscall_64+0x91/0x4c0 [ 145.519764][T11055] do_syscall_64+0xcd/0x4c0 [ 145.519784][T11055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.519800][T11055] RIP: 0033:0x7f518738ebe9 [ 145.519814][T11055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.519831][T11055] RSP: 002b:00007f51881a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 145.519855][T11055] RAX: ffffffffffffffda RBX: 00007f51875b5fa0 RCX: 00007f518738ebe9 [ 145.519867][T11055] RDX: 0000000000000000 RSI: ecf86c37d530495f RDI: 0000200000000500 [ 145.519877][T11055] RBP: 00007f51881a7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.519887][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.519896][T11055] R13: 00007f51875b6038 R14: 00007f51875b5fa0 R15: 00007ffd2c067c58 [ 145.519916][T11055] [ 145.547140][ T5969] Memory cgroup out of memory: Killed process 10486 (syz.0.1426) total-vm:101828kB, anon-rss:988kB, file-rss:20608kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 145.624053][T11056] Memory cgroup out of memory: Killed process 11056 (syz.1.1604) total-vm:98120kB, anon-rss:924kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 145.652985][T11060] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 145.686170][T11061] Memory cgroup out of memory: Killed process 11061 (syz.1.1608) total-vm:97988kB, anon-rss:952kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 145.828084][T11071] program syz.1.1612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.865293][ T63] Bluetooth: hci1: command tx timeout [ 145.924327][T11080] FAULT_INJECTION: forcing a failure. [ 145.924327][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 145.929477][T11080] CPU: 2 UID: 0 PID: 11080 Comm: syz.0.1615 Not tainted syzkaller #0 PREEMPT(full) [ 145.929493][T11080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.929500][T11080] Call Trace: [ 145.929504][T11080] [ 145.929509][T11080] dump_stack_lvl+0x16c/0x1f0 [ 145.929526][T11080] should_fail_ex+0x512/0x640 [ 145.929539][T11080] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 145.929553][T11080] should_failslab+0xc2/0x120 [ 145.929566][T11080] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 145.929578][T11080] ? security_file_alloc+0x34/0x2b0 [ 145.929597][T11080] security_file_alloc+0x34/0x2b0 [ 145.929620][T11080] init_file+0x93/0x4c0 [ 145.929635][T11080] alloc_empty_file+0x73/0x1e0 [ 145.929651][T11080] path_openat+0xda/0x2cb0 [ 145.929662][T11080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.929679][T11080] ? __pfx_path_openat+0x10/0x10 [ 145.929693][T11080] ? __lock_acquire+0xb97/0x1ce0 [ 145.929712][T11080] do_filp_open+0x20b/0x470 [ 145.929725][T11080] ? __pfx_do_filp_open+0x10/0x10 [ 145.929747][T11080] ? _raw_spin_unlock+0x28/0x50 [ 145.929757][T11080] ? alloc_fd+0x471/0x7d0 [ 145.929774][T11080] do_sys_openat2+0x11b/0x1d0 [ 145.929790][T11080] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.929806][T11080] ? __fget_files+0x20e/0x3c0 [ 145.929822][T11080] __x64_sys_creat+0xcc/0x120 [ 145.929838][T11080] ? __pfx___x64_sys_creat+0x10/0x10 [ 145.929855][T11080] ? __pfx_ksys_write+0x10/0x10 [ 145.929873][T11080] ? rcu_is_watching+0x12/0xc0 [ 145.929892][T11080] ? do_syscall_64+0x91/0x4c0 [ 145.929912][T11080] do_syscall_64+0xcd/0x4c0 [ 145.929930][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.929942][T11080] RIP: 0033:0x7f028158ebe9 [ 145.929952][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.929964][T11080] RSP: 002b:00007f028236d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 145.929975][T11080] RAX: ffffffffffffffda RBX: 00007f02817b5fa0 RCX: 00007f028158ebe9 [ 145.929983][T11080] RDX: 0000000000000000 RSI: ecf86c37d530495f RDI: 0000200000000500 [ 145.929990][T11080] RBP: 00007f028236d090 R08: 0000000000000000 R09: 0000000000000000 [ 145.929997][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.930004][T11080] R13: 00007f02817b6038 R14: 00007f02817b5fa0 R15: 00007ffe3be331d8 [ 145.930017][T11080] [ 146.052553][T11091] dvmrp0: entered allmulticast mode [ 146.058456][T11093] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 146.137618][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 146.288229][T11107] oom_kill_process: 7 callbacks suppressed [ 146.288243][T11107] syz.1.1624 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 146.298209][T11107] CPU: 0 UID: 0 PID: 11107 Comm: syz.1.1624 Not tainted syzkaller #0 PREEMPT(full) [ 146.298227][T11107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.298235][T11107] Call Trace: [ 146.298239][T11107] [ 146.298243][T11107] dump_stack_lvl+0x16c/0x1f0 [ 146.298261][T11107] dump_header+0x101/0x930 [ 146.298275][T11107] oom_kill_process+0x272/0xa40 [ 146.298289][T11107] out_of_memory+0x350/0x1700 [ 146.298305][T11107] ? __pfx_out_of_memory+0x10/0x10 [ 146.298321][T11107] mem_cgroup_out_of_memory+0x118/0x130 [ 146.298371][T11107] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 146.298390][T11107] ? do_raw_spin_unlock+0x172/0x230 [ 146.298407][T11107] try_charge_memcg+0x72b/0xd50 [ 146.298423][T11107] ? __pfx_try_charge_memcg+0x10/0x10 [ 146.298435][T11107] ? peak_open+0x21/0x50 [ 146.298450][T11107] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 146.298469][T11107] obj_cgroup_charge_pages+0x22/0x1f0 [ 146.298483][T11107] obj_cgroup_charge_account+0x5c/0xa0 [ 146.298498][T11107] __memcg_slab_post_alloc_hook+0x30c/0x960 [ 146.298514][T11107] ? kasan_save_track+0x14/0x30 [ 146.298528][T11107] kmem_cache_alloc_noprof+0x307/0x3b0 [ 146.298540][T11107] ? alloc_buffer_head+0x21/0x160 [ 146.298561][T11107] alloc_buffer_head+0x21/0x160 [ 146.298574][T11107] folio_alloc_buffers+0x2b5/0x6c0 [ 146.298592][T11107] create_empty_buffers+0x36/0x480 [ 146.298649][T11107] folio_create_buffers+0x109/0x150 [ 146.298667][T11107] __block_write_begin_int+0x320/0x16d0 [ 146.298687][T11107] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 146.298705][T11107] ? __pfx___block_write_begin_int+0x10/0x10 [ 146.298723][T11107] ? __pfx___might_resched+0x10/0x10 [ 146.298739][T11107] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 146.298752][T11107] block_page_mkwrite+0x3d3/0x4b0 [ 146.298771][T11107] ext4_page_mkwrite+0x1362/0x1880 [ 146.298794][T11107] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 146.298812][T11107] ? do_wp_page+0x1aa7/0x4f00 [ 146.298830][T11107] do_page_mkwrite+0x174/0x380 [ 146.298844][T11107] ? __pfx_filemap_map_pages+0x10/0x10 [ 146.298856][T11107] do_pte_missing+0x29d/0x3ba0 [ 146.298873][T11107] ? find_held_lock+0x2b/0x80 [ 146.298887][T11107] ? __handle_mm_fault+0x14fd/0x2a50 [ 146.298907][T11107] __handle_mm_fault+0x152a/0x2a50 [ 146.298929][T11107] ? __pfx___handle_mm_fault+0x10/0x10 [ 146.298948][T11107] ? lock_vma_under_rcu+0x1eb/0x530 [ 146.298970][T11107] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 146.298991][T11107] handle_mm_fault+0x589/0xd10 [ 146.299009][T11107] ? __bpf_trace_exceptions+0x1/0x40 [ 146.299029][T11107] do_user_addr_fault+0x60c/0x1370 [ 146.299042][T11107] ? rcu_is_watching+0x12/0xc0 [ 146.299058][T11107] exc_page_fault+0x5c/0xb0 [ 146.299071][T11107] asm_exc_page_fault+0x26/0x30 [ 146.299082][T11107] RIP: 0033:0x7f9fd9e6106c [ 146.299093][T11107] Code: 47 e8 00 01 48 8d 50 ff 48 89 15 07 47 e8 00 88 48 ff 8b 2d ee 46 e8 00 e8 21 5a ff ff 48 8b 05 fa 46 e8 00 41 bc 04 00 00 00 <89> 28 48 83 c0 08 66 44 89 60 fc 83 05 ea 46 e8 00 01 66 83 3d e6 [ 146.299104][T11107] RSP: 002b:00007fff60a9c4a0 EFLAGS: 00010202 [ 146.299113][T11107] RAX: 0000001b31a24220 RBX: 00007f9fdace5720 RCX: 0000000000000003 [ 146.299121][T11107] RDX: 0000001b31a24220 RSI: 0000000000000008 RDI: 00007f9fdace5720 [ 146.299128][T11107] RBP: 0000000000000041 R08: 00007f9fda1b6038 R09: 00007f9fda1a2000 [ 146.299134][T11107] R10: 00007f9fd99ff008 R11: 0000000000000002 R12: 0000000000000004 [ 146.299141][T11107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.299155][T11107] [ 146.299160][T11107] memory: usage 307200kB, limit 307200kB, failcnt 29817 [ 146.356720][T11112] netlink: 'syz.4.1626': attribute type 25 has an invalid length. [ 146.360543][T11107] memory+swap: usage 384304kB, limit 9007199254740988kB, failcnt 0 [ 146.363559][T11112] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 146.366411][T11107] kmem: usage 4628kB, limit 9007199254740988kB, failcnt 0 [ 146.416397][ T840] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.421355][T11107] Memory cgroup stats for [ 146.435300][T11115] 9pnet_virtio: no channels available for device syz [ 146.441257][T11107] /syz1 [ 146.446119][T11115] FAULT_INJECTION: forcing a failure. [ 146.446119][T11115] name failslab, interval 1, probability 0, space 0, times 0 [ 146.447975][T11107] : [ 146.450978][T11115] CPU: 2 UID: 0 PID: 11115 Comm: syz.4.1628 Not tainted syzkaller #0 PREEMPT(full) [ 146.451007][T11115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.451019][T11115] Call Trace: [ 146.451026][T11115] [ 146.451034][T11115] dump_stack_lvl+0x16c/0x1f0 [ 146.451060][T11115] should_fail_ex+0x512/0x640 [ 146.451083][T11115] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 146.451108][T11115] should_failslab+0xc2/0x120 [ 146.451131][T11115] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 