last executing test programs: 3.074255408s ago: executing program 3 (id=633): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.213879336s ago: executing program 3 (id=660): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18) syz_clone(0x402623f, &(0x7f0000000800)="15e48755644d5373ae98eff647ec43de6283e51f340129593b81a7bc07ee0e2ae209fab807a9b528ccef0786006eecb399f10fae9b775093c9185545e52bf7f20d4048ebc10d2087c485bee2e7e2f84b98279ae0a27c9170e14c1a0829aa895798c2af0a69eb53699eeef1098424772df7eef7289044531f7c56fb49b495d55da7", 0x81, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="100fa9", 0x3}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004db0c009900000001fc61bcce11fb838a1f5134d4da62b5750ca56232d2d150ce1ba390969fd080b58090308c8ae635c8f252ef44e4"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8000f28, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, 0x0) capset(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r8, 0x2004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYBLOB="000000000000209300000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) personality(0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="9384843990b9bc767405237b35449d0fcb40941cfd905122c87e42bbeb56cc584dc5a35ac512f719241ac0ba79756100ccb8a034f0c5966364"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) 1.873891406s ago: executing program 3 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.78288268s ago: executing program 3 (id=670): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b40)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b323b6d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0182101, &(0x7f00000010c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000000800074000000000040006803c000e802c000180140003"], 0xd4}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r4, 0x89a3, &(0x7f0000000200)='bridge0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x1a, 0xa, 0x10009c, 0xfffffffffffffffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) 1.493186893s ago: executing program 0 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.493018903s ago: executing program 0 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x88) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000dc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x48240, 0x0) 1.433692072s ago: executing program 0 (id=679): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 1.433508497s ago: executing program 1 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40100}, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) statx(0xffffffffffffffff, 0x0, 0x4000, 0x80, 0x0) 1.384046275s ago: executing program 0 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c697000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) 1.383958752s ago: executing program 1 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}]}, 0x44}}, 0x0) 1.324070992s ago: executing program 1 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) 1.323770388s ago: executing program 0 (id=686): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x4, 0x4) 1.323707093s ago: executing program 0 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.264258057s ago: executing program 1 (id=689): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 1.103985754s ago: executing program 1 (id=694): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.033659702s ago: executing program 2 (id=697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x20000097ff, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 918.953803ms ago: executing program 3 (id=698): mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd00, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x1df, 0x2, 0x2, 0xe, 0x1, "0300ffd76d7fcb940f00", 0x2, 0x201}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x200000000000000, 0x0) 834.046753ms ago: executing program 2 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001100010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 833.460231ms ago: executing program 2 (id=700): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 547.453249ms ago: executing program 2 (id=701): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 547.049991ms ago: executing program 2 (id=702): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 493.991376ms ago: executing program 2 (id=703): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18) syz_clone(0x402623f, &(0x7f0000000800)="15e48755644d5373ae98eff647ec43de6283e51f340129593b81a7bc07ee0e2ae209fab807a9b528ccef0786006eecb399f10fae9b775093c9185545e52bf7f20d4048ebc10d2087c485bee2e7e2f84b98279ae0a27c9170e14c1a0829aa895798c2af0a69eb53699eeef1098424772df7eef7289044531f7c56fb49b495d55da7", 0x81, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xb, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="100fa9", 0x3}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004db0c009900000001fc61bcce11fb838a1f5134d4da62b5750ca56232d2d150ce1ba390969fd080b58090308c8ae635c8f252ef44e4"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x8000f28, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, 0x0) capset(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r8, 0x2004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYBLOB="000000000000209300000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) personality(0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="9384843990b9bc767405237b35449d0fcb40941cfd905122c87e42bbeb56cc584dc5a35ac512f719241ac0ba79756100ccb8a034f0c5966364"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) 251.309µs ago: executing program 1 (id=704): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) 0s ago: executing program 3 (id=705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r1, &(0x7f0000000240)=""/4096, 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:60236' (ED25519) to the list of known hosts. [ 47.315076][ T5902] cgroup: Unknown subsys name 'net' [ 47.462035][ T5902] cgroup: Unknown subsys name 'cpuset' [ 47.466880][ T5902] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.422160][ T5902] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.920009][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.925054][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.927976][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.931313][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.934478][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.937305][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.937675][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.939773][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.940851][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.943757][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.947216][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.949387][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.950260][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.952367][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.955606][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.957444][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.959751][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.964887][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.967009][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.969769][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.240474][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 52.284027][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 52.289842][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 52.305648][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 52.430942][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.433502][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.436123][ T5938] bridge_slave_0: entered allmulticast mode [ 52.439349][ T5938] bridge_slave_0: entered promiscuous mode [ 52.485463][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.487921][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.490897][ T5938] bridge_slave_1: entered allmulticast mode [ 52.494849][ T5938] bridge_slave_1: entered promiscuous mode [ 52.524475][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.527704][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.531257][ T5940] bridge_slave_0: entered allmulticast mode [ 52.535290][ T5940] bridge_slave_0: entered promiscuous mode [ 52.547477][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.550514][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.553443][ T5940] bridge_slave_1: entered allmulticast mode [ 52.556323][ T5940] bridge_slave_1: entered promiscuous mode [ 52.593559][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.596051][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.598399][ T5945] bridge_slave_0: entered allmulticast mode [ 52.601819][ T5945] bridge_slave_0: entered promiscuous mode [ 52.607438][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.610496][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.612940][ T5939] bridge_slave_0: entered allmulticast mode [ 52.615653][ T5939] bridge_slave_0: entered promiscuous mode [ 52.620279][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.630501][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.638615][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.642962][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.646164][ T5945] bridge_slave_1: entered allmulticast mode [ 52.649724][ T5945] bridge_slave_1: entered promiscuous mode [ 52.658622][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.661197][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.663524][ T5939] bridge_slave_1: entered