146.451151][T11115] ? __d_alloc+0x32/0xae0 [ 146.451177][T11115] __d_alloc+0x32/0xae0 [ 146.451218][T11115] d_alloc_parallel+0x111/0x1480 [ 146.451254][T11115] ? find_held_lock+0x2b/0x80 [ 146.451279][T11115] ? __pfx_d_alloc_parallel+0x10/0x10 [ 146.451310][T11115] ? __d_lookup+0x266/0x4a0 [ 146.451345][T11115] lookup_open.isra.0+0x665/0x1580 [ 146.451380][T11115] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 146.451424][T11115] ? __pfx_down_write+0x10/0x10 [ 146.451445][T11115] ? mnt_get_write_access+0x20c/0x300 [ 146.451477][T11115] path_openat+0x893/0x2cb0 [ 146.451507][T11115] ? __pfx_path_openat+0x10/0x10 [ 146.451529][T11115] ? __lock_acquire+0xb97/0x1ce0 [ 146.451561][T11115] do_filp_open+0x20b/0x470 [ 146.451582][T11115] ? __pfx_do_filp_open+0x10/0x10 [ 146.451629][T11115] ? _raw_spin_unlock+0x28/0x50 [ 146.451646][T11115] ? alloc_fd+0x471/0x7d0 [ 146.451674][T11115] do_sys_openat2+0x11b/0x1d0 [ 146.451699][T11115] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.451725][T11115] ? __fget_files+0x20e/0x3c0 [ 146.451752][T11115] __x64_sys_creat+0xcc/0x120 [ 146.451778][T11115] ? __pfx___x64_sys_creat+0x10/0x10 [ 146.451802][T11115] ? __pfx_ksys_write+0x10/0x10 [ 146.451825][T11115] ? rcu_is_watching+0x12/0xc0 [ 146.451848][T11115] ? do_syscall_64+0x91/0x4c0 [ 146.451869][T11115] do_syscall_64+0xcd/0x4c0 [ 146.451892][T11115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.451911][T11115] RIP: 0033:0x7f9eb218ebe9 [ 146.451928][T11115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.451947][T11115] RSP: 002b:00007f9eb2fca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 146.451967][T11115] RAX: ffffffffffffffda RBX: 00007f9eb23b5fa0 RCX: 00007f9eb218ebe9 [ 146.451980][T11115] RDX: 0000000000000000 RSI: ecf86c37d530495f RDI: 0000200000000500 [ 146.451993][T11115] RBP: 00007f9eb2fca090 R08: 0000000000000000 R09: 0000000000000000 [ 146.452005][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.452016][T11115] R13: 00007f9eb23b6038 R14: 00007f9eb23b5fa0 R15: 00007ffd41c6b9d8 [ 146.452044][T11115] [ 146.546811][T11107] cache 309317632 [ 146.548457][T11107] rss 200704 [ 146.549882][T11107] rss_huge 0 [ 146.551339][T11107] shmem 309313536 [ 146.553174][T11107] mapped_file 0 [ 146.554791][T11107] dirty 0 [ 146.556508][T11107] writeback 0 [ 146.558277][T11107] workingset_refault_anon 55 [ 146.561231][T11107] workingset_refault_file 6258 [ 146.563827][T11107] swap 78954496 [ 146.565862][T11107] swapcached 159744 [ 146.567573][T11107] pgpgin 168751 [ 146.569053][T11107] pgpgout 93661 [ 146.571195][T11107] pgfault 60926 [ 146.572624][T11107] pgmajfault 291 [ 146.574258][T11107] inactive_anon 99987456 [ 146.579116][T11107] active_anon 209666048 [ 146.580892][T11107] inactive_file 4096 [ 146.582512][T11107] active_file 0 [ 146.583963][T11107] unevictable 0 [ 146.586001][T11107] hierarchical_memory_limit 314572800 [ 146.586449][ T840] usb 5-1: Using ep0 maxpacket: 8 [ 146.588164][T11107] hierarchical_memsw_limit 9223372036854771712 [ 146.592499][T11107] total_cache 309317632 [ 146.596116][ T840] usb 5-1: device descriptor read/all, error -71 [ 146.598303][T11107] total_rss 200704 [ 146.598897][T11125] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 146.600248][T11107] total_rss_huge 0 [ 146.610613][T11107] total_shmem 309313536 [ 146.612555][T11107] total_mapped_file 0 [ 146.614180][T11107] total_dirty 0 [ 146.616126][T11107] total_writeback 0 [ 146.617993][T11107] total_workingset_refault_anon 55 [ 146.620458][T11107] total_workingset_refault_file 6258 [ 146.622707][T11107] total_swap 78954496 [ 146.624583][T11107] total_swapcached 159744 [ 146.626402][T11107] total_pgpgin 168751 [ 146.628195][T11107] total_pgpgout 93661 [ 146.629871][T11107] total_pgfault 60926 [ 146.631627][T11107] total_pgmajfault 291 [ 146.633324][T11107] total_inactive_anon 99987456 [ 146.635534][T11107] total_active_anon 209666048 [ 146.637471][T11107] total_inactive_file 4096 [ 146.639325][T11107] total_active_file 0 [ 146.641028][T11107] total_unevictable 0 [ 146.642782][T11107] anon_cost 0 [ 146.644161][T11107] file_cost 0 [ 146.645957][T11107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1624,pid=11107,uid=0 [ 146.656262][T11107] Memory cgroup out of memory: Killed process 11107 (syz.1.1624) total-vm:101828kB, anon-rss:1080kB, file-rss:22744kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 146.868914][T11139] syz.1.1635 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 146.872778][T11139] CPU: 0 UID: 0 PID: 11139 Comm: syz.1.1635 Not tainted syzkaller #0 PREEMPT(full) [ 146.872795][T11139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.872802][T11139] Call Trace: [ 146.872807][T11139] [ 146.872812][T11139] dump_stack_lvl+0x16c/0x1f0 [ 146.872830][T11139] dump_header+0x101/0x930 [ 146.872844][T11139] oom_kill_process+0x272/0xa40 [ 146.872863][T11139] out_of_memory+0x350/0x1700 [ 146.872878][T11139] ? __pfx_out_of_memory+0x10/0x10 [ 146.872894][T11139] mem_cgroup_out_of_memory+0x118/0x130 [ 146.872911][T11139] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 146.872930][T11139] ? do_raw_spin_unlock+0x172/0x230 [ 146.872945][T11139] try_charge_memcg+0x72b/0xd50 [ 146.872961][T11139] ? __pfx_try_charge_memcg+0x10/0x10 [ 146.872973][T11139] ? peak_open+0x21/0x50 [ 146.872988][T11139] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 146.873007][T11139] obj_cgroup_charge_pages+0x22/0x1f0 [ 146.873020][T11139] __memcg_kmem_charge_page+0xc2/0x2e0 [ 146.873035][T11139] __alloc_frozen_pages_noprof+0x325/0x23f0 [ 146.873048][T11139] ? page_table_check_set+0x631/0x750 [ 146.873061][T11139] ? xas_move_index+0xb0/0x110 [ 146.873075][T11139] ? xas_find+0x303/0x890 [ 146.873089][T11139] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 146.873103][T11139] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 146.873114][T11139] ? xas_next_entry+0x26f/0x3c0 [ 146.873132][T11139] ? find_held_lock+0x2b/0x80 [ 146.873145][T11139] ? find_held_lock+0x2b/0x80 [ 146.873163][T11139] ? filemap_map_pages+0xf58/0x1670 [ 146.873176][T11139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.873191][T11139] ? policy_nodemask+0xea/0x4e0 [ 146.873206][T11139] alloc_pages_mpol+0x1fb/0x550 [ 146.873220][T11139] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 146.873232][T11139] ? __pfx_filemap_map_pages+0x10/0x10 [ 146.873248][T11139] alloc_pages_noprof+0x131/0x390 [ 146.873262][T11139] pte_alloc_one+0x1c/0x3a0 [ 146.873276][T11139] do_pte_missing+0x1afc/0x3ba0 [ 146.873294][T11139] ? find_held_lock+0x2b/0x80 [ 146.873308][T11139] ? __lock_acquire+0x62e/0x1ce0 [ 146.873327][T11139] __handle_mm_fault+0x152a/0x2a50 [ 146.873349][T11139] ? __pfx___handle_mm_fault+0x10/0x10 [ 146.873368][T11139] ? lock_vma_under_rcu+0x1eb/0x530 [ 146.873390][T11139] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 146.873411][T11139] handle_mm_fault+0x589/0xd10 [ 146.873429][T11139] ? __bpf_trace_exceptions+0x1/0x40 [ 146.873450][T11139] do_user_addr_fault+0x60c/0x1370 [ 146.873463][T11139] ? rcu_is_watching+0x12/0xc0 [ 146.873479][T11139] exc_page_fault+0x5c/0xb0 [ 146.873491][T11139] asm_exc_page_fault+0x26/0x30 [ 146.873503][T11139] RIP: 0033:0x7f9fd9e6ef3d [ 146.873514][T11139] Code: ff 48 83 e8 01 48 89 ee bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 e9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 20 20 00 00 0f 85 11 fd ff ff e9 c0 fd ff ff e8 1b 2b [ 146.873525][T11139] RSP: 002b:00007fff60a9c430 EFLAGS: 00010246 [ 146.873535][T11139] RAX: 000000110c428000 RBX: 00007f9fdace5720 RCX: 0000000000000000 [ 146.873542][T11139] RDX: 0000000000001503 RSI: 00000000000031d4 RDI: 0000000000000001 [ 146.873549][T11139] RBP: ffffffff812c7503 R08: 00007f9fda1b6038 R09: 00007f9fda1a2000 [ 146.873556][T11139] R10: 00007f9fd99ff008 R11: 0000000000000000 R12: 0000000000000000 [ 146.873563][T11139] R13: 0000000000000000 R14: ffffffff812c7503 R15: 00000000000000d2 [ 146.873571][T11139] ? in_gate_area_no_mm+0x13/0x70 [ 146.873587][T11139] ? in_gate_area_no_mm+0x13/0x70 [ 146.873609][T11139] [ 146.873614][T11139] memory: usage 307200kB, limit 307200kB, failcnt 30073 [ 146.939649][T11145] 8021q: VLANs not supported on vcan0 [ 146.940571][T11139] memory+swap: usage 384304kB, limit 9007199254740988kB, failcnt 0 [ 146.986816][T11149] FAULT_INJECTION: forcing a failure. [ 146.986816][T11149] name failslab, interval 1, probability 0, space 0, times 0 [ 146.986846][T11149] CPU: 3 UID: 0 PID: 11149 Comm: syz.4.1638 Not tainted syzkaller #0 PREEMPT(full) [ 146.986860][T11149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.986867][T11149] Call Trace: [ 146.986871][T11149] [ 146.986876][T11149] dump_stack_lvl+0x16c/0x1f0 [ 146.986892][T11149] should_fail_ex+0x512/0x640 [ 146.986905][T11149] ? fs_reclaim_acquire+0xae/0x150 [ 146.986922][T11149] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 146.986940][T11149] should_failslab+0xc2/0x120 [ 146.986953][T11149] __kmalloc_noprof+0xd2/0x510 [ 146.986968][T11149] tomoyo_realpath_from_path+0xc2/0x6e0 [ 146.986986][T11149] ? tomoyo_profile+0x47/0x60 [ 146.986998][T11149] tomoyo_path_number_perm+0x245/0x580 [ 146.987012][T11149] ? tomoyo_path_number_perm+0x237/0x580 [ 