allmulticast mode [ 52.666233][ T5939] bridge_slave_1: entered promiscuous mode [ 52.670731][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.691606][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.696294][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.700642][ T5938] team0: Port device team_slave_0 added [ 52.725613][ T5938] team0: Port device team_slave_1 added [ 52.728644][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.733912][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.750275][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.780399][ T5940] team0: Port device team_slave_0 added [ 52.788295][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.791097][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.800175][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.824717][ T5945] team0: Port device team_slave_0 added [ 52.828614][ T5940] team0: Port device team_slave_1 added [ 52.839626][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.842321][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.854467][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.860565][ T5939] team0: Port device team_slave_0 added [ 52.863385][ T5945] team0: Port device team_slave_1 added [ 52.893087][ T5939] team0: Port device team_slave_1 added [ 52.901266][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.904221][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.914536][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.936786][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.939189][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.948957][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.953633][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.956679][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.967514][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.987062][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.989481][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.997636][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.008635][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.011303][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.019573][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.028908][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.031243][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.039555][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.053326][ T5938] hsr_slave_0: entered promiscuous mode [ 53.055825][ T5938] hsr_slave_1: entered promiscuous mode [ 53.113355][ T5945] hsr_slave_0: entered promiscuous mode [ 53.115992][ T5945] hsr_slave_1: entered promiscuous mode [ 53.118205][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 53.120483][ T5945] Cannot create hsr debugfs directory [ 53.135615][ T5939] hsr_slave_0: entered promiscuous mode [ 53.138114][ T5939] hsr_slave_1: entered promiscuous mode [ 53.140623][ T5939] debugfs: 'hsr0' already exists in 'hsr' [ 53.142553][ T5939] Cannot create hsr debugfs directory [ 53.147200][ T5940] hsr_slave_0: entered promiscuous mode [ 53.150447][ T5940] hsr_slave_1: entered promiscuous mode [ 53.153530][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 53.156155][ T5940] Cannot create hsr debugfs directory [ 53.469347][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.477232][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.483534][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.495153][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.522813][ T5945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.528324][ T5945] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.532586][ T5945] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.539845][ T5945] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.582659][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.590014][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.595635][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.601510][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.658441][ T5939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.673648][ T5939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.684727][ T5939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.694593][ T5939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.738627][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.756278][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.771714][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.778981][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.781522][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.791794][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.804716][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.807808][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.811905][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.814459][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.843457][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.846651][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.852698][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.890969][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.902085][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.930100][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.932860][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.936220][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.938571][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.965304][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.991608][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.994939][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.001562][ T5943] Bluetooth: hci2: command tx timeout [ 54.009229][ T5943] Bluetooth: hci0: command tx timeout [ 54.009569][ T5301] Bluetooth: hci1: command tx timeout [ 54.010047][ T5954] Bluetooth: hci3: command tx timeout [ 54.020523][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.023087][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.118717][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.145909][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.165367][ T5938] veth0_vlan: entered promiscuous mode [ 54.175500][ T5938] veth1_vlan: entered promiscuous mode [ 54.198626][ T5945] veth0_vlan: entered promiscuous mode [ 54.210315][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.218746][ T5945] veth1_vlan: entered promiscuous mode [ 54.225356][ T5938] veth0_macvtap: entered promiscuous mode [ 54.235506][ T5938] veth1_macvtap: entered promiscuous mode [ 54.244336][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.263620][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.276154][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.281396][ T5945] veth0_macvtap: entered promiscuous mode [ 54.286857][ T5940] veth0_vlan: entered promiscuous mode [ 54.291458][ T75] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.298084][ T75] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.303254][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.310363][ T5945] veth1_macvtap: entered promiscuous mode [ 54.313225][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.321300][ T5940] veth1_vlan: entered promiscuous mode [ 54.338871][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.350912][ T5939] veth0_vlan: entered promiscuous mode [ 54.355469][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.364589][ T5939] veth1_vlan: entered promiscuous mode [ 54.370118][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.373332][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.377614][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.381952][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.408805][ T5940] veth0_macvtap: entered promiscuous mode [ 54.414194][ T5940] veth1_macvtap: entered promiscuous mode [ 54.417457][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.420788][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.454151][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.457779][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.463521][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.476354][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.479071][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.480430][ T5939] veth0_macvtap: entered promiscuous mode [ 54.486466][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.496778][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.497461][ T5939] veth1_macvtap: entered promiscuous mode [ 54.507288][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.518003][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.521344][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.526365][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.530116][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.539202][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.548803][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.562104][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.579752][ T1141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.583100][ T1141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.587337][ T1141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.597164][ T1141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.633733][ T4381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.636809][ T4381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.691676][ T6032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5'. [ 55.220627][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.224681][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.227988][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.232074][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.258148][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.261587][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.405319][ T6044] syzkaller0: entered promiscuous mode [ 55.407206][ T6044] syzkaller0: entered allmulticast mode [ 55.656107][ T6052] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 56.079391][ T5301] Bluetooth: hci1: command tx timeout [ 56.082118][ T5301] Bluetooth: hci0: command tx timeout [ 56.082982][ T5943] Bluetooth: hci2: command tx timeout [ 56.089282][ T5943] Bluetooth: hci3: command tx timeout [ 56.224073][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 56.323181][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 56.411218][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 56.414856][ T6078] Zero length message leads to an empty skb [ 56.481540][ T6086] serio: Serial port ptm0 [ 56.952349][ T6107] serio: Serial port ptm0 [ 56.995832][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 57.195462][ T6118] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 57.198242][ T6118] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 57.202975][ T6118] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 57.237737][ T40] audit: type=1326 audit(1766961666.856:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.251259][ T40] audit: type=1326 audit(1766961666.856:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.258133][ T40] audit: type=1326 audit(1766961666.856:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.265163][ T40] audit: type=1326 audit(1766961666.856:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.272698][ T40] audit: type=1326 audit(1766961666.856:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.280009][ T40] audit: type=1326 audit(1766961666.856:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.286997][ T40] audit: type=1326 audit(1766961666.856:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.293987][ T40] audit: type=1326 audit(1766961666.856:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.301317][ T40] audit: type=1326 audit(1766961666.856:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 57.308548][ T40] audit: type=1326 audit(1766961666.856:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.3.38" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 58.159701][ T5943] Bluetooth: hci1: command tx timeout [ 58.159746][ T5954] Bluetooth: hci0: command tx timeout [ 58.159782][ T5952] Bluetooth: hci2: command tx timeout [ 58.166422][ T5301] Bluetooth: hci3: command tx timeout [ 58.209010][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.48'. [ 58.266935][ T6157] mmap: syz.1.52 (6157) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.585223][ T6195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.71'. [ 58.657561][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.70'. [ 59.057586][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.80'. [ 59.469856][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.91'. [ 60.239227][ T5954] Bluetooth: hci1: command tx timeout [ 60.240358][ T5301] Bluetooth: hci0: command tx timeout [ 60.241387][ T5943] Bluetooth: hci3: command tx timeout [ 60.241649][ T5952] Bluetooth: hci2: command tx timeout [ 60.357173][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.360354][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.408663][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 60.435296][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.441721][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.520492][ T6274] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 60.523269][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.526438][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.540437][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.543334][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.554017][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.104'. [ 60.671907][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.114'. [ 60.740903][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 60.921843][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 61.507695][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 61.729520][ T6382] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.895458][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 61.898935][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.157'. [ 62.197368][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.175'. [ 64.534392][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.212'. [ 65.163240][ T5943] Bluetooth: hci2: hardware error 0x00 [ 65.577225][ T6571] evm: overlay not supported [ 65.921992][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 66.315597][ T6622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 66.367842][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 66.705049][ T6650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.257'. [ 66.782131][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 67.009365][ T6675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.268'. [ 67.210592][ T5943] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 67.391237][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 68.017029][ T6712] pim6reg: entered allmulticast mode [ 68.090310][ T6719] tipc: Started in network mode [ 68.092359][ T6719] tipc: Node identity 7f000001, cluster identity 4711 [ 68.095634][ T6719] tipc: Enabled bearer , priority 10 [ 68.273410][ T6743] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 68.275996][ T6743] syz_tun: entered promiscuous mode [ 68.279579][ T6743] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 69.078680][ T6800] hub 1-0:1.0: USB hub found [ 69.080655][ T6800] hub 1-0:1.0: 2 ports detected [ 69.210362][ T6026] tipc: Node number set to 2130706433 [ 69.477055][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.481471][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.545479][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.553701][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.641085][ T1143] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.643809][ T1143] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.649418][ T1143] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.653192][ T1143] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.928853][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 69.932946][ T6832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.937248][ T6832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.974799][ T6836] bridge_slave_0: left allmulticast mode [ 69.976850][ T6836] bridge_slave_0: left promiscuous mode [ 69.978845][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.983454][ T6836] bridge_slave_1: left allmulticast mode [ 69.985441][ T6836] bridge_slave_1: left promiscuous mode [ 69.987440][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.995006][ T6836] bond0: (slave bond_slave_0): Releasing backup interface [ 70.002112][ T6836] bond0: (slave bond_slave_1): Releasing backup interface [ 70.007680][ T6836] team0: Port device team_slave_0 removed [ 70.014120][ T6836] team0: Port device team_slave_1 removed [ 70.017038][ T6836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.022121][ T6836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.025958][ T6836] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.257311][ T6855] netlink: 'syz.3.339': attribute type 10 has an invalid length. [ 70.273702][ T6855] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.290021][ T6855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.379055][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 70.888104][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 70.908867][ T6887] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.067215][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 71.209439][ T6902] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 71.250747][ T6902] bridge0: port 3(syz_tun) entered blocking state [ 71.253356][ T6902] bridge0: port 3(syz_tun) entered disabled state [ 71.256292][ T6902] syz_tun: entered allmulticast mode [ 71.260544][ T6902] syz_tun: entered promiscuous mode [ 71.263103][ T6902] bridge0: port 3(syz_tun) entered blocking state [ 71.265420][ T6902] bridge0: port 3(syz_tun) entered forwarding state [ 71.500766][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 71.989273][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.139220][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 72.143344][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 72.148244][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 72.151464][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.154114][ T10] usb 7-1: Product: syz [ 72.155501][ T10] usb 7-1: Manufacturer: syz [ 72.157110][ T10] usb 7-1: SerialNumber: syz [ 72.164768][ T10] usb 7-1: config 0 descriptor?? [ 72.170846][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 72.173971][ T10] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 72.346177][ T6943] bridge0: port 1(syz_tun) entered blocking state [ 72.348498][ T6943] bridge0: port 1(syz_tun) entered disabled state [ 72.350844][ T6943] syz_tun: entered allmulticast mode [ 72.353735][ T6943] syz_tun: entered promiscuous mode [ 72.394177][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 72.394192][ T40] audit: type=1326 audit(1766961682.016:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x0 [ 72.496056][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 72.499272][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.376'. [ 72.503895][ T40] audit: type=1326 audit(1766961682.126:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.511070][ T40] audit: type=1326 audit(1766961682.126:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.518238][ T40] audit: type=1326 audit(1766961682.126:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.526104][ T40] audit: type=1326 audit(1766961682.126:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.533109][ T40] audit: type=1326 audit(1766961682.126:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.540175][ T40] audit: type=1326 audit(1766961682.126:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.547157][ T40] audit: type=1326 audit(1766961682.136:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.554177][ T40] audit: type=1326 audit(1766961682.136:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.561250][ T40] audit: type=1326 audit(1766961682.136:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.1.376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 72.781093][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 72.828566][ T6948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.831547][ T6948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.834841][ T6948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.837272][ T6948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.840229][ T6948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.842876][ T6948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 72.845736][ T6948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 72.848101][ T6948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 73.167302][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 73.194334][ T10] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 73.198266][ T10] em28xx 7-1:0.0: board has no eeprom [ 74.240889][ T6925] em28xx 7-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 74.309315][ T10] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 74.313235][ T10] em28xx 7-1:0.0: dvb set to bulk mode. [ 74.318698][ T5981] em28xx 7-1:0.0: Binding DVB extension [ 74.330697][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 74.337168][ T10] usb 7-1: USB disconnect, device number 2 [ 74.344536][ T10] em28xx 7-1:0.0: Disconnecting em28xx [ 74.359819][ T5981] em28xx 7-1:0.0: Registering input extension [ 74.364529][ T10] em28xx 7-1:0.0: Closing input extension [ 74.368975][ T6996] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 74.375513][ T10] em28xx 7-1:0.0: Freeing device [ 75.277617][ T7083] ip6gre0: entered promiscuous mode [ 75.289101][ T7083] team0: Port device ip6gre0 added [ 75.403627][ T7101] ªªªªªª: renamed from wg2 (while UP) [ 75.479993][ T7112] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.670407][ T7135] capability: warning: `syz.3.459' uses deprecated v2 capabilities in a way that may be insecure [ 75.786039][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 75.789174][ T7143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.460'. [ 75.989905][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 76.014090][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.016400][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.398819][ T7171] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 76.407323][ T7171] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 77.032368][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 77.035393][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'. [ 77.097640][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 77.998851][ T7205] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 78.044921][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 78.044936][ T40] audit: type=1326 audit(1766961687.666:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x0 [ 78.098224][ T7253] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.148610][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 78.151886][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.505'. [ 78.157069][ T40] audit: type=1326 audit(1766961687.776:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.164217][ T40] audit: type=1326 audit(1766961687.776:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.174956][ T40] audit: type=1326 audit(1766961687.776:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.186956][ T40] audit: type=1326 audit(1766961687.776:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.197866][ T7261] netlink: 84 bytes leftover after parsing attributes in process `syz.0.507'. [ 78.197923][ T40] audit: type=1326 audit(1766961687.776:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.207654][ T40] audit: type=1326 audit(1766961687.776:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.215998][ T40] audit: type=1326 audit(1766961687.796:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.224529][ T40] audit: type=1326 audit(1766961687.796:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.231670][ T40] audit: type=1326 audit(1766961687.796:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.505" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 78.858169][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 78.937009][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.529'. [ 79.242325][ T7333] netdevsim netdevsim2: Direct firmware load for ×& failed with error -2 [ 79.245711][ T7333] netdevsim netdevsim2: Falling back to sysfs fallback for: ×& [ 79.269676][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.540'. [ 79.292658][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.536'. [ 79.491763][ T5954] Bluetooth: hci4: sending frame failed (-49) [ 79.494629][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 79.943894][ T7360] Driver unsupported XDP return value 0 on prog (id 116) dev N/A, expect packet loss! [ 80.209670][ T7381] overlayfs: failed to resolve './file0': -2 [ 81.062405][ T7414] 9p: Bad value for 'rfdno' [ 81.276990][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.280301][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.283913][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.286747][ T7423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.487762][ T7433] 9p: Bad value for 'rfdno' [ 81.614508][ T7443] netlink: 'syz.0.587': attribute type 4 has an invalid length. [ 81.975755][ T7469] program syz.0.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.110067][ T7483] __nla_validate_parse: 13 callbacks suppressed [ 82.110080][ T7483] netlink: 56 bytes leftover after parsing attributes in process `wg1'. [ 82.449035][ T7507] netlink: 'syz.1.615': attribute type 10 has an invalid length. [ 82.452554][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.615'. [ 82.459460][ T7507] ipvlan2: entered promiscuous mode [ 82.461585][ T7507] bridge0: port 2(ipvlan2) entered blocking state [ 82.463802][ T7507] bridge0: port 2(ipvlan2) entered disabled state [ 82.466059][ T7507] ipvlan2: entered allmulticast mode [ 82.467833][ T7507] bridge0: entered allmulticast mode [ 82.471144][ T7507] ipvlan2: left allmulticast mode [ 82.472841][ T7507] bridge0: left allmulticast mode [ 82.592659][ T7512] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 82.602446][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 82.644775][ T7518] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 83.208119][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 83.533211][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 83.533223][ T40] audit: type=1326 audit(1766961693.156:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.545425][ T40] audit: type=1326 audit(1766961693.156:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.554886][ T40] audit: type=1326 audit(1766961693.156:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.564082][ T40] audit: type=1326 audit(1766961693.156:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.573153][ T40] audit: type=1326 audit(1766961693.156:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.582750][ T40] audit: type=1326 audit(1766961693.156:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.592033][ T40] audit: type=1326 audit(1766961693.156:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.601165][ T40] audit: type=1326 audit(1766961693.156:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.610064][ T40] audit: type=1326 audit(1766961693.156:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.619021][ T40] audit: type=1326 audit(1766961693.156:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.0.643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 83.883020][ T7594] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 84.034392][ T7548] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 84.171208][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 84.595530][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.670'. [ 84.598551][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.670'. [ 84.776545][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 84.825741][ T7658] overlayfs: failed to resolve './file1': -2 [ 85.116094][ T7690] overlayfs: failed to resolve './file1': -2 [ 85.444182][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 86.246474][ T9] cfg80211: failed to load regulatory.db [ 86.945806][ T7717] syz.2.703 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 86.959027][ T7717] CPU: 3 UID: 0 PID: 7717 Comm: syz.2.703 Not tainted syzkaller #0 PREEMPT(full) [ 86.959044][ T7717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.959051][ T7717] Call Trace: [ 86.959055][ T7717] [ 86.959059][ T7717] dump_stack_lvl+0x16c/0x1f0 [ 86.959092][ T7717] dump_header+0x101/0x960 [ 86.959118][ T7717] oom_kill_process+0x176/0x910 [ 