146.987028][T11149] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.987056][T11149] ? d_alloc_parallel+0xae4/0x1480 [ 146.987074][T11149] ? current_check_access_path+0x33c/0x460 [ 146.987089][T11149] ? __pfx_current_check_access_path+0x10/0x10 [ 146.987107][T11149] tomoyo_path_mknod+0x10c/0x190 [ 146.987118][T11149] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 146.987130][T11149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.987146][T11149] security_path_mknod+0x161/0x310 [ 146.987164][T11149] lookup_open.isra.0+0xc17/0x1580 [ 146.987186][T11149] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 146.987212][T11149] ? __pfx_down_write+0x10/0x10 [ 146.987225][T11149] ? mnt_get_write_access+0x20c/0x300 [ 146.987244][T11149] path_openat+0x893/0x2cb0 [ 146.987261][T11149] ? __pfx_path_openat+0x10/0x10 [ 146.987275][T11149] ? __lock_acquire+0xb97/0x1ce0 [ 146.987294][T11149] do_filp_open+0x20b/0x470 [ 146.987307][T11149] ? __pfx_do_filp_open+0x10/0x10 [ 146.987329][T11149] ? _raw_spin_unlock+0x28/0x50 [ 146.987339][T11149] ? alloc_fd+0x471/0x7d0 [ 146.987355][T11149] do_sys_openat2+0x11b/0x1d0 [ 146.987371][T11149] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.987387][T11149] ? __fget_files+0x20e/0x3c0 [ 146.987403][T11149] __x64_sys_creat+0xcc/0x120 [ 146.987419][T11149] ? __pfx___x64_sys_creat+0x10/0x10 [ 146.987435][T11149] ? __pfx_ksys_write+0x10/0x10 [ 146.987448][T11149] ? rcu_is_watching+0x12/0xc0 [ 146.987462][T11149] ? do_syscall_64+0x91/0x4c0 [ 146.987476][T11149] do_syscall_64+0xcd/0x4c0 [ 146.987490][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.987502][T11149] RIP: 0033:0x7f9eb218ebe9 [ 146.987511][T11149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.987522][T11149] RSP: 002b:00007f9eb2fca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 146.987533][T11149] RAX: ffffffffffffffda RBX: 00007f9eb23b5fa0 RCX: 00007f9eb218ebe9 [ 146.987540][T11149] RDX: 0000000000000000 RSI: ecf86c37d530495f RDI: 0000200000000500 [ 146.987547][T11149] RBP: 00007f9eb2fca090 R08: 0000000000000000 R09: 0000000000000000 [ 146.987554][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.987561][T11149] R13: 00007f9eb23b6038 R14: 00007f9eb23b5fa0 R15: 00007ffd41c6b9d8 [ 146.987575][T11149] [ 146.987580][T11149] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.990843][T11139] kmem: usage 4632kB, limit 9007199254740988kB, failcnt 0 [ 147.130089][T11139] Memory cgroup stats for /syz1: [ 147.130164][T11139] cache 309313536 [ 147.132336][T11151] 9pnet_virtio: no channels available for device syz [ 147.133327][T11139] rss 196608 [ 147.136713][T11139] rss_huge 0 [ 147.137782][T11139] shmem 309313536 [ 147.138960][T11139] mapped_file 0 [ 147.140131][T11139] dirty 0 [ 147.141339][T11139] writeback 0 [ 147.142534][T11139] workingset_refault_anon 55 [ 147.144091][T11139] workingset_refault_file 6258 [ 147.145662][T11139] swap 78954496 [ 147.146717][T11139] swapcached 159744 [ 147.147978][T11139] pgpgin 168823 [ 147.149120][T11139] pgpgout 93736 [ 147.150431][T11139] pgfault 61134 [ 147.151514][T11139] pgmajfault 291 [ 147.152670][T11139] inactive_anon 221573120 [ 147.154174][T11139] active_anon 88076288 [ 147.155705][T11139] inactive_file 0 [ 147.156889][ T5378] pmem0: [POWERTEC] [ 147.157153][T11139] active_file 0 [ 147.160008][T11139] unevictable 0 [ 147.161194][T11139] hierarchical_memory_limit 314572800 [ 147.162996][T11139] hierarchical_memsw_limit 9223372036854771712 [ 147.165341][T11139] total_cache 309313536 [ 147.166745][T11139] total_rss 196608 [ 147.167950][T11139] total_rss_huge 0 [ 147.169299][T11139] total_shmem 309313536 [ 147.170663][T11139] total_mapped_file 0 [ 147.172018][T11139] total_dirty 0 [ 147.173105][T11139] total_writeback 0 [ 147.174555][T11139] total_workingset_refault_anon 55 [ 147.176309][T11139] total_workingset_refault_file 6258 [ 147.177993][T11139] total_swap 78954496 [ 147.179225][T11139] total_swapcached 159744 [ 147.180577][T11139] total_pgpgin 168823 [ 147.181866][T11139] total_pgpgout 93736 [ 147.183162][T11139] total_pgfault 61134 [ 147.184476][T11139] total_pgmajfault 291 [ 147.186592][T11139] total_inactive_anon 221573120 [ 147.188248][T11139] total_active_anon 88076288 [ 147.189760][T11139] total_inactive_file 0 [ 147.191623][T11139] total_active_file 0 [ 147.193667][T11139] total_unevictable 0 [ 147.198475][T11139] anon_cost 0 [ 147.199930][T11139] file_cost 0 [ 147.201252][T11139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1635,pid=11139,uid=0 [ 147.207227][T11139] Memory cgroup out of memory: Killed process 11139 (syz.1.1635) total-vm:101828kB, anon-rss:1080kB, file-rss:21796kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 147.277113][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1644'. [ 147.281085][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1644'. [ 147.434213][T11174] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 147.440048][T11175] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1647'. [ 147.483618][T11179] program syz.0.1650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.515258][ T63] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 147.531147][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 147.531523][T11183] program syz.4.1651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 147.567331][T11186] syz.1.1653 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 147.570347][T11186] CPU: 2 UID: 0 PID: 11186 Comm: syz.1.1653 Not tainted syzkaller #0 PREEMPT(full) [ 147.570363][T11186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.570371][T11186] Call Trace: [ 147.570376][T11186] [ 147.570381][T11186] dump_stack_lvl+0x16c/0x1f0 [ 147.570400][T11186] dump_header+0x101/0x930 [ 147.570416][T11186] oom_kill_process+0x272/0xa40 [ 147.570431][T11186] out_of_memory+0x350/0x1700 [ 147.570447][T11186] ? __pfx_out_of_memory+0x10/0x10 [ 147.570464][T11186] mem_cgroup_out_of_memory+0x118/0x130 [ 147.570482][T11186] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 147.570502][T11186] ? do_raw_spin_unlock+0x172/0x230 [ 147.570519][T11186] try_charge_memcg+0x72b/0xd50 [ 147.570535][T11186] ? __pfx_try_charge_memcg+0x10/0x10 [ 147.570549][T11186] ? peak_open+0x21/0x50 [ 147.570564][T11186] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 147.570584][T11186] obj_cgroup_charge_pages+0x22/0x1f0 [ 147.570599][T11186] __memcg_kmem_charge_page+0xc2/0x2e0 [ 147.570614][T11186] memcg_charge_kernel_stack+0xc3/0x1f0 [ 147.570641][T11186] copy_process+0x5b9/0x7690 [ 147.570657][T11186] ? page_table_check_set+0x627/0x750 [ 147.570676][T11186] ? __pfx_copy_process+0x10/0x10 [ 147.570696][T11186] ? _copy_from_user+0x59/0xd0 [ 147.570715][T11186] kernel_clone+0xfc/0x930 [ 147.570732][T11186] ? __pfx_kernel_clone+0x10/0x10 [ 147.570752][T11186] ? __lock_acquire+0xb97/0x1ce0 [ 147.570774][T11186] __do_sys_clone3+0x212/0x290 [ 147.570791][T11186] ? __pfx___do_sys_clone3+0x10/0x10 [ 147.570827][T11186] do_syscall_64+0xcd/0x4c0 [ 147.570842][T11186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.570855][T11186] RIP: 0033:0x7f9fd9fc3449 [ 147.570866][T11186] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 12 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 147.570880][T11186] RSP: 002b:00007fff60a9c2c8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 147.570892][T11186] RAX: ffffffffffffffda RBX: 00007f9fd9f45860 RCX: 00007f9fd9fc3449 [ 147.570900][T11186] RDX: 00007f9fd9f45860 RSI: 0000000000000058 RDI: 00007fff60a9c310 [ 147.570907][T11186] RBP: 00007f9fd81f66c0 R08: 00007f9fd81f66c0 R09: 00007fff60a9c3f7 [ 147.570914][T11186] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 147.570922][T11186] R13: 000000000000000b R14: 00007fff60a9c310 R15: 00007fff60a9c3f8 [ 147.570937][T11186] [ 147.570942][T11186] memory: usage 307200kB, limit 307200kB, failcnt 30645 [ 147.658136][T11186] memory+swap: usage 384168kB, limit 9007199254740988kB, failcnt 0 [ 147.660950][T11186] kmem: usage 4728kB, limit 9007199254740988kB, failcnt 0 [ 147.663383][T11186] Memory cgroup stats for /syz1: [ 147.663518][T11186] cache 309325824 [ 147.667703][T11186] rss 126976 [ 147.669083][T11186] rss_huge 0 [ 147.670461][T11186] shmem 309313536 [ 147.672150][T11186] mapped_file 12288 [ 147.673729][T11186] dirty 0 [ 147.675002][T11186] writeback 0 [ 147.678468][T11186] workingset_refault_anon 56 [ 147.680050][T11186] workingset_refault_file 6319 [ 147.681616][T11186] swap 78950400 [ 147.682742][T11186] swapcached 163840 [ 147.683935][T11186] pgpgin 169028 [ 147.685030][T11186] pgpgout 93954 [ 147.689123][T11186] pgfault 61576 [ 147.692770][T11186] pgmajfault 298 [ 147.694467][T11186] inactive_anon 221597696 [ 147.697219][T11186] active_anon 87986176 [ 147.698136][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1654'. [ 147.699798][T11186] inactive_file 0 [ 147.704250][T11186] active_file 12288 [ 147.705727][T11186] unevictable 0 [ 147.706938][T11186] hierarchical_memory_limit 314572800 [ 147.709108][T11186] hierarchical_memsw_limit 9223372036854771712 [ 147.711164][T11186] total_cache 309325824 [ 147.712742][T11186] total_rss 126976 [ 147.714247][T11186] total_rss_huge 0 [ 147.725469][T11186] total_shmem 309313536 [ 147.727121][T11186] total_mapped_file 12288 [ 147.729157][T11186] total_dirty 0 [ 147.730588][T11186] total_writeback 0 [ 147.732133][T11186] total_workingset_refault_anon 56 [ 147.734242][T11186] total_workingset_refault_file 6319 [ 147.738176][T11186] total_swap 78950400 [ 147.739460][T11186] total_swapcached 163840 [ 147.740765][T11186] total_pgpgin 169028 [ 147.742022][T11186] total_pgpgout 93954 [ 147.743310][T11186] total_pgfault 61576 [ 147.744567][T11186] total_pgmajfault 298 [ 147.747289][T11186] total_inactive_anon 221597696 [ 147.748852][T11186] total_active_anon 87986176 [ 147.750226][T11186] total_inactive_file 0 [ 147.751524][T11186] total_active_file 12288 [ 147.752997][T11186] total_unevictable 0 [ 147.754228][T11186] anon_cost 0 [ 147.756112][T11186] file_cost 0 [ 147.757171][T11186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1653,pid=11186,uid=0 [ 147.761720][T11186] Memory cgroup out of memory: Killed process 11186 (syz.1.1653) total-vm:98120kB, anon-rss:952kB, file-rss:21532kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 147.766351][T11200] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 147.839344][T11207] syz.1.1660 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 147.842900][T11207] CPU: 2 UID: 0 PID: 11207 Comm: syz.1.1660 Not tainted syzkaller #0 PREEMPT(full) [ 147.842925][T11207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.842935][T11207] Call Trace: [ 147.842942][T11207] [ 147.842949][T11207] dump_stack_lvl+0x16c/0x1f0 [ 147.842975][T11207] dump_header+0x101/0x930 [ 147.842997][T11207] oom_kill_process+0x272/0xa40 [ 147.843019][T11207] out_of_memory+0x350/0x1700 [ 147.843042][T11207] ? __pfx_out_of_memory+0x10/0x10 [ 147.843070][T11207] mem_cgroup_out_of_memory+0x118/0x130 [ 147.843093][T11207] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 147.843124][T11207] ? do_raw_spin_unlock+0x172/0x230 [ 147.843149][T11207] try_charge_memcg+0x72b/0xd50 [ 147.843170][T11207] ? __pfx_try_charge_memcg+0x10/0x10 [ 147.843183][T11207] ? find_held_lock+0x1/0x80 [ 147.843197][T11207] ? rcu_read_unlock+0x17/0x60 [ 147.843214][T11207] charge_memcg+0x8a/0x230 [ 147.843226][T11207] __mem_cgroup_charge+0x2b/0x1e0 [ 147.843241][T11207] do_wp_page+0x1171/0x4f00 [ 147.843260][T11207] ? __pfx_do_wp_page+0x10/0x10 [ 147.843277][T11207] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 147.843289][T11207] ? ___pte_offset_map+0x2ad/0x4f0 [ 147.843306][T11207] __handle_mm_fault+0x1b2d/0x2a50 [ 147.843333][T11207] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.843363][T11207] ? lock_vma_under_rcu+0x1eb/0x530 [ 147.843397][T11207] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 147.843430][T11207] handle_mm_fault+0x589/0xd10 [ 147.843459][T11207] ? __bpf_trace_exceptions+0x1/0x40 [ 147.843489][T11207] do_user_addr_fault+0x60c/0x1370 [ 147.843509][T11207] ? rcu_is_watching+0x12/0xc0 [ 147.843534][T11207] exc_page_fault+0x5c/0xb0 [ 147.843556][T11207] asm_exc_page_fault+0x26/0x30 [ 147.843572][T11207] RIP: 0033:0x7f9fd9e4da2c [ 147.843588][T11207] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 147.843604][T11207] RSP: 002b:00007fff60a9c428 EFLAGS: 00010246 [ 147.843627][T11207] RAX: 0000000000000000 RBX: 00007f9fdace5720 RCX: 0000000000000000 [ 147.843637][T11207] RDX: 0000000000001214 RSI: ffffffff84967214 RDI: 0000000000000000 [ 147.843647][T11207] RBP: ffffffff84967214 R08: 00007f9fda1a0000 R09: 00007f9fda1a2000 [ 147.843659][T11207] R10: 0000000084967218 R11: 0000000000000000 R12: 0000000000000000 [ 147.843666][T11207] R13: 0000000000000000 R14: ffffffff84967214 R15: 00000000000000a9 [ 147.843674][T11207] ? slow_avc_audit+0x104/0x210 [ 147.843687][T11207] ? slow_avc_audit+0x104/0x210 [ 147.843700][T11207] ? slow_avc_audit+0x104/0x210 [ 147.843712][T11207] [ 147.843717][T11207] memory: usage 307200kB, limit 307200kB, failcnt 30752 [ 147.945663][ T63] Bluetooth: hci1: command tx timeout [ 147.947070][T11207] memory+swap: usage 384176kB, limit 9007199254740988kB, failcnt 0 [ 147.962216][T11207] kmem: usage 4676kB, limit 9007199254740988kB, failcnt 0 [ 147.965163][T11207] Memory cgroup stats for /syz1: [ 147.965281][T11207] cache 309313536 [ 147.969284][T11207] rss 200704 [ 147.970642][T11207] rss_huge 0 [ 147.971936][T11207] shmem 309313536 [ 147.973443][T11207] mapped_file 0 [ 147.974900][T11207] dirty 0 [ 147.976801][T11207] writeback 0 [ 147.978198][T11207] workingset_refault_anon 56 [ 147.980077][T11207] workingset_refault_file 6319 [ 147.982170][T11207] swap 78950400 [ 147.983670][T11207] swapcached 163840 [ 147.985178][T11207] pgpgin 169062 [ 147.987912][T11207] pgpgout 93973 [ 147.989380][T11207] pgfault 61670 [ 147.990905][T11207] pgmajfault 298 [ 147.992506][T11207] inactive_anon 221597696 [ 147.994184][T11207] active_anon 88059904 [ 148.000829][T11207] inactive_file 0 [ 148.002531][T11207] active_file 0 [ 148.004093][T11207] unevictable 0 [ 148.007077][T11207] hierarchical_memory_limit 314572800 [ 148.009313][T11207] hierarchical_memsw_limit 9223372036854771712 [ 148.011833][T11207] total_cache 309313536 [ 148.013677][T11207] total_rss 200704 [ 148.015272][T11207] total_rss_huge 0 [ 148.017097][T11207] total_shmem 309313536 [ 148.018932][T11207] total_mapped_file 0 [ 148.020815][T11207] total_dirty 0 [ 148.022464][T11207] total_writeback 0 [ 148.022626][T11225] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1666'. [ 148.024268][T11207] total_workingset_refault_anon 56 [ 148.029966][T11207] total_workingset_refault_file 6319 [ 148.032287][T11207] total_swap 78950400 [ 148.034184][T11207] total_swapcached 163840 [ 148.036516][T11207] total_pgpgin 169062 [ 148.038218][T11207] total_pgpgout 93973 [ 148.039880][T11207] total_pgfault 61670 [ 148.041550][T11207] total_pgmajfault 298 [ 148.043206][T11207] total_inactive_anon 221597696 [ 148.045439][T11207] total_active_anon 88059904 [ 148.048514][T11207] total_inactive_file 0 [ 148.049896][T11207] total_active_file 0 [ 148.051283][T11207] total_unevictable 0 [ 148.052593][T11207] anon_cost 0 [ 148.053675][T11207] file_cost 0 [ 148.054769][T11207] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1660,pid=11207,uid=0 [ 148.059680][T11207] Memory cgroup out of memory: Killed process 11207 (syz.1.1660) total-vm:101828kB, anon-rss:1080kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 148.083073][T11223] syz.0.1667 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 148.091269][T11223] CPU: 3 UID: 0 PID: 11223 Comm: syz.0.1667 Not tainted syzkaller #0 PREEMPT(full) [ 148.091294][T11223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.091306][T11223] Call Trace: [ 148.091313][T11223] [ 148.091321][T11223] dump_stack_lvl+0x16c/0x1f0 [ 148.091349][T11223] dump_header+0x101/0x930 [ 148.091373][T11223] oom_kill_process+0x272/0xa40 [ 148.091398][T11223] out_of_memory+0x350/0x1700 [ 148.091426][T11223] ? __pfx_out_of_memory+0x10/0x10 [ 148.091455][T11223] mem_cgroup_out_of_memory+0x118/0x130 [ 148.091482][T11223] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 148.091515][T11223] ? do_raw_spin_unlock+0x172/0x230 [ 148.091542][T11223] try_charge_memcg+0x72b/0xd50 [ 148.091568][T11223] ? __pfx_try_charge_memcg+0x10/0x10 [ 148.091590][T11223] ? peak_open+0x21/0x50 [ 148.091615][T11223] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 148.091646][T11223] obj_cgroup_charge_pages+0x22/0x1f0 [ 148.091669][T11223] __memcg_kmem_charge_page+0xc2/0x2e0 [ 148.091694][T11223] __alloc_frozen_pages_noprof+0x325/0x23f0 [ 148.091714][T11223] ? is_bpf_text_address+0x8a/0x1a0 [ 148.091735][T11223] ? bpf_ksym_find+0x127/0x1c0 [ 148.091760][T11223] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 148.091788][T11223] ? is_bpf_text_address+0x94/0x1a0 [ 148.091808][T11223] ? kernel_text_address+0x8d/0x100 [ 148.091831][T11223] ? __kernel_text_address+0xd/0x40 [ 148.091851][T11223] ? unwind_get_return_address+0x59/0xa0 [ 148.091880][T11223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.091910][T11223] ? stack_trace_save+0x8e/0xc0 [ 148.091935][T11223] ? __pfx_stack_trace_save+0x10/0x10 [ 148.091961][T11223] ? stack_depot_save_flags+0x29/0x9c0 [ 148.091983][T11223] ? find_held_lock+0x2b/0x80 [ 148.092010][T11223] ? kasan_save_stack+0x42/0x60 [ 148.092034][T11223] alloc_pages_bulk_noprof+0x71c/0x1410 [ 148.092052][T11223] ? kvm_set_memslot+0x139/0x1380 [ 148.092078][T11223] ? kvm_set_memory_region+0xebc/0x1680 [ 148.092104][T11223] ? kvm_vm_ioctl+0x151b/0x4000 [ 148.092121][T11223] ? __x64_sys_ioctl+0x18b/0x210 [ 148.092148][T11223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.092174][T11223] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 148.092203][T11223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.092227][T11223] ? policy_nodemask+0xea/0x4e0 [ 148.092252][T11223] alloc_pages_bulk_mempolicy_noprof+0x244/0x1280 [ 148.092288][T11223] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 148.092316][T11223] ? rcu_is_watching+0x12/0xc0 [ 148.092339][T11223] ? trace_kmalloc+0x2b/0xd0 [ 148.092361][T11223] ? __kmalloc_node_noprof+0x23b/0x500 [ 148.092382][T11223] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 148.092414][T11223] __vmalloc_node_range_noprof+0x526/0x14b0 [ 148.092452][T11223] ? __vcalloc_noprof+0x4d/0x80 [ 