86.959131][ T7717] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 86.959144][ T7717] out_of_memory+0x1407/0x1700 [ 86.959159][ T7717] ? __pfx_out_of_memory+0x10/0x10 [ 86.959175][ T7717] __alloc_frozen_pages_noprof+0x1dbc/0x2430 [ 86.959197][ T7717] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.959213][ T7717] ? __lock_acquire+0x436/0x2890 [ 86.959229][ T7717] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.959247][ T7717] ? policy_nodemask+0xea/0x4e0 [ 86.959265][ T7717] alloc_pages_mpol+0x1fb/0x550 [ 86.959282][ T7717] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 86.959298][ T7717] ? swap_entry_swapped+0x1df/0x290 [ 86.959315][ T7717] ? __pfx_swap_entry_swapped+0x10/0x10 [ 86.959333][ T7717] folio_alloc_mpol_noprof+0x36/0x2f0 [ 86.959344][ T7717] __read_swap_cache_async+0x20a/0x500 [ 86.959359][ T7717] ? __pfx___read_swap_cache_async+0x10/0x10 [ 86.959375][ T7717] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 86.959393][ T7717] swap_cluster_readahead+0x528/0x770 [ 86.959408][ T7717] ? __blk_flush_plug+0x2f3/0x4b0 [ 86.959421][ T7717] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 86.959436][ T7717] ? __lock_acquire+0x436/0x2890 [ 86.959452][ T7717] ? get_vma_policy+0x242/0x3c0 [ 86.959463][ T7717] swapin_readahead+0x160/0x1220 [ 86.959481][ T7717] ? __pfx_swapin_readahead+0x10/0x10 [ 86.959495][ T7717] ? find_held_lock+0x2b/0x80 [ 86.959508][ T7717] ? swap_cache_get_folio+0x267/0x8e0 [ 86.959520][ T7717] ? swap_cache_get_folio+0x267/0x8e0 [ 86.959531][ T7717] ? swap_cache_get_folio+0x267/0x8e0 [ 86.959545][ T7717] ? swap_cache_get_folio+0x267/0x8e0 [ 86.959557][ T7717] ? swap_cache_get_folio+0x293/0x8e0 [ 86.959570][ T7717] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 86.959581][ T7717] ? __pfx_get_swap_device+0x10/0x10 [ 86.959597][ T7717] ? rcu_read_unlock+0x2d/0xb0 [ 86.959612][ T7717] ? do_swap_page+0x962/0x64a0 [ 86.959621][ T7717] do_swap_page+0x962/0x64a0 [ 86.959634][ T7717] ? __lock_acquire+0x436/0x2890 [ 86.959648][ T7717] ? __pfx_do_swap_page+0x10/0x10 [ 86.959660][ T7717] ? __pfx_default_wake_function+0x10/0x10 [ 86.959676][ T7717] ? do_fault+0x9fb/0x1ad0 [ 86.959694][ T7717] ? rcu_is_watching+0x12/0xc0 [ 86.959709][ T7717] ? ___pte_offset_map+0x175/0x380 [ 86.959726][ T7717] __handle_mm_fault+0x19cb/0x2bb0 [ 86.959739][ T7717] ? reacquire_held_locks+0xcd/0x1f0 [ 86.959750][ T7717] ? __pfx___handle_mm_fault+0x10/0x10 [ 86.959784][ T7717] ? lock_vma_under_rcu+0x176/0x580 [ 86.959802][ T7717] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 86.959822][ T7717] handle_mm_fault+0x3fe/0xad0 [ 86.959835][ T7717] do_user_addr_fault+0x60c/0x1370 [ 86.959850][ T7717] ? rcu_is_watching+0x12/0xc0 [ 86.959867][ T7717] exc_page_fault+0x64/0xc0 [ 86.959883][ T7717] asm_exc_page_fault+0x26/0x30 [ 86.959893][ T7717] RIP: 0023:0xf707e918 [ 86.959907][ T7717] Code: Unable to access opcode bytes at 0xf707e8ee. [ 86.959911][ T7717] RSP: 002b:00000000ff884e10 EFLAGS: 00010282 [ 86.959920][ T7717] RAX: 000000000002b01c RBX: 00000000f73d6ff4 RCX: 00000000827b54d6 [ 86.959927][ T7717] RDX: 00000000ffffffff RSI: 00000000f7405080 RDI: 00000000f6834008 [ 86.959933][ T7717] RBP: 00000000f7f35610 R08: 0000000000000000 R09: 0000000000000000 [ 86.959939][ T7717] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 86.959945][ T7717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.959959][ T7717] [ 87.095930][ T7717] Mem-Info: [ 87.097049][ T7717] active_anon:0 inactive_anon:126 isolated_anon:0 [ 87.097049][ T7717] active_file:6 inactive_file:56 isolated_file:0 [ 87.097049][ T7717] unevictable:5754 dirty:12 writeback:0 [ 87.097049][ T7717] slab_reclaimable:9524 slab_unreclaimable:50709 [ 87.097049][ T7717] mapped:24543 shmem:5789 pagetables:1297 [ 87.097049][ T7717] sec_pagetables:299 bounce:0 [ 87.097049][ T7717] kernel_misc_reclaimable:0 [ 87.097049][ T7717] free:12726 free_pcp:1 free_cma:0 [ 87.137572][ T7717] Node 0 active_anon:4kB inactive_anon:0kB active_file:24kB inactive_file:128kB unevictable:3648kB isolated(anon):0kB isolated(file):0kB mapped:132kB dirty:0kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9888kB pagetables:1804kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB [ 87.153792][ T7717] Node 1 active_anon:0kB inactive_anon:524kB active_file:0kB inactive_file:288kB unevictable:19368kB isolated(anon):0kB isolated(file):0kB mapped:98028kB dirty:48kB writeback:0kB shmem:19508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2936kB pagetables:3384kB sec_pagetables:72kB all_unreclaimable? yes Balloon:0kB [ 87.181505][ T7717] Node 0 DMA free:1508kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.199336][ T7717] lowmem_reserve[]: 0 289 289 289 289 [ 87.201719][ T7717] Node 0 DMA32 free:7676kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:16kB active_file:0kB inactive_file:252kB unevictable:3648kB writepending:0kB zspages:3448kB present:1032196kB managed:296820kB mlocked:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.241714][ T7717] lowmem_reserve[]: 0 0 0 0 0 [ 87.243346][ T7717] Node 1 DMA32 free:22072kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:256kB inactive_anon:168kB active_file:184kB inactive_file:68kB unevictable:19464kB writepending:48kB zspages:3696kB present:1048432kB managed:948212kB mlocked:15928kB bounce:0kB free_pcp:8060kB local_pcp:8060kB free_cma:0kB [ 87.256516][ T7717] lowmem_reserve[]: 0 0 0 0 0 [ 87.258127][ T7717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 1504kB [ 87.262755][ T7717] Node 0 DMA32: 8*4kB (ME) 21*8kB (UME) 72*16kB (UME) 52*32kB (UME) 28*64kB (UM) 14*128kB (UM) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 8136kB [ 87.272268][ T7681] syz.0.687: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 87.276262][ T7717] Node 1 [ 87.276289][ T7681] CPU: 0 UID: 0 PID: 7681 Comm: syz.0.687 Not tainted syzkaller #0 PREEMPT(full) [ 87.276296][ T7717] DMA32: [ 87.276305][ T7681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.276313][ T7681] Call Trace: [ 87.276317][ T7681] [ 87.276322][ T7681] dump_stack_lvl+0x16c/0x1f0 [ 87.276343][ T7681] warn_alloc+0x248/0x3a0 [ 87.276358][ T7681] ? __pfx_warn_alloc+0x10/0x10 [ 87.276371][ T7681] ? schedule_timeout+0x160/0x290 [ 87.276385][ T7681] ? __pfx_schedule_timeout+0x10/0x10 [ 87.276399][ T7681] ? __pfx_process_timeout+0x10/0x10 [ 87.276422][ T7681] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 87.276443][ T7681] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 87.276459][ T7681] ? policy_nodemask+0xea/0x4e0 [ 87.276482][ T7681] ? kasan_populate_vmalloc_pte+0xd3/0x150 [ 87.276500][ T7681] alloc_pages_bulk_noprof+0x77a/0x1410 [ 87.276513][ T7681] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 87.276532][ T7681] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 87.276546][ T7681] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 87.276564][ T7681] ? __kasan_populate_vmalloc+0x19b/0x220 [ 87.276580][ T7681] __kasan_populate_vmalloc+0xfb/0x220 [ 87.276598][ T7681] alloc_vmap_area+0x98d/0x2a50 [ 87.276620][ T7681] ? __pfx_alloc_vmap_area+0x10/0x10 [ 87.276640][ T7681] __get_vm_area_node+0x1ca/0x330 [ 87.276659][ T7681] ? arena_map_alloc+0x29a/0x550 [ 87.276674][ T7681] get_vm_area+0x73/0xa0 [ 87.276691][ T7681] ? arena_map_alloc+0x29a/0x550 [ 87.276706][ T7681] arena_map_alloc+0x29a/0x550 [ 87.276722][ T7681] ? __pfx_arena_map_mem_usage+0x10/0x10 [ 87.276738][ T7681] map_create+0x65c/0x2a10 [ 87.276759][ T7681] ? __pfx_map_create+0x10/0x10 [ 87.276774][ T7681] ? __might_fault+0xe3/0x190 [ 87.276787][ T7681] ? __might_fault+0xe3/0x190 [ 87.276798][ T7681] ? __might_fault+0x13b/0x190 [ 87.276815][ T7681] __sys_bpf+0x3d9d/0x4980 [ 87.276825][ T7681] ? tomoyo_path_number_perm+0x18d/0x580 [ 87.276840][ T7681] ? __pfx___sys_bpf+0x10/0x10 [ 87.276857][ T7681] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 87.276880][ T7681] ? kcov_ioctl+0x265/0x6e0 [ 87.276897][ T7681] ? kcov_ioctl+0x265/0x6e0 [ 87.276915][ T7681] __ia32_sys_bpf+0x76/0xe0 [ 87.276925][ T7681] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.276942][ T7681] __do_fast_syscall_32+0xe8/0x680 [ 87.276962][ T7681] do_fast_syscall_32+0x32/0x80 [ 87.276979][ T7681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.276993][ T7681] RIP: 0023:0xf705d579 [ 87.277008][ T7681] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 87.277018][ T7681] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 87.277029][ T7681] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080003940 [ 87.277036][ T7681] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.277042][ T7681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.277048][ T7681] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 87.277054][ T7681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.277067][ T7681] [ 87.277077][ T7681] Mem-Info: [ 87.277307][ T7717] 0*4kB [ 87.284191][ T7681] active_anon:5 inactive_anon:102 isolated_anon:0 [ 87.284191][ T7681] active_file:0 inactive_file:103 isolated_file:0 [ 87.284191][ T7681] unevictable:5778 dirty:4 writeback:8 [ 87.284191][ T7681] slab_reclaimable:9517 slab_unreclaimable:50704 [ 87.284191][ T7681] mapped:24526 shmem:5796 pagetables:1311 [ 87.284191][ T7681] sec_pagetables:301 bounce:0 [ 87.284191][ T7681] kernel_misc_reclaimable:0 [ 87.284191][ T7681] free:7814 free_pcp:2015 free_cma:0 [ 87.286378][ T7717] 1*8kB [ 87.287159][ T7681] Node 0 active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:188kB unevictable:3648kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9888kB pagetables:1808kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB [ 87.288711][ T7717] (M) 1*16kB [ 87.290203][ T7681] Node 1 active_anon:0kB