148.092474][T11223] ? __pfx___mutex_trylock_common+0x10/0x10 [ 148.092508][T11223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.092536][T11223] ? trace_contention_end+0xdd/0x130 [ 148.092555][T11223] ? __mutex_lock+0x1c5/0x1060 [ 148.092582][T11223] ? __vcalloc_noprof+0x4d/0x80 [ 148.092603][T11223] __vmalloc_node_noprof+0xad/0xf0 [ 148.092628][T11223] ? __vcalloc_noprof+0x4d/0x80 [ 148.092653][T11223] __vcalloc_noprof+0x4d/0x80 [ 148.092675][T11223] kvm_arch_prepare_memory_region+0x35a/0x8d0 [ 148.092715][T11223] kvm_set_memslot+0x139/0x1380 [ 148.092744][T11223] ? kasan_save_track+0x14/0x30 [ 148.092765][T11223] kvm_set_memory_region+0xebc/0x1680 [ 148.092802][T11223] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 148.092838][T11223] kvm_vm_ioctl+0x151b/0x4000 [ 148.092874][T11223] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 148.092914][T11223] ? kasan_quarantine_put+0x10a/0x240 [ 148.092932][T11223] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.092955][T11223] ? find_held_lock+0x2b/0x80 [ 148.092978][T11223] ? tomoyo_path_number_perm+0x295/0x580 [ 148.093009][T11223] ? tomoyo_path_number_perm+0x18d/0x580 [ 148.093035][T11223] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 148.093058][T11223] ? fpu__restore_sig+0x10f/0x190 [ 148.093095][T11223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 148.093154][T11223] ? hook_file_ioctl_common+0x145/0x410 [ 148.093184][T11223] ? selinux_file_ioctl+0x180/0x270 [ 148.093211][T11223] ? selinux_file_ioctl+0xb4/0x270 [ 148.093239][T11223] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 148.093260][T11223] __x64_sys_ioctl+0x18b/0x210 [ 148.093290][T11223] do_syscall_64+0xcd/0x4c0 [ 148.093314][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.093333][T11223] RIP: 0033:0x7f028158e7eb [ 148.093349][T11223] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 148.093368][T11223] RSP: 002b:00007f028236b490 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.093385][T11223] RAX: ffffffffffffffda RBX: 00007f028236bbe0 RCX: 00007f028158e7eb [ 148.093398][T11223] RDX: 00007f028236bbe0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 148.093409][T11223] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 148.093420][T11223] R10: 0000000000000004 R11: 0000000000000246 R12: 000000000000000a [ 148.093431][T11223] R13: 000020000000a000 R14: 0000200000000000 R15: 00000000fec00000 [ 148.093457][T11223] [ 148.093481][T11223] memory: usage 307200kB, limit 307200kB, failcnt 13159 [ 148.301950][T11223] memory+swap: usage 340704kB, limit 9007199254740988kB, failcnt 0 [ 148.304130][T11233] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 148.304509][T11223] kmem: usage 10812kB, limit 9007199254740988kB, failcnt 0 [ 148.312092][T11223] Memory cgroup stats for /syz0: [ 148.312862][T11223] cache 302784512 [ 148.316107][T11223] rss 716800 [ 148.317240][T11223] rss_huge 0 [ 148.318354][T11223] shmem 302776320 [ 148.319601][T11223] mapped_file 8192 [ 148.320820][T11223] dirty 0 [ 148.321786][T11223] writeback 0 [ 148.322836][T11223] workingset_refault_anon 4 [ 148.324395][T11223] workingset_refault_file 6360 [ 148.327125][T11223] swap 34308096 [ 148.328739][T11223] swapcached 0 [ 148.330006][T11223] pgpgin 150955 [ 148.331526][T11223] pgpgout 76858 [ 148.333173][T11223] pgfault 76734 [ 148.335010][T11223] pgmajfault 255 [ 148.337000][T11223] inactive_anon 245534720 [ 148.338780][T11223] active_anon 57958400 [ 148.340419][T11223] inactive_file 4096 [ 148.342096][T11223] active_file 4096 [ 148.343714][T11223] unevictable 0 [ 148.345168][T11223] hierarchical_memory_limit 314572800 [ 148.349145][T11223] hierarchical_memsw_limit 9223372036854771712 [ 148.351025][T11223] total_cache 302784512 [ 148.352277][T11223] total_rss 716800 [ 148.353464][T11223] total_rss_huge 0 [ 148.354661][T11223] total_shmem 302776320 [ 148.356088][T11223] total_mapped_file 8192 [ 148.357610][T11223] total_dirty 0 [ 148.359142][T11223] total_writeback 0 [ 148.360804][T11223] total_workingset_refault_anon 4 [ 148.362577][T11223] total_workingset_refault_file 6360 [ 148.364286][T11223] total_swap 34308096 [ 148.365808][T11223] total_swapcached 0 [ 148.367493][T11223] total_pgpgin 150955 [ 148.369213][T11223] total_pgpgout 76858 [ 148.370815][T11223] total_pgfault 76734 [ 148.372380][T11223] total_pgmajfault 255 [ 148.374118][T11223] total_inactive_anon 245534720 [ 148.376289][T11223] total_active_anon 57958400 [ 148.377868][T11223] total_inactive_file 4096 [ 148.379245][T11223] total_active_file 4096 [ 148.380540][T11223] total_unevictable 0 [ 148.381736][T11223] anon_cost 0 [ 148.382759][T11223] file_cost 0 [ 148.383781][T11223] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1667,pid=11222,uid=0 [ 148.390983][T11223] Memory cgroup out of memory: Killed process 11222 (syz.0.1667) total-vm:101960kB, anon-rss:732kB, file-rss:23768kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 148.450541][T11241] syz.1.1674 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=2, oom_score_adj=1000 [ 148.454245][T11241] CPU: 0 UID: 0 PID: 11241 Comm: syz.1.1674 Not tainted syzkaller #0 PREEMPT(full) [ 148.454266][T11241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 148.454274][T11241] Call Trace: [ 148.454279][T11241] [ 148.454285][T11241] dump_stack_lvl+0x16c/0x1f0 [ 148.454335][T11241] dump_header+0x101/0x930 [ 148.454357][T11241] oom_kill_process+0x272/0xa40 [ 148.454373][T11241] out_of_memory+0x350/0x1700 [ 148.454394][T11241] ? __pfx_out_of_memory+0x10/0x10 [ 148.454414][T11241] mem_cgroup_out_of_memory+0x118/0x130 [ 148.454434][T11241] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 148.454455][T11241] ? do_raw_spin_unlock+0x172/0x230 [ 148.454474][T11241] try_charge_memcg+0x72b/0xd50 [ 148.454491][T11241] ? __pfx_try_charge_memcg+0x10/0x10 [ 148.454505][T11241] ? peak_open+0x21/0x50 [ 148.454522][T11241] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 148.454543][T11241] obj_cgroup_charge_pages+0x22/0x1f0 [ 148.454558][T11241] obj_cgroup_charge_account+0x5c/0xa0 [ 148.454573][T11241] __memcg_slab_post_alloc_hook+0x30c/0x960 [ 148.454591][T11241] ? kasan_save_track+0x14/0x30 [ 148.454606][T11241] kmem_cache_alloc_node_noprof+0x312/0x3b0 [ 148.454621][T11241] ? copy_process+0x4b6/0x7690 [ 148.454639][T11241] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.454655][T11241] copy_process+0x4b6/0x7690 [ 148.454671][T11241] ? page_table_check_set+0x627/0x750 [ 148.454691][T11241] ? __pfx_copy_process+0x10/0x10 [ 148.454712][T11241] ? _copy_from_user+0x59/0xd0 [ 148.454732][T11241] kernel_clone+0xfc/0x930 [ 148.454750][T11241] ? __pfx_kernel_clone+0x10/0x10 [ 148.454788][T11241] ? __lock_acquire+0xb97/0x1ce0 [ 148.454824][T11241] __do_sys_clone3+0x212/0x290 [ 148.454844][T11241] ? __pfx___do_sys_clone3+0x10/0x10 [ 148.454883][T11241] do_syscall_64+0xcd/0x4c0 [ 148.454900][T11241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.454914][T11241] RIP: 0033:0x7f9fd9fc3449 [ 148.454927][T11241] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 12 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 148.454940][T11241] RSP: 002b:00007fff60a9c2c8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 148.454953][T11241] RAX: ffffffffffffffda RBX: 00007f9fd9f45860 RCX: 00007f9fd9fc3449 [ 148.454961][T11241] RDX: 00007f9fd9f45860 RSI: 0000000000000058 RDI: 00007fff60a9c310 [ 148.454968][T11241] RBP: 00007f9fd81f66c0 R08: 00007f9fd81f66c0 R09: 00007fff60a9c3f7 [ 148.454976][T11241] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 148.454983][T11241] R13: 000000000000000b R14: 00007fff60a9c310 R15: 00007fff60a9c3f8 [ 148.454999][T11241] [ 148.455170][T11241] memory: usage 307196kB, limit 307200kB, failcnt 30960 [ 148.543869][T11241] memory+swap: usage 384296kB, limit 9007199254740988kB, failcnt 0 [ 148.546655][T11241] kmem: usage 4720kB, limit 9007199254740988kB, failcnt 0 [ 148.549234][T11241] Memory cgroup stats for /syz1: [ 148.549311][T11241] cache 309317632 [ 148.552032][T11241] rss 135168 [ 148.553135][T11241] rss_huge 0 [ 148.554230][T11241] shmem 309313536 [ 148.555536][T11241] mapped_file 4096 [ 148.557358][T11241] dirty 0 [ 148.558373][T11241] writeback 0 [ 148.559548][T11241] workingset_refault_anon 56 [ 148.561335][T11241] workingset_refault_file 6348 [ 148.563207][T11241] swap 78950400 [ 148.564328][T11241] swapcached 163840 [ 148.565549][T11241] pgpgin 169146 [ 148.566874][T11241] pgpgout 94072 [ 148.567944][T11241] pgfault 61833 [ 148.569030][T11241] pgmajfault 301 [ 148.570152][T11241] inactive_anon 217870336 [ 148.571455][T11241] active_anon 91717632 [ 148.572948][T11241] inactive_file 4096 [ 148.574156][T11241] active_file 0 [ 148.575233][T11241] unevictable 0 [ 148.576429][T11241] hierarchical_memory_limit 314572800 [ 148.578068][T11241] hierarchical_memsw_limit 9223372036854771712 [ 148.579935][T11241] total_cache 309317632 [ 148.581179][T11241] total_rss 135168 [ 148.582331][T11241] total_rss_huge 0 [ 148.583501][T11241] total_shmem 309313536 [ 148.585009][T11241] total_mapped_file 4096 [ 148.586985][T11241] total_dirty 0 [ 148.588295][T11241] total_writeback 0 [ 148.589604][T11241] total_workingset_refault_anon 56 [ 148.591520][T11241] total_workingset_refault_file 6348 [ 148.593606][T11241] total_swap 78950400 [ 148.595198][T11241] total_swapcached 163840 [ 148.596880][T11241] total_pgpgin 169146 [ 148.598194][T11241] total_pgpgout 94072 [ 148.599503][T11241] total_pgfault 61833 [ 148.600764][T11241] total_pgmajfault 301 [ 148.602053][T11241] total_inactive_anon 217870336 [ 148.603585][T11241] total_active_anon 91717632 [ 148.605137][T11241] total_inactive_file 4096 [ 148.606675][T11241] total_active_file 0 [ 148.607903][T11241] total_unevictable 0 [ 148.609353][T11241] anon_cost 0 [ 148.610679][T11241] file_cost 0 [ 148.611749][T11241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1674,pid=11241,uid=0 [ 148.616745][T11241] Memory cgroup out of memory: Killed process 11241 (syz.1.1674) total-vm:98120kB, anon-rss:952kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 148.670199][T11246] netlink: ct family unspecified [ 148.672350][T11246] openvswitch: netlink: Actions may not be safe on all matching packets [ 148.726082][ T840] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 148.750824][ T5378] pmem0: [POWERTEC] [ 148.886408][ T840] usb 9-1: Using ep0 maxpacket: 16 [ 148.889456][ T840] usb 9-1: config 0 has no interfaces? [ 148.891382][ T840] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.894829][ T840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.899814][ T840] usb 9-1: config 0 descriptor?? [ 149.030839][T11269] syz.1.1684 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=2, oom_score_adj=1000 [ 149.037022][T11269] CPU: 1 UID: 0 PID: 11269 Comm: syz.1.1684 Not tainted syzkaller #0 PREEMPT(full) [ 149.037048][T11269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.037059][T11269] Call Trace: [ 149.037065][T11269] [ 149.037073][T11269] dump_stack_lvl+0x16c/0x1f0 [ 149.037098][T11269] dump_header+0x101/0x930 [ 149.037120][T11269] oom_kill_process+0x272/0xa40 [ 149.037142][T11269] out_of_memory+0x350/0x1700 [ 149.037165][T11269] ? __pfx_out_of_memory+0x10/0x10 [ 149.037192][T11269] mem_cgroup_out_of_memory+0x118/0x130 [ 149.037214][T11269] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 149.037243][T11269] ? do_raw_spin_unlock+0x172/0x230 [ 149.037266][T11269] try_charge_memcg+0x72b/0xd50 [ 149.037290][T11269] ? __pfx_try_charge_memcg+0x10/0x10 [ 149.037307][T11269] ? peak_open+0x21/0x50 [ 149.037329][T11269] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 149.037348][T11269] obj_cgroup_charge_pages+0x22/0x1f0 [ 149.037362][T11269] obj_cgroup_charge_account+0x5c/0xa0 [ 149.037376][T11269] __memcg_slab_post_alloc_hook+0x30c/0x960 [ 149.037393][T11269] ? kasan_unpoison+0x27/0x60 [ 149.037413][T11269] __kvmalloc_node_noprof+0x506/0x620 [ 149.037425][T11269] ? find_held_lock+0x2b/0x80 [ 149.037439][T11269] ? futex_hash_allocate+0x2cc/0x1020 [ 149.037459][T11269] ? futex_hash_allocate+0x2cc/0x1020 [ 149.037473][T11269] futex_hash_allocate+0x2cc/0x1020 [ 149.037490][T11269] ? do_raw_spin_lock+0x12c/0x2b0 [ 149.037502][T11269] ? __pfx_futex_hash_allocate+0x10/0x10 [ 149.037522][T11269] ? find_held_lock+0x2b/0x80 [ 149.037538][T11269] ? futex_hash_allocate_default+0x29c/0x5c0 [ 149.037559][T11269] futex_hash_allocate_default+0x330/0x5c0 [ 149.037578][T11269] copy_process+0x4c17/0x7690 [ 149.037601][T11269] ? __pfx_copy_process+0x10/0x10 [ 149.037620][T11269] ? _copy_from_user+0x59/0xd0 [ 149.037638][T11269] kernel_clone+0xfc/0x930 [ 149.037654][T11269] ? __pfx_kernel_clone+0x10/0x10 [ 149.037674][T11269] ? __lock_acquire+0xb97/0x1ce0 [ 149.037694][T11269] __do_sys_clone3+0x212/0x290 [ 149.037710][T11269] ? __pfx___do_sys_clone3+0x10/0x10 [ 149.037780][T11269] do_syscall_64+0xcd/0x4c0 [ 149.037795][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.037807][T11269] RIP: 0033:0x7f9fd9fc3449 [ 149.037818][T11269] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 12 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 149.037829][T11269] RSP: 002b:00007fff60a9c2c8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 149.037841][T11269] RAX: ffffffffffffffda RBX: 00007f9fd9f45860 RCX: 00007f9fd9fc3449 [ 149.037848][T11269] RDX: 00007f9fd9f45860 RSI: 0000000000000058 RDI: 00007fff60a9c310 [ 149.037855][T11269] RBP: 00007f9fdad176c0 R08: 00007f9fdad176c0 R09: 00007fff60a9c3f7 [ 149.037862][T11269] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 149.037869][T11269] R13: 000000000000000b R14: 00007fff60a9c310 R15: 00007fff60a9c3f8 [ 149.037883][T11269] [ 149.037901][T11269] memory: usage 307200kB, limit 307200kB, failcnt 31492 [ 149.107309][T10386] usb 9-1: USB disconnect, device number 7 [ 149.109715][T11269] memory+swap: usage 384300kB, limit 9007199254740988kB, failcnt 0 [ 149.151364][T11269] kmem: usage 4876kB, limit 9007199254740988kB, failcnt 0 [ 149.153631][T11269] Memory cgroup stats for /syz1: [ 149.153844][T11269] cache 309313536 [ 149.156809][T11269] rss 118784 [ 149.157807][T11269] rss_huge 0 [ 149.158821][T11269] shmem 309313536 [ 149.160250][T11269] mapped_file 0 [ 149.161388][T11269] dirty 0 [ 149.162516][T11269] writeback 0 [ 149.163776][T11269] workingset_refault_anon 56 [ 149.165746][T11269] workingset_refault_file 6374 [ 149.168002][T11269] swap 78950400 [ 149.169736][T11269] swapcached 163840 [ 149.171245][T11269] pgpgin 169342 [ 149.172496][T11269] pgpgout 94273 [ 149.173629][T11269] pgfault 62102 [ 149.174864][T11269] pgmajfault 307 [ 149.176017][T11269] inactive_anon 215945216 [ 149.177487][T11269] active_anon 93630464 [ 149.179001][T11269] inactive_file 0 [ 149.180827][T11269] active_file 0 [ 149.181967][T11269] unevictable 0 [ 149.183150][T11269] hierarchical_memory_limit 314572800 [ 149.185335][T11269] hierarchical_memsw_limit 9223372036854771712 [ 149.188768][T11269] total_cache 309313536 [ 149.190188][T11269] total_rss 118784 [ 149.191830][T11269] total_rss_huge 0 [ 149.193111][T11269] total_shmem 309313536 [ 149.194818][T11269] total_mapped_file 0 [ 149.196630][T11269] total_dirty 0 [ 149.197938][T11269] total_writeback 0 [ 149.199272][T11269] total_workingset_refault_anon 56 [ 149.201000][T11269] total_workingset_refault_file 6374 [ 149.202810][T11269] total_swap 78950400 [ 149.204179][T11269] total_swapcached 163840 [ 149.205662][T11269] total_pgpgin 169342 [ 149.207094][T11269] total_pgpgout 94273 [ 149.208342][T11269] total_pgfault 62102 [ 149.209576][T11269] total_pgmajfault 307 [ 149.210955][T11269] total_inactive_anon 215945216 [ 149.212531][T11269] total_active_anon 93630464 [ 149.214203][T11269] total_inactive_file 0 [ 149.215855][T11269] total_active_file 0 [ 149.217718][T11269] total_unevictable 0 [ 149.219286][T11269] anon_cost 0 [ 149.220440][T11269] file_cost 0 [ 149.221485][T11269] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1684,pid=11269,uid=0 [ 149.226589][T11269] Memory cgroup out of memory: Killed process 11269 (syz.1.1684) total-vm:97988kB, anon-rss:952kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 149.243625][ T5969] syz-executor invoked oom-killer: gfp_mask=0xc48(GFP_NOFS|__GFP_MOVABLE), order=0, oom_score_adj=0 [ 149.244247][T11269] [ 149.247086][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 149.247102][ T5969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.247110][ T5969] Call Trace: [ 149.247114][ T5969] [ 149.247119][ T5969] dump_stack_lvl+0x16c/0x1f0 [ 149.247136][ T5969] dump_header+0x101/0x930 [ 149.247149][ T5969] oom_kill_process+0x272/0xa40 [ 149.247161][ T5969] out_of_memory+0x350/0x1700 [ 149.247174][ T5969] ? __pfx_out_of_memory+0x10/0x10 [ 149.247187][ T5969] mem_cgroup_out_of_memory+0x118/0x130 [ 149.247204][ T5969] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 149.247220][ T5969] ? do_raw_spin_unlock+0x172/0x230 [ 149.247234][ T5969] try_charge_memcg+0x72b/0xd50 [ 149.247248][ T5969] ? __pfx_try_charge_memcg+0x10/0x10 [ 149.247260][ T5969] ? find_held_lock+0x1/0x80 [ 149.247273][ T5969] ? rcu_read_unlock+0x17/0x60 [ 149.247287][ T5969] charge_memcg+0x8a/0x230 [ 149.247298][ T5969] __mem_cgroup_charge+0x2b/0x1e0 [ 149.247312][ T5969] filemap_add_folio+0x88/0x220 [ 149.247325][ T5969] ? __pfx_filemap_add_folio+0x10/0x10 [ 149.247339][ T5969] __filemap_get_folio+0x510/0xc30 [ 149.247353][ T5969] __getblk_slow+0x13e/0x560 [ 149.247371][ T5969] bdev_getblk+0xd4/0xe0 [ 149.247387][ T5969] __read_extent_tree_block+0x136/0x640 [ 149.247404][ T5969] ext4_find_extent+0x4a2/0xa70 [ 149.247422][ T5969] ext4_ext_map_blocks+0x290/0x5fe0 [ 149.247441][ T5969] ? shrink_slab+0x54d/0x12b0 [ 149.247456][ T5969] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 149.247473][ T5969] ? rcu_read_unlock+0x17/0x60 [ 149.247486][ T5969] ? mem_cgroup_iter+0x382/0x710 [ 149.247497][ T5969] ? __lock_acquire+0xb97/0x1ce0 [ 149.247518][ T5969] ext4_map_query_blocks+0x114/0x8a0 [ 149.247534][ T5969] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 149.247545][ T5969] ? __pfx_down_read+0x10/0x10 [ 149.247559][ T5969] ? ext4_es_lookup_extent+0xc7/0xc50 [ 149.247573][ T5969] ext4_map_blocks+0x3c5/0x1400 [ 149.247586][ T5969] ? find_held_lock+0x2b/0x80 [ 149.247599][ T5969] ? __pfx_ext4_map_blocks+0x10/0x10 [ 149.247613][ T5969] ? xa_load+0x153/0x2c0 [ 149.247626][ T5969] ? __pfx_xa_load+0x10/0x10 [ 149.247641][ T5969] ext4_mpage_readpages+0xdf2/0x19d0 [ 149.247658][ T5969] ? __pfx_ext4_mpage_readpages+0x10/0x10 [ 149.247671][ T5969] ? find_held_lock+0x2b/0x80 [ 149.247686][ T5969] ext4_readahead+0x102/0x140 [ 149.247697][ T5969] ? __pfx_ext4_readahead+0x10/0x10 [ 149.247708][ T5969] read_pages+0x1c4/0xc70 [ 149.247717][ T5969] ? _raw_spin_unlock+0x28/0x50 [ 149.247727][ T5969] ? __free_frozen_pages+0x8ec/0x10f0 [ 149.247744][ T5969] ? __pfx_read_pages+0x10/0x10 [ 149.247757][ T5969] page_cache_ra_unbounded+0x421/0x7d0 [ 149.247770][ T5969] page_cache_ra_order+0xa41/0xd70 [ 149.247782][ T5969] ? kiocb_write_and_wait+0x180/0x1f0 [ 149.247796][ T5969] filemap_fault+0x152e/0x2930 [ 149.247810][ T5969] ? __pfx_filemap_fault+0x10/0x10 [ 149.247826][ T5969] ? __pfx_filemap_map_pages+0x10/0x10 [ 149.247838][ T5969] __do_fault+0x10d/0x490 [ 149.247849][ T5969] ? __pfx_filemap_map_pages+0x10/0x10 [ 149.247860][ T5969] do_pte_missing+0xf50/0x3ba0 [ 149.247877][ T5969] ? find_held_lock+0x2b/0x80 [ 149.247890][ T5969] ? __handle_mm_fault+0x14fd/0x2a50 [ 149.247907][ T5969] __handle_mm_fault+0x152a/0x2a50 [ 149.247925][ T5969] ? __pfx___handle_mm_fault+0x10/0x10 [ 149.247943][ T5969] ? lock_vma_under_rcu+0x1eb/0x530 [ 149.247962][ T5969] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 149.247978][ T5969] ? __pfx___do_sys_wait4+0x10/0x10 [ 149.247990][ T5969] handle_mm_fault+0x589/0xd10 [ 149.248008][ T5969] ? __bpf_trace_exceptions+0x1/0x40 [ 149.248026][ T5969] do_user_addr_fault+0x60c/0x1370 [ 149.248037][ T5969] ? rcu_is_watching+0x12/0xc0 [ 149.248052][ T5969] exc_page_fault+0x5c/0xb0 [ 149.248063][ T5969] asm_exc_page_fault+0x26/0x30 [ 149.248074][ T5969] RIP: 0033:0x7f0281465c24 [ 149.248083][ T5969] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 78 fb e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 89 fa e7 00 48 01 d1 [ 149.248094][ T5969] RSP: 002b:00007ffe3be33560 EFLAGS: 00010202 [ 149.248104][ T5969] RAX: 0000001b31924000 RBX: 000000000000043c RCX: 0000000000024220 [ 149.248112][ T5969] RDX: 0000000006994315 RSI: 00007ffe3be335f0 RDI: 00007f028236e010 [ 149.248119][ T5969] RBP: 00007ffe3be3359c R08: 000000000000700c R09: 00007f028236e000 [ 149.248126][ T5969] R10: 0000000000000001 R11: 00188a7715a6efa0 R12: 0000000000001388 [ 149.248133][ T5969] R13: 00000000000927c0 R14: 000000000002438e R15: 00007ffe3be335f0 [ 149.248143][ T5969] [ 149.248147][ T5969] memory: usage 307200kB, limit 307200kB, failcnt 13409 [ 149.250748][T11269] ===================================== [ 149.254200][ T5969] memory+swap: usage 340704kB, limit 9007199254740988kB, failcnt 0 [ 149.255326][T11269] WARNING: bad unlock balance detected! [ 149.255335][T11269] syzkaller #0 Not tainted [ 149.256324][ T5969] kmem: usage 10652kB, limit 9007199254740988kB, failcnt 0 [ 149.257730][T11269] ------------------------------------- [ 149.259124][ T5969] Memory cgroup stats for /syz0 [ 149.260570][T11269] syz.1.1684/11269 is trying to release lock ( [ 149.262064][ T5969] : [ 149.262129][ T5969] cache 302940160 [ 149.263738][T11269] &sighand->siglock) at: [ 149.265938][ T5969] rss 696320 [ 149.267978][T11269] [] copy_process+0x6b72/0x7690 [ 149.268003][T11269] but there are no more locks to release! [ 149.268007][T11269] [ 149.268007][T11269] other info that might help us debug this: [ 149.268011][T11269] 1 lock held by syz.1.1684/11269: [ 149.268018][T11269] #0: ffffffff8e61ba10 (cgroup_threadgroup_rwsem){++++}-{0:0} [ 149.269632][ T5969] rss_huge 0 [ 149.271070][T11269] , at: copy_process+0x4ba7/0x7690 [ 149.272703][ T5969] shmem 302776320 [ 149.274514][T11269] [ 149.274514][T11269] stack backtrace: [ 149.274531][T11269] CPU: 0 UID: 0 PID: 11269 Comm: syz.1.1684 Not tainted syzkaller #0 PREEMPT(full) [ 149.274549][T11269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.274558][T11269] Call Trace: [ 149.274567][T11269] [ 149.274574][T11269] dump_stack_lvl+0x116/0x1f0 [ 149.274594][T11269] ? copy_process+0x6b72/0x7690 [ 149.274613][T11269] print_unlock_imbalance_bug+0x11b/0x130 [ 149.274649][T11269] ? copy_process+0x6b72/0x7690 [ 149.274666][T11269] lock_release+0x242/0x2f0 [ 149.274688][T11269] _raw_spin_unlock+0x16/0x50 [ 149.274701][T11269] copy_process+0x6b72/0x7690 [ 149.274722][T11269] ? __pfx_copy_process+0x10/0x10 [ 149.274797][T11269] ? _copy_from_user+0x59/0xd0 [ 149.274826][T11269] kernel_clone+0xfc/0x930 [ 149.274849][T11269] ? __pfx_kernel_clone+0x10/0x10 [ 149.274866][T11269] ? __lock_acquire+0xb97/0x1ce0 [ 149.274885][T11269] __do_sys_clone3+0x212/0x290 [ 149.274900][T11269] ? __pfx___do_sys_clone3+0x10/0x10 [ 149.274923][T11269] do_syscall_64+0xcd/0x4c0 [ 149.274937][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.274949][T11269] RIP: 0033:0x7f9fd9fc3449 [ 149.274959][T11269] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 12 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 149.274970][T11269] RSP: 002b:00007fff60a9c2c8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 149.274981][T11269] RAX: ffffffffffffffda RBX: 00007f9fd9f45860 RCX: 00007f9fd9fc3449 [ 149.274989][T11269] RDX: 00007f9fd9f45860 RSI: 0000000000000058 RDI: 00007fff60a9c310 [ 149.274996][T11269] RBP: 00007f9fdad176c0 R08: 00007f9fdad176c0 R09: 00007fff60a9c3f7 [ 149.275003][T11269] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 149.275010][T11269] R13: 000000000000000b R14: 00007fff60a9c310 R15: 00007fff60a9c3f8 [ 149.275019][T11269] [ 149.275220][T11269] ------------[ cut here ]------------ [ 149.276109][ T5969] mapped_file 0 [ 149.277525][T11269] pvqspinlock: lock 0xffff8880291fe5c0 has corrupted value 0x0! [ 149.277611][T11269] WARNING: CPU: 0 PID: 11269 at kernel/locking/qspinlock_paravirt.h:504 __pv_queued_spin_unlock_slowpath+0x237/0x330 [ 149.280196][ T5969] dirty 0 [ 149.281175][T11269] Modules linked in: [ 149.281186][T11269] CPU: 0 UID: 0 PID: 11269 Comm: syz.1.1684 Not tainted syzkaller #0 PREEMPT(full) [ 149.283143][ T5969] writeback 0 [ 149.284665][T11269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.286145][ T5969] workingset_refault_anon 4 [ 149.287841][T11269] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x237/0x330 [ 149.289702][ T5969] workingset_refault_file 6390 [ 149.291413][T11269] Code: 03 0f b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 67 41 8b 55 00 4c 89 ee 48 c7 c7 c0 82 ad 8b e8 4a ab e3 f5 90 <0f> 0b 90 90 e9 64 ff ff ff 90 0f 0b 48 89 df 4c 89 04 24 e8 11 61 [ 149.293320][ T5969] swap 34308096 [ 149.294866][T11269] RSP: 0018:ffffc90005b5f9c8 EFLAGS: 00010286 [ 149.296803][ T5969] swapcached 0 [ 149.298379][T11269] [ 149.299906][ T5969] pgpgin 151090 [ 149.301422][T11269] RAX: 0000000000000000 RBX: ffff8880291fe5c0 RCX: ffffffff817a3358 [ 149.303042][ T5969] pgpgout 76960 [ 149.303049][ T5969] pgfault 76973 [ 149.304902][T11269] RDX: ffff8880475d2440 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 149.306991][ T5969] pgmajfault 258 [ 149.308446][T11269] RBP: ffff8880291fe5c8 R08: 0000000000000001 R09: 0000000000000000 [ 149.310741][ T5969] inactive_anon 173178880 [ 149.312202][T11269] R10: 0000000000000001 R11: 5f65677261686320 R12: ffff8880291fe5d0 [ 149.314208][ T5969] active_anon 130293760 [ 149.315523][T11269] R13: ffff8880291fe5c0 R14: 00000000003d0f00 R15: ffff888027e7a440 [ 149.317492][ T5969] inactive_file 159744 [ 149.319056][T11269] FS: 0000555555c51500(0000) GS:ffff8880d66b9000(0000) knlGS:0000000000000000 [ 149.319083][T11269] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.321156][ T5969] active_file 4096 [ 149.322592][T11269] CR2: 000055556d3fe5c8 CR3: 000000003a205000 CR4: 0000000000352ef0 [ 149.324318][ T5969] unevictable 0 [ 149.326003][T11269] Call Trace: [ 149.327706][ T5969] hierarchical_memory_limit 314572800 [ 149.327716][ T5969] hierarchical_memsw_limit 9223372036854771712 [ 149.327721][ T5969] total_cache 302940160 [ 149.327727][ T5969] total_rss 696320 [ 149.329179][T11269] [ 149.329187][T11269] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 149.331354][ T5969] total_rss_huge 0 [ 149.332848][T11269] ? debug_locks_off+0x19/0x80 [ 149.334635][ T5969] total_shmem 302776320 [ 149.334643][ T5969] total_mapped_file 0 [ 149.336378][T11269] .slowpath+0x9/0x18 [ 149.336396][T11269] ? debug_locks_off+0x24/0x80 [ 149.336412][T11269] do_raw_spin_unlock+0x172/0x230 [ 149.336427][T11269] _raw_spin_unlock+0x1e/0x50 [ 149.336437][T11269] copy_process+0x6b72/0x7690 [ 149.336456][T11269] ? __pfx_copy_process+0x10/0x10 [ 149.336473][T11269] ? _copy_from_user+0x59/0xd0 [ 149.336488][T11269] kernel_clone+0xfc/0x930 [ 149.336504][T11269] ? __pfx_kernel_clone+0x10/0x10 [ 149.336525][T11269] ? __lock_acquire+0xb97/0x1ce0 [ 149.336544][T11269] __do_sys_clone3+0x212/0x290 [ 149.336559][T11269] ? __pfx___do_sys_clone3+0x10/0x10 [ 149.336583][T11269] do_syscall_64+0xcd/0x4c0 [ 149.336597][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.336609][T11269] RIP: 0033:0x7f9fd9fc3449 [ 149.336791][T11269] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 12 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 149.336805][T11269] RSP: 002b:00007fff60a9c2c8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 149.336817][T11269] RAX: ffffffffffffffda RBX: 00007f9fd9f45860 RCX: 00007f9fd9fc3449 [ 149.336824][T11269] RDX: 00007f9fd9f45860 