inactive_anon:516kB active_file:36kB inactive_file:216kB unevictable:19544kB isolated(anon):0kB isolated(file):0kB mapped:97928kB dirty:0kB writeback:0kB shmem:19544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2944kB pagetables:3576kB sec_pagetables:72kB all_unreclaimable? yes Balloon:0kB [ 87.290234][ T7681] Node 0 DMA free:1504kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.291932][ T7717] (M) [ 87.293498][ T7681] lowmem_reserve[]: 0 289 [ 87.295385][ T7717] 71*32kB [ 87.297118][ T7681] 289 289 [ 87.299054][ T7717] (M) [ 87.306990][ T7681] 289 [ 87.319220][ T7717] 73*64kB [ 87.327022][ T7681] [ 87.328073][ T7717] (ME) [ 87.334169][ T7681] Node 0 [ 87.338818][ T7717] 33*128kB [ 87.345342][ T7681] DMA32 free:8136kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:3648kB writepending:0kB zspages:3472kB present:1032196kB managed:296820kB mlocked:112kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 87.346329][ T7717] (ME) [ 87.347842][ T7681] lowmem_reserve[]: 0 [ 87.350688][ T7717] 15*256kB [ 87.351121][ T7681] 0 [ 87.352856][ T7717] (M) [ 87.354407][ T7681] 0 0 [ 87.356490][ T7717] 14*512kB [ 87.357826][ T7681] 0 [ 87.364313][ T7717] (M) 0*1024kB 0*2048kB 0*4096kB = 22200kB [ 87.364341][ T7717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.364350][ T7717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.364358][ T7717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.364367][ T7717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.364375][ T7717] 6002 total pagecache pages [ 87.364379][ T7717] 107 pages in swap cache [ 87.364383][ T7717] Free swap = 98796kB [ 87.364387][ T7717] Total swap = 124996kB [ 87.375394][ T7681] Node 1 [ 87.384407][ T7717] 524155 pages RAM [ 87.424095][ T7681] DMA32 free:22200kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:508kB active_file:152kB inactive_file:100kB unevictable:19544kB writepending:0kB zspages:3660kB present:1048432kB managed:948212kB mlocked:16008kB bounce:0kB free_pcp:8060kB local_pcp:0kB free_cma:0kB [ 87.424134][ T7681] lowmem_reserve[]: 0 0 0 0 [ 87.442311][ T7717] 0 pages HighMem/MovableOnly [ 87.459594][ T7681] 0 [ 87.472249][ T7717] 209057 pages reserved [ 87.472451][ T7681] [ 87.476493][ T7717] 0 pages cma reserved [ 87.485980][ T7681] Node 0 [ 87.487464][ T7717] Unreclaimable slab info: [ 87.488770][ T7681] DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) [ 87.498367][ T7717] Name Used Total [ 87.523813][ T7717] bio-184 4KB 4KB [ 87.525863][ T7717] pid_3 7KB 7KB [ 87.528542][ T7717] pid_2 80KB 110KB [ 87.530610][ T7717] bio-472 15KB 15KB [ 87.532641][ T7717] bio-536 15KB 15KB [ 87.534699][ T7717] bio-552 15KB 15KB [ 87.535067][ T7681] 1*128kB [ 87.536707][ T7717] bio-584 15KB 15KB [ 87.536710][ T7681] (U) [ 87.536722][ T7717] zspage-zswap1 141KB 141KB [ 87.537964][ T7681] 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 1504kB [ 87.545640][ T7681] Node 0 DMA32: 8*4kB (ME) 21*8kB (UME) 72*16kB (UME) 46*32kB (ME) 26*64kB (UM) 14*128kB (UM) 4*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 7816kB [ 87.546456][ T7717] zs_handle-zswap1 199KB 204KB [ 87.554134][ T7717] zswap_entry 535KB 581KB [ 87.555924][ T7681] Node 1 DMA32: [ 87.556190][ T7717] AF_VSOCK 30KB 30KB [ 87.556204][ T7717] batadv_tt_change_cache 16KB 16KB [ 87.557409][ T7681] 17*4kB (U) 109*8kB (U) 290*16kB (UM) 150*32kB (UME) 80*64kB (UME) 35*128kB (UME) 15*256kB (M) 14*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 30988kB [ 87.566350][ T7681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.570913][ T7681] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.573941][ T7681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 87.576328][ T7717] batadv_tl_cache 16KB 16KB [ 87.577043][ T7681] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 87.579044][ T7717] IEEE-802.15.4-MAC 125KB 125KB [ 87.584066][ T7717] p9_req_t 7KB 7KB [ 87.586076][ T7717] SMC6 31KB 31KB [ 87.587156][ T7681] 6002 total pagecache pages [ 87.588124][ T7717] TIPC 123KB 123KB [ 87.589712][ T7681] 107 pages in swap cache [ 87.589720][ T7681] Free swap = 98796kB [ 87.589724][ T7681] Total swap = 124996kB [ 87.589729][ T7681] 524155 pages RAM [ 87.589733][ T7681] 0 pages HighMem/MovableOnly [ 87.589736][ T7681] 209057 pages reserved [ 87.589740][ T7681] 0 pages cma reserved [ 87.607514][ T7717] rds_tcp_connection 63KB 63KB [ 87.610746][ T7717] RDS 123KB 123KB [ 87.612718][ T7717] rds_connection 30KB 30KB [ 87.614858][ T7717] SCTPv6 120KB 120KB [ 87.616838][ T7717] SCTP 91KB 91KB [ 87.618817][ T7717] sctp_chunk 31KB 31KB [ 87.632777][ T7717] sctp_bind_bucket 12KB 12KB [ 87.634741][ T7717] L2TP/IP 126KB 126KB [ 87.636685][ T7717] RXRPC 128KB 128KB [ 87.638580][ T7717] rxrpc_call_jar 286KB 286KB [ 87.642094][ T7717] net_bridge_fdb_entry 15KB 15KB [ 87.644300][ T7717] MPTCPv6 62KB 62KB [ 87.649184][ T7717] fib6_node 96KB 128KB [ 87.651191][ T7717] ip6_dst_cache 155KB 296KB [ 87.653194][ T7717] RAWv6 185KB 185KB [ 87.655299][ T7717] UDPLITEv6 30KB 30KB [ 87.657304][ T7717] UDPv6 122KB 122KB [ 87.666429][ T7717] request_sock_TCPv6 15KB 15KB [ 87.668490][ T7717] TCPv6 506KB 566KB [ 87.671637][ T7717] nf_conntrack 23KB 23KB [ 87.673676][ T7717] fq_flow_cache 15KB 15KB [ 87.675729][ T7717] wg_peer 118KB 118KB [ 87.677740][ T7717] allowedips_node 11KB 11KB [ 87.685362][ T7717] t10_alua_lu_gp_cache 7KB 7KB [ 87.687488][ T7717] scsi_sense_cache 48KB 48KB [ 87.690903][ T7717] virtio_scsi_cmd 16KB 16KB [ 87.692971][ T7717] bio-136 73KB 100KB [ 87.694951][ T7717] io_kiocb 1171KB 1210KB [ 87.696962][ T7717] bio-264 7KB 7KB [ 87.698966][ T7717] mqueue_inode_cache 121KB 121KB [ 87.711576][ T7717] f2fs_bio_post_read_ctx 23KB 23KB [ 87.713817][ T7717] jfs_mp 7KB 7KB [ 87.715851][ T7717] fuse_request 7KB 7KB [ 87.717860][ T7717] cifs_small_rq 16KB 16KB [ 87.725867][ T7717] cifs_request 67KB 67KB [ 87.727902][ T7717] cifs_mpx_ids 7KB 7KB [ 87.735988][ T7717] cifs_io_subrequest 39KB 39KB [ 87.738034][ T7717] cifs_io_request 95KB 95KB [ 87.741693][ T7717] nfs_commit_data 15KB 15KB [ 87.743744][ T7717] nfs_write_data 63KB 63KB [ 87.745895][ T7717] jbd2_inode 11KB 11KB [ 87.748242][ T7717] ext4_system_zone 3KB 3KB [ 87.759595][ T7717] ext4_io_end_vec 11KB 11KB [ 87.761658][ T7717] kioctx 95KB 95KB [ 87.763697][ T7717] aio_kiocb 23KB 23KB [ 87.765729][ T7717] dnotify_mark 3KB 3KB [ 87.767720][ T7717] dnotify_struct 3KB 3KB [ 87.775219][ T7717] fasync_cache 15KB 15KB [ 87.777273][ T7717] pid_namespace 61KB 61KB [ 87.781561][ T7717] kvm_gmem_inode_cache 31KB 31KB [ 87.784127][ T7717] kvm_vcpu 61KB 61KB [ 87.786393][ T7717] x86_emulator 63KB 63KB [ 87.788522][ T7717] rpc_buffers 31KB 31KB [ 87.792354][ T7717] rpc_tasks 7KB 7KB [ 87.794877][ T7717] UNIX-STREAM 183KB 183KB [ 87.797455][ T7717] UNIX 476KB 796KB [ 87.807284][ T7717] UDP-Lite 30KB 30KB [ 87.810741][ T7717] MPTCP 120KB 120KB [ 87.812794][ T7717] tcp_bind2_bucket 16KB 16KB [ 87.814850][ T7717] tcp_bind_bucket 16KB 16KB [ 87.816884][ T7717] inet_peer 8KB 8KB [ 87.818903][ T7717] xfrm_state 31KB 31KB [ 87.836522][ T7717] ip_fib_trie 24KB 24KB [ 87.839081][ T7717] ip_fib_alias 61KB 71KB [ 87.848538][ T7717] rtable 63KB 100KB [ 87.857086][ T7717] PING 31KB 31KB [ 87.864428][ T7717] RAW 159KB 159KB [ 87.867017][ T7717] UDP 123KB 123KB [ 87.874525][ T7717] tw_sock_TCP 15KB 15KB [ 87.877036][ T7717] request_sock_TCP 15KB 15KB [ 87.880898][ T7717] TCP 459KB 637KB [ 87.883381][ T7717] hugetlbfs_inode_cache 125KB 125KB [ 87.886077][ T7717] netfs_subrequest 31KB 31KB [ 87.888599][ T7717] netfs_request 95KB 95KB [ 87.895585][ T7717] bio-280 15KB 15KB [ 87.898124][ T7717] ep_head 16KB 16KB [ 87.902399][ T7717] eventpoll_pwq 23KB 23KB [ 87.904997][ T7717] eventpoll_epi 59KB 59KB [ 87.907507][ T7717] inotify_inode_mark 27KB 27KB [ 87.910260][ T7717] sgpool-128 29KB 29KB [ 87.912762][ T7717] sgpool-64 31KB 31KB [ 87.915250][ T7717] sgpool-32 220KB 220KB [ 87.917767][ T7717] sgpool-16 62KB 62KB [ 87.926363][ T7717] sgpool-8 46KB 46KB [ 87.928742][ T7717] bio_crypt_ctx 7KB 7KB [ 87.931276][ T7717] bio_integrity_data 4KB 4KB [ 87.933817][ T7717] request_queue 238KB 247KB [ 87.936387][ T7717] blkdev_ioc 31KB 31KB [ 87.938901][ T7717] bio-200 267KB 289KB [ 87.943097][ T7717] biovec-max 582KB 697KB [ 87.945718][ T7717] biovec-64 189KB 189KB [ 87.948244][ T7717] biovec-16 39KB 39KB [ 87.959010][ T7717] uid_cache 23KB 23KB [ 87.961611][ T7717] iommu_iova_magazine 1039KB 1039KB [ 87.964223][ T7717] iommu_iova 144KB 144KB [ 87.966744][ T7717] dmaengine-unmap-256 30KB 30KB [ 87.982385][ T7717] dmaengine-unmap-128 30KB 30KB [ 87.984998][ T7717] dmaengine-unmap-16 4KB 4KB [ 87.987562][ T7717] dmaengine-unmap-2 4KB 4KB [ 87.990224][ T7717] QIPCRTR 31KB 31KB [ 87.992745][ T7717] audit_buffer 62KB 62KB [ 87.995278][ T7717] skbuff_ext_cache 28KB 28KB [ 87.997804][ T7717] skbuff_small_head 435KB 494KB [ 88.002580][ T7717] skbuff_fclone_cache 183KB 257KB [ 88.005172][ T7717] skbuff_head_cache 483KB 484KB [ 88.007695][ T7717] configfs_dir_cache 16KB 16KB [ 88.021359][ T7717] file_lease_cache 23KB 23KB [ 88.023893][ T7717] file_lock_cache 39KB 39KB [ 88.026445][ T7717] file_lock_ctx 15KB 15KB [ 88.029082][ T7717] fsnotify_mark_connector 15KB 15KB [ 88.031951][ T7717] posix_timers_cache 24KB 24KB [ 88.034467][ T7717] taskstats 61KB 61KB [ 88.036955][ T7717] mem_cgroup_per_node 103KB 123KB [ 88.045341][ T7717] mem_cgroup 89KB 89KB [ 88.047839][ T7717] proc_dir_entry 737KB 765KB [ 88.050440][ T7717] pde_opener 15KB 15KB [ 88.052956][ T7717] seq_file 109KB 148KB [ 88.056751][ T7717] sigqueue 55KB 55KB [ 88.059314][ T7717] shmem_inode_cache 7825KB 8050KB [ 88.061833][ T7717] kernfs_iattrs_cache 15KB 15KB [ 88.064436][ T7717] kernfs_node_cache 25774KB 