RSI: 0000000000000058 RDI: 00007fff60a9c310 [ 149.336832][T11269] RBP: 00007f9fdad176c0 R08: 00007f9fdad176c0 R09: 00007fff60a9c3f7 [ 149.336839][T11269] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 149.336847][T11269] R13: 000000000000000b R14: 00007fff60a9c310 R15: 00007fff60a9c3f8 [ 149.336857][T11269] [ 149.336863][T11269] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 149.336872][T11269] CPU: 0 UID: 0 PID: 11269 Comm: syz.1.1684 Not tainted syzkaller #0 PREEMPT(full) [ 149.336885][T11269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.336892][T11269] Call Trace: [ 149.336896][T11269] [ 149.336900][T11269] dump_stack_lvl+0x3d/0x1f0 [ 149.336913][T11269] vpanic+0x6e8/0x7a0 [ 149.336930][T11269] ? __pfx_vpanic+0x10/0x10 [ 149.336948][T11269] ? __pv_queued_spin_unlock_slowpath+0x237/0x330 [ 149.336961][T11269] panic+0xca/0xd0 [ 149.336977][T11269] ? __pfx_panic+0x10/0x10 [ 149.336996][T11269] ? check_panic_on_warn+0x1f/0xb0 [ 149.337006][T11269] check_panic_on_warn+0xab/0xb0 [ 149.337017][T11269] __warn+0xf6/0x3c0 [ 149.337026][T11269] ? __pv_queued_spin_unlock_slowpath+0x237/0x330 [ 149.337039][T11269] report_bug+0x3c3/0x580 [ 149.337049][T11269] ? __pv_queued_spin_unlock_slowpath+0x237/0x330 [ 149.337062][T11269] handle_bug+0x184/0x210 [ 149.337076][T11269] exc_invalid_op+0x17/0x50 [ 149.337089][T11269] asm_exc_invalid_op+0x1a/0x20 [ 149.337100][T11269] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x237/0x330 [ 149.337114][T11269] Code: 03 0f b6 14 02 4c 89 e8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 67 41 8b 55 00 4c 89 ee 48 c7 c7 c0 82 ad 8b e8 4a ab e3 f5 90 <0f> 0b 90 90 e9 64 ff ff ff 90 0f 0b 48 89 df 4c 89 04 24 e8 11 61 [ 149.337124][T11269] RSP: 0018:ffffc90005b5f9c8 EFLAGS: 00010286 [ 149.337133][T11269] RAX: 0000000000000000 RBX: ffff8880291fe5c0 RCX: ffffffff817a3358 [ 149.337140][T11269] RDX: ffff8880475d2440 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 149.337147][T11269] RBP: ffff8880291fe5c8 R08: 0000000000000001 R09: 0000000000000000 [ 149.337153][T11269] R10: 0000000000000001 R11: 5f65677261686320 R12: ffff8880291fe5d0 [ 149.337161][T11269] R13: ffff8880291fe5c0 R14: 00000000003d0f00 R15: ffff888027e7a440 [ 149.337169][T11269] ? __warn_printk+0x198/0x350 [ 149.337186][T11269] ? __warn_printk+0x1a5/0x350 [ 149.337202][T11269] ? __pv_queued_spin_unlock_slowpath+0x236/0x330 [ 149.337216][T11269] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 149.337231][T11269] ? debug_locks_off+0x19/0x80 [ 149.337245][T11269] .slowpath+0x9/0x18 [ 149.337255][T11269] ? debug_locks_off+0x24/0x80 [ 149.337269][T11269] do_raw_spin_unlock+0x172/0x230 [ 149.337282][T11269] _raw_spin_unlock+0x1e/0x50 [ 149.337291][T11269] copy_process+0x6b72/0x7690 [ 149.337309][T11269] ? __pfx_copy_process+0x10/0x10 [ 149.337325][T11269] ? _copy_from_user+0x59/0xd0 [ 149.337340][T11269] kernel_clone+0xfc/0x930 [ 149.337355][T11269] ? __pfx_kernel_clone+0x10/0x10 [ 149.337371][T11269] ? __lock_acquire+0xb97/0x1ce0 [ 149.337389][T11269] __do_sys_clone3+0x212/0x290 [ 149.337404][T11269] ? __pfx___do_sys_clone3+0x10/0x10 [ 149.337428][T11269] do_syscall_64+0xcd/0x4c0 [ 149.337441][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.337452][T11269] RIP: 0033:0x7f9fd9fc3449 [ 149.337459][T11269] Code: d7 08 00 48 8d 3d fc d7 08 00 e8 12 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 149.337470][T11269] RSP: 002b:00007fff60a9c2c8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 149.337480][T11269] RAX: ffffffffffffffda RBX: 00007f9fd9f45860 RCX: 00007f9fd9fc3449 [ 149.337487][T11269] RDX: 00007f9fd9f45860 RSI: 0000000000000058 RDI: 00007fff60a9c310 [ 149.337495][T11269] RBP: 00007f9fdad176c0 R08: 00007f9fdad176c0 R09: 00007fff60a9c3f7 [ 149.337502][T11269] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 149.337515][T11269] R13: 000000000000000b R14: 00007fff60a9c310 R15: 00007fff60a9c3f8 [ 149.337525][T11269] [ 149.339114][T11269] Kernel Offset: disabled VM DIAGNOSIS: 19:28:06 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85643db0 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90005b5f368 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7375203a6d656d6b R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3622266 R15=dffffc0000000000 RIP=ffffffff85643dd7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555555c51500 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556d3fe5c8 CR3=000000003a205000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=0000000010400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564369bfb600 0000564369bfb600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc263dab60 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b30303237303320 6567617375203a79 726f6d656d205d39 36323131545b5d31 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3763203938203834 2032642066662037 6320393820633420 3066203465203338 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2038342064652031 3320336320313020 3437203831206337 203063203538203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020303020303020 3130203362203862 2038632039382039 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420373220343720 3264203538203834 2063322034372066 6620353820383420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffff888027e7c880 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=ffffc900006a0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555566194500 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31a24008 CR3=000000004f781000 CR4=00350ef0 DR0=0000000000000003 DR1=0000000000000009 DR2=0000000000000101 DR3=0000000000000005 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000002fefce0 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff60a9c780 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff60a9c906 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff60a9c906 00007fff60a9c90c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fda012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fda012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fda012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fda012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fda012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fda012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffff88802c378000 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=ffffc90000648ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa9b0870c80 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f51875b7dac CR3=0000000033b95000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000c061 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe770a02bb 00007ffe770a02bb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe770a07c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe770a07c0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20747563205b2d2d 2d2d2d2d2d2d2d2d 0000302064656863 6100003434373900 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2074756320512727 2727272727272727 0000302064656263 6100003434373300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65756575715f7670 5f5f5f657661735f 65656c6c61635f77 61725f5f20205d39 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3136203131203865 2034322034302039 3820633420666420 3938203834206230 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2066302030392066 6620666620666620 3436203965203039 203039206230203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66303c2030392035 6620336520626120 6134203865206238 2064612032382030 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6320376320376320 3834206565203938 2063342030302035 3520623820313420 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139323335363230 343d6f6e69202263 6f7270223d766564 2022746174735f74 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608c60 RDX=ffff888029d7c880 RSI=ffffffff81608ca8 RDI=ffffffff93db8fe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b71fc R10=ffffffff93db8fe7 R11=ffffc900006f8ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608ca9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555589711500 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558972c5c8 CR3=000000005d23c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fef0ffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 000055d43029d000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fea335f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a15d5 2a2a2a2a2a415943 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e754f4645425d05 1a474f475a054149 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 000055d43029d000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000005011 0000000000000000 000000322d633200 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d430291900 000055d430298a80 000055d43029ee40 000055d43028cce0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d430287f40 000055d4302ece50 000055d43028fe70 000055d43028ae10 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d43027fa60 000055d430285aa0 000055d43028e9f0 000055d4302800c0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000053004025a 0000000000000020 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000