25842KB [ 88.066969][ T7717] mnt_cache 95KB 118KB [ 88.069559][ T7717] bfilp 31KB 31KB [ 88.072072][ T7717] filp 303KB 535KB [ 88.074587][ T7717] names_cache 2222KB 3242KB [ 88.077116][ T7717] net_namespace 169KB 169KB [ 88.079685][ T7717] ima_iint_cache 63KB 63KB [ 88.082215][ T7717] lsm_inode_cache 2208KB 2287KB [ 88.084745][ T7717] lsm_file_cache 120KB 184KB [ 88.087271][ T7717] key_jar 31KB 31KB [ 88.089845][ T7717] uts_namespace 62KB 62KB [ 88.092336][ T7717] nsproxy 15KB 15KB [ 88.094863][ T7717] vm_area_struct 778KB 1109KB [ 88.097391][ T7717] fs_cache 86KB 108KB [ 88.100526][ T7717] files_cache 334KB 414KB [ 88.103020][ T7717] signal_cache 1009KB 1941KB [ 88.105572][ T7717] sighand_cache 1167KB 1954KB [ 88.108106][ T7717] task_struct 4226KB 4630KB [ 88.111397][ T7717] cred 173KB 320KB [ 88.113924][ T7717] anon_vma_chain 232KB 295KB [ 88.116495][ T7717] anon_vma 245KB 454KB [ 88.119022][ T7717] pid 208KB 456KB [ 88.121790][ T7717] Acpi-Operand 242KB 352KB [ 88.124296][ T7717] Acpi-ParseExt 55KB 90KB [ 88.126806][ T7717] Acpi-Parse 51KB 90KB [ 88.129645][ T7717] Acpi-State 70KB 106KB [ 88.132444][ T7717] Acpi-Namespace 56KB 56KB [ 88.134936][ T7717] shared_policy_node 4KB 4KB [ 88.137487][ T7717] numa_policy 15KB 15KB [ 88.140158][ T7717] perf_event 31KB 31KB [ 88.142631][ T7717] trace_event_file 528KB 528KB [ 88.145101][ T7717] ftrace_event_field 1004KB 1004KB [ 88.147619][ T7717] pool_workqueue 1824KB 1824KB [ 88.150250][ T7717] task_group 46KB 46KB [ 88.152740][ T7717] maple_node 678KB 1504KB [ 88.155273][ T7717] mm_struct 437KB 581KB [ 88.158190][ T7717] vmap_area 732KB 732KB [ 88.161587][ T7717] debug_objects_cache 2260KB 2355KB [ 88.164134][ T7717] page->ptl 126KB 185KB [ 88.166626][ T7717] kmalloc-cg-8k 1408KB 1408KB [ 88.169186][ T7717] kmalloc-cg-4k 12192KB 12672KB [ 88.171729][ T7717] kmalloc-cg-2k 8264KB 8928KB [ 88.174232][ T7717] kmalloc-cg-1k 2436KB 2592KB [ 88.176768][ T7717] kmalloc-cg-512 872KB 1136KB [ 88.179320][ T7717] kmalloc-cg-256 424KB 424KB [ 88.181839][ T7717] kmalloc-cg-128 248KB 252KB [ 88.184364][ T7717] kmalloc-cg-64 84KB 96KB [ 88.186878][ T7717] kmalloc-cg-32 63KB 176KB [ 88.190227][ T7717] kmalloc-cg-16 20KB 20KB [ 88.192719][ T7717] kmalloc-cg-8 28KB 28KB [ 88.195170][ T7717] kmalloc-cg-192 97KB 112KB [ 88.197684][ T7717] kmalloc-cg-96 76KB 76KB [ 88.204229][ T7717] kmalloc-8k 5424KB 5952KB [ 88.206818][ T7717] kmalloc-4k 12032KB 12544KB [ 88.210412][ T7717] kmalloc-2k 11980KB 13248KB [ 88.212951][ T7717] kmalloc-1k 6758KB 7808KB [ 88.215576][ T7717] kmalloc-512 8006KB 9040KB [ 88.218061][ T7717] kmalloc-256 5086KB 5096KB [ 88.227009][ T7717] kmalloc-128 3733KB 7072KB [ 88.230668][ T7717] kmalloc-64 2841KB 2964KB [ 88.233207][ T7717] kmalloc-32 1548KB 1872KB [ 88.235776][ T7717] kmalloc-16 380KB 392KB [ 88.238278][ T7717] kmalloc-8 410KB 452KB [ 88.242186][ T7717] kmalloc-192 3437KB 4180KB [ 88.244631][ T7717] kmalloc-96 1455KB 1936KB [ 88.247183][ T7717] kmem_cache_node 220KB 220KB [ 88.252381][ T7717] kmem_cache 195KB 195KB [ 88.254842][ T7717] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.703,pid=7717,uid=0 [ 88.265254][ T7717] Out of memory (oom_kill_allocating_task): Killed process 7717 (syz.2.703) total-vm:102096kB, anon-rss:160kB, file-rss:20544kB, shmem-rss:15872kB, UID:0 pgtables:144kB oom_score_adj:0 [ 88.281293][ T7721] syz.1.704 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 88.285285][ T7721] CPU: 3 UID: 0 PID: 7721 Comm: syz.1.704 Not tainted syzkaller #0 PREEMPT(full) [ 88.285301][ T7721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.285309][ T7721] Call Trace: [ 88.285313][ T7721] [ 88.285318][ T7721] dump_stack_lvl+0x16c/0x1f0 [ 88.285338][ T7721] dump_header+0x101/0x960 [ 88.285353][ T7721] oom_kill_process+0x176/0x910 [ 88.285364][ T7721] ? oom_cpuset_eligible.isra.0+0x199/0x2d0 [ 88.285377][ T7721] out_of_memory+0x1407/0x1700 [ 88.285391][ T7721] ? __pfx_out_of_memory+0x10/0x10 [ 88.285407][ T7721] __alloc_frozen_pages_noprof+0x1dbc/0x2430 [ 88.285427][ T7721] ? __blk_mq_sched_dispatch_requests+0x569/0x15f0 [ 88.285441][ T7721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.285457][ T7721] ? __lock_acquire+0x436/0x2890 [ 88.285470][ T7721] ? rcu_is_watching+0x12/0xc0 [ 88.285487][ T7721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.285505][ T7721] ? policy_nodemask+0xea/0x4e0 [ 88.285523][ T7721] alloc_pages_mpol+0x1fb/0x550 [ 88.285540][ T7721] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 88.285556][ T7721] ? swap_entry_swapped+0x1df/0x290 [ 88.285572][ T7721] ? __pfx_swap_entry_swapped+0x10/0x10 [ 88.285590][ T7721] folio_alloc_mpol_noprof+0x36/0x2f0 [ 88.285602][ T7721] __read_swap_cache_async+0x20a/0x500 [ 88.285617][ T7721] ? __pfx___read_swap_cache_async+0x10/0x10 [ 88.285632][ T7721] ? lock_acquire+0x179/0x330 [ 88.285642][ T7721] ? find_held_lock+0x2b/0x80 [ 88.285657][ T7721] swap_cluster_readahead+0x432/0x770 [ 88.285674][ T7721] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 88.285689][ T7721] ? __lock_acquire+0x436/0x2890 [ 88.285704][ T7721] ? get_vma_policy+0x242/0x3c0 [ 88.285715][ T7721] swapin_readahead+0x160/0x1220 [ 88.285733][ T7721] ? __pfx_swapin_readahead+0x10/0x10 [ 88.285747][ T7721] ? find_held_lock+0x2b/0x80 [ 88.285759][ T7721] ? swap_cache_get_folio+0x267/0x8e0 [ 88.285771][ T7721] ? swap_cache_get_folio+0x267/0x8e0 [ 88.285782][ T7721] ? swap_cache_get_folio+0x267/0x8e0 [ 88.285796][ T7721] ? swap_cache_get_folio+0x267/0x8e0 [ 88.285808][ T7721] ? swap_cache_get_folio+0x293/0x8e0 [ 88.285821][ T7721] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 88.285832][ T7721] ? __pfx_get_swap_device+0x10/0x10 [ 88.285848][ T7721] ? rcu_read_unlock+0x2d/0xb0 [ 88.285862][ T7721] ? do_swap_page+0x962/0x64a0 [ 88.285872][ T7721] do_swap_page+0x962/0x64a0 [ 88.285884][ T7721] ? __lock_acquire+0x436/0x2890 [ 88.285898][ T7721] ? __pfx_do_swap_page+0x10/0x10 [ 88.285910][ T7721] ? __pfx_default_wake_function+0x10/0x10 [ 88.285926][ T7721] ? do_fault+0x9fb/0x1ad0 [ 88.285943][ T7721] ? rcu_is_watching+0x12/0xc0 [ 88.285958][ T7721] ? ___pte_offset_map+0x175/0x380 [ 88.285976][ T7721] __handle_mm_fault+0x19cb/0x2bb0 [ 88.285989][ T7721] ? reacquire_held_locks+0xcd/0x1f0 [ 88.286000][ T7721] ? __pfx___handle_mm_fault+0x10/0x10 [ 88.286013][ T7721] ? lock_vma_under_rcu+0x176/0x580 [ 88.286028][ T7721] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 88.286047][ T7721] handle_mm_fault+0x3fe/0xad0 [ 88.286061][ T7721] do_user_addr_fault+0x60c/0x1370 [ 88.286080][ T7721] ? rcu_is_watching+0x12/0xc0 [ 88.286096][ T7721] exc_page_fault+0x64/0xc0 [ 88.286112][ T7721] asm_exc_page_fault+0x26/0x30 [ 88.286123][ T7721] RIP: 0023:0xf71b01ee [ 88.286137][ T7721] Code: Unable to access opcode bytes at 0xf71b01c4. [ 88.286142][ T7721] RSP: 002b:00000000ff82dce0 EFLAGS: 00010282 [ 88.286151][ T7721] RAX: 0000000000000000 RBX: 00000000f73e6ff4 RCX: 0000000000000000 [ 88.286158][ T7721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000154e6 [ 88.286164][ T7721] RBP: 00000000ff82df88 R08: 0000000000000000 R09: 0000000000000000 [ 88.286169][ T7721] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.286175][ T7721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.286189][ T7721] [ 88.286192][ T7721] Mem-Info: [ 88.412933][ T7721] active_anon:0 inactive_anon:120 isolated_anon:0 [ 88.412933][ T7721] active_file:0 inactive_file:108 isolated_file:0 [ 88.412933][ T7721] unevictable:5798 dirty:0 writeback:0 [ 88.412933][ T7721] slab_reclaimable:9517 slab_unreclaimable:50670 [ 88.412933][ T7721] mapped:24514 shmem:5798 pagetables:1321 [ 88.412933][ T7721] sec_pagetables:304 bounce:0 [ 88.412933][ T7721] kernel_misc_reclaimable:0 [ 88.412933][ T7721] free:9707 free_pcp:765 free_cma:0 [ 88.427455][ T7721] Node 0 active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:232kB unevictable:3648kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:0kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9824kB pagetables:1808kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 88.437566][ T7721] Node 1 active_anon:0kB inactive_anon:456kB active_file:0kB inactive_file:132kB unevictable:19544kB isolated(anon):0kB isolated(file):0kB mapped:97928kB dirty:0kB writeback:0kB shmem:19544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2888kB pagetables:3476kB sec_pagetables:72kB all_unreclaimable? yes Balloon:0kB [ 88.448126][ T7721] Node 0 DMA free:1504kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 88.460386][ T7721] lowmem_reserve[]: 0 289 289 289 289 [ 88.462673][ T7721] Node 0 DMA32 free:7456kB boost:4096kB min:17428kB low:20760kB high:24092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:12kB active_file:20kB inactive_file:132kB unevictable:3648kB writepending:0kB zspages:3472kB present:1032196kB managed:296820kB mlocked:112kB bounce:0kB free_pcp:136kB local_pcp:40kB free_cma:0kB [ 88.475418][ T7721] lowmem_reserve[]: 0 0 0 0 0 [ 88.477040][ T7721] Node 1 DMA32 free:35604kB boost:20480kB min:67624kB low:79408kB high:91192kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2852kB inactive_anon:5124kB active_file:0kB inactive_file:412kB unevictable:8544kB writepending:0kB zspages:3632kB present:1048432kB managed:948212kB mlocked:5008kB bounce:0kB free_pcp:632kB local_pcp:0kB free_cma:0kB [ 88.487827][ T7721] lowmem_reserve[]: 0 0 0 0 0 [ 88.489464][ T7721] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 1504kB [ 88.493808][ T7721] Node 0 DMA32: 8*4kB (ME) 22*8kB (ME) 69*16kB (ME) 48*32kB (ME) 22*64kB (M) 14*128kB (M) 4*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 7584kB [ 88.498717][ T7721] Node 1 DMA32: 1086*4kB (UM) 748*8kB (UM) 275*16kB (UME) 199*32kB (UME) 73*64kB (UME) 38*128kB (ME) 13*256kB (M) 13*512kB (M) 3*1024kB (M) 0*2048kB 0*4096kB = 43688kB [ 88.509156][ T7721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.512661][ T7721] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.515816][ T7721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 88.520436][ T7721] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 88.521240][ T7719] ------------[ cut here ]------------ [ 88.523485][ T7721] 2133 total pagecache pages [ 88.525725][ T7719] WARNING: mm/shmem.c:1402 at shmem_evict_inode+0x8eb/0xbe0, CPU#2: syz.2.703/7719 [ 88.525754][ T7719] Modules linked in: [ 88.525766][ T7719] CPU: 2 UID: 0 PID: 7719 Comm: syz.2.703 Not tainted syzkaller #0 PREEMPT(full) [ 88.525779][ T7719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.525786][ T7719] RIP: 0010:shmem_evict_inode+0x8eb/0xbe0 [ 88.525800][ T7719] Code: fe e8 49 26 bc ff 45 85 ff 75 ac e8 9f 2b bc ff 48 8b 74 24 28 48 8b 7c 24 30 e8 60 7c 93 ff e9 e5 fd ff ff e8 86 2b bc ff 90 <0f> 0b 90 e9 54 f9 ff ff e8 78 2b bc ff 4c 89 e2 48 b8 00 00 00 00 [ 88.525810][ T7719] RSP: 0000:ffffc90004727708 EFLAGS: 00010293 [ 88.525822][ T7719] RAX: 0000000000000000 RBX: ffff88804c0be900 RCX: ffffffff820226be [ 88.525829][ T7719] RDX: ffff88806b230000 RSI: ffffffff82022d6a RDI: 0000000000000007 [ 88.525836][ T7719] RBP: ffffc90004727830 R08: 0000000000000007 R09: 0000000000000000 [ 88.525843][ T7719] R10: 0000000000000008 R11: ffff88806b230b30 R12: 0000000000000008 [ 88.525849][ T7719] R13: 0000000000000000 R14: ffffed1009817d1c R15: 1ffff11009817cfe [ 88.525856][ T7719] FS: 0000000000000000(0000) GS:ffff8880978fc000(0000) knlGS:0000000000000000 [ 88.525879][ T7719] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 88.525889][ T7719] CR2: 00007f77ea190160 CR3: 000000004d03a000 CR4: 0000000000352ef0 [ 88.525896][ T7719] Call Trace: [ 88.525900][ T7719] [ 88.525908][ T7719] ? __pfx_shmem_evict_inode+0x10/0x10 [ 88.525922][ T7719] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 88.525939][ T7719] ? find_held_lock+0x2b/0x80 [ 88.525955][ T7719] ? evict+0x37e/0xad0 [ 88.525967][ T7719] ? __pfx_shmem_evict_inode+0x10/0x10 [ 88.525980][ T7719] evict+0x3c2/0xad0 [ 88.525991][ T7719] ? find_held_lock+0x2b/0x80 [ 88.526006][ T7719] ? __pfx_evict+0x10/0x10 [ 88.526026][ T7719] ? iput.part.0+0x619/0x1190 [ 88.526048][ T7719] iput.part.0+0x621/0x1190 [ 88.526077][ T7719] iput+0x35/0x40 [ 88.526096][ T7719] dentry_unlink_inode+0x29c/0x480 [ 88.526116][ T7719] __dentry_kill+0x1d0/0x600 [ 88.526138][ T7719] finish_dput+0x76/0x480 [ 88.528937][ T7721] 107 pages in swap cache [ 88.531462][ T7719] dput.part.0+0x451/0x570 [ 88.531482][ T7719] dput+0x1f/0x30 [ 88.531493][ T7719] __fput+0x51c/0xb70 [ 88.531506][ T7719] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.531523][ T7719] task_work_run+0x150/0x240 [ 88.531537][ T7719] ? __pfx_task_work_run+0x10/0x10 [ 88.531549][ T7719] ? do_raw_spin_unlock+0x172/0x230 [ 88.531565][ T7719] do_exit+0x87f/0x2bd0 [ 88.531578][ T7719] ? __pfx_do_exit+0x10/0x10 [ 88.531588][ T7719] ? do_raw_spin_lock+0x12c/0x2b0 [ 88.531606][ T7719] ? find_held_lock+0x2b/0x80 [ 88.531631][ T7719] do_group_exit+0xd3/0x2a0 [ 88.531653][ T7719] get_signal+0x2671/0x26d0 [ 88.533141][ T7721] Free swap = 99080kB [ 88.536196][ T7719] ? rcu_is_watching+0x12/0xc0 [ 88.540622][ T7721] Total swap = 124996kB [ 88.541729][ T7719] ? __pfx_get_signal+0x10/0x10 [ 88.548726][ T7721] 524155 pages RAM [ 88.550511][ T7719] ? __lock_acquire+0x436/0x2890 [ 88.553106][ T7721] 0 pages HighMem/MovableOnly [ 88.555750][ T7719] arch_do_signal_or_restart+0x8f/0x7a0 [ 88.558440][ T7721] 209057 pages reserved [ 88.561144][ T7719] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 88.561169][ T7719] ? find_held_lock+0x2b/0x80 [ 88.561183][ T7719] ? __might_fault+0xe3/0x190 [ 88.561196][ T7719] ? __might_fault+0xe3/0x190 [ 88.561210][ T7719] exit_to_user_mode_loop+0x8c/0x540 [ 88.563768][ T7721] 0 pages cma reserved [ 88.563779][ T7721] Unreclaimable slab info: [ 88.566757][ T7719] __do_fast_syscall_32+0x4a4/0x680 [ 88.566782][ T7719] do_fast_syscall_32+0x32/0x80 [ 88.566800][ T7719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.566815][ T7719] RIP: 0023:0xf703d579 [ 88.566825][ T7719] Code: Unable to access opcode bytes at 0xf703d54f. [ 88.566830][ T7719] RSP: 002b:00000000f540c60c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 88.566842][ T7719] RAX: fffffffffffffe00 RBX: 00000000f7405020 RCX: 0000000000000080 [ 88.566849][ T7719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7405024 [ 88.566856][ T7719] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 88.611530][ T7721] Name Used Total [ 88.611820][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.611832][ T7719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.613994][ T7721] bio-184 4KB 4KB [ 88.615417][ T7719] [ 88.615428][ T7719] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.615438][ T7719] CPU: 2 UID: 0 PID: 7719 Comm: syz.2.703 Not tainted syzkaller #0 PREEMPT(full) [ 88.615452][ T7719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.615460][ T7719] Call Trace: [ 88.615467][ T7719] [ 88.615471][ T7719] dump_stack_lvl+0x3d/0x1f0 [ 88.615495][ T7719] vpanic+0x640/0x6f0 [ 88.615508][ T7719] ? shmem_evict_inode+0x8eb/0xbe0 [ 88.615524][ T7719] panic+0xca/0xd0 [ 88.615535][ T7719] ? __pfx_panic+0x10/0x10 [ 88.615550][ T7719] ? check_panic_on_warn+0x1f/0xb0 [ 88.615562][ T7719] check_panic_on_warn+0xab/0xb0 [ 88.615575][ T7719] __warn+0x108/0x3c0 [ 88.615588][ T7719] __report_bug+0x2a0/0x520 [ 88.615606][ T7719] ? shmem_evict_inode+0x8eb/0xbe0 [ 88.615620][ T7719] ? __pfx___report_bug+0x10/0x10 [ 88.615637][ T7719] ? find_held_lock+0x2b/0x80 [ 88.615654][ T7719] ? lockdep_unlock+0x64/0xd0 [ 88.615668][ T7719] ? __lock_acquire+0x12c2/0x2890 [ 88.615679][ T7719] ? shmem_evict_inode+0x8eb/0xbe0 [ 88.615693][ T7719] report_bug+0xb2/0x220 [ 88.615708][ T7719] ? shmem_evict_inode+0x8eb/0xbe0 [ 88.615721][ T7719] handle_bug+0x127/0x260 [ 88.615733][ T7719] exc_invalid_op+0x17/0x50 [ 88.615745][ T7719] asm_exc_invalid_op+0x1a/0x20 [ 88.615778][ T7719] RIP: 0010:shmem_evict_inode+0x8eb/0xbe0 [ 88.615793][ T7719] Code: fe e8 49 26 bc ff 45 85 ff 75 ac e8 9f 2b bc ff 48 8b 74 24 28 48 8b 7c 24 30 e8 60 7c 93 ff e9 e5 fd ff ff e8 86 2b bc ff 90 <0f> 0b 90 e9 54 f9 ff ff e8 78 2b bc ff 4c 89 e2 48 b8 00 00 00 00 [ 88.615805][ T7719] RSP: 0000:ffffc90004727708 EFLAGS: 00010293 [ 88.615815][ T7719] RAX: 0000000000000000 RBX: ffff88804c0be900 RCX: ffffffff820226be [ 88.615823][ T7719] RDX: ffff88806b230000 RSI: ffffffff82022d6a RDI: 0000000000000007 [ 88.615830][ T7719] RBP: ffffc90004727830 R08: 0000000000000007 R09: 0000000000000000 [ 88.615837][ T7719] R10: 0000000000000008 R11: ffff88806b230b30 R12: 0000000000000008 [ 88.615843][ T7719] R13: 0000000000000000 R14: ffffed1009817d1c R15: 1ffff11009817cfe [ 88.615857][ T7719] ? shmem_evict_inode+0x23e/0xbe0 [ 88.615878][ T7719] ? shmem_evict_inode+0x8ea/0xbe0 [ 88.615899][ T7719] ? shmem_evict_inode+0x8ea/0xbe0 [ 88.615920][ T7719] ? __pfx_shmem_evict_inode+0x10/0x10 [ 88.615942][ T7719] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 88.615971][ T7719] ? find_held_lock+0x2b/0x80 [ 88.615990][ T7719] ? evict+0x37e/0xad0 [ 88.616003][ T7719] ? __pfx_shmem_evict_inode+0x10/0x10 [ 88.616022][ T7719] evict+0x3c2/0xad0 [ 88.616033][ T7719] ? find_held_lock+0x2b/0x80 [ 88.616048][ T7719] ? __pfx_evict+0x10/0x10 [ 88.616062][ T7719] ? iput.part.0+0x619/0x1190 [ 88.616076][ T7719] iput.part.0+0x621/0x1190 [ 88.616091][ T7719] iput+0x35/0x40 [ 88.616101][ T7719] dentry_unlink_inode+0x29c/0x480 [ 88.616113][ T7719] __dentry_kill+0x1d0/0x600 [ 88.616126][ T7719] finish_dput+0x76/0x480 [ 88.616139][ T7719] dput.part.0+0x451/0x570 [ 88.616152][ T7719] dput+0x1f/0x30 [ 88.616163][ T7719] __fput+0x51c/0xb70 [ 88.616176][ T7719] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.616193][ T7719] task_work_run+0x150/0x240 [ 88.616207][ T7719] ? __pfx_task_work_run+0x10/0x10 [ 88.616220][ T7719] ? do_raw_spin_unlock+0x172/0x230 [ 88.616236][ T7719] do_exit+0x87f/0x2bd0 [ 88.616249][ T7719] ? __pfx_do_exit+0x10/0x10 [ 88.616260][ T7719] ? do_raw_spin_lock+0x12c/0x2b0 [ 88.616273][ T7719] ? find_held_lock+0x2b/0x80 [ 88.616289][ T7719] do_group_exit+0xd3/0x2a0 [ 88.616302][ T7719] get_signal+0x2671/0x26d0 [ 88.616320][ T7719] ? rcu_is_watching+0x12/0xc0 [ 88.616338][ T7719] ? __pfx_get_signal+0x10/0x10 [ 88.616355][ T7719] ? __lock_acquire+0x436/0x2890 [ 88.616366][ T7719] arch_do_signal_or_restart+0x8f/0x7a0 [ 88.616384][ T7719] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 88.616404][ T7719] ? find_held_lock+0x2b/0x80 [ 88.616418][ T7719] ? __might_fault+0xe3/0x190 [ 88.616431][ T7719] ? __might_fault+0xe3/0x190 [ 88.616446][ T7719] exit_to_user_mode_loop+0x8c/0x540 [ 88.616462][ T7719] __do_fast_syscall_32+0x4a4/0x680 [ 88.616482][ T7719] do_fast_syscall_32+0x32/0x80 [ 88.616503][ T7719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.616525][ T7719] RIP: 0023:0xf703d579 [ 88.616542][ T7719] Code: Unable to access opcode bytes at 0xf703d54f. [ 88.616551][ T7719] RSP: 002b:00000000f540c60c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 88.616570][ T7719] RAX: fffffffffffffe00 RBX: 00000000f7405020 RCX: 0000000000000080 [ 88.616581][ T7719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7405024 [ 88.616594][ T7719] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 88.616604][ T7719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.616616][ T7719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.616640][ T7719] [ 88.617857][ T7719] Kernel Offset: disabled