last executing test programs: 4.057254808s ago: executing program 3 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) sendfile(r2, r2, 0x0, 0x8000000f3aa6ea) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 3.356648742s ago: executing program 0 (id=41): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0xf8203000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240448c8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 3.008395126s ago: executing program 3 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r5, &(0x7f0000000640), 0x0) pipe(&(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000180)={0x5, 0x2, [{0x4, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x20000008001}, {0xb, 0x0, 0x1}, {0x6, 0x0, 0x2}, {0x80000000, 0x0, 0x7}, {0x5, 0x0, 0x9}, {0x9, 0x0, 0x100}, {0x81, 0x0, 0x8b}, {0x6, 0x0, 0x4}, {0x7b, 0x0, 0x2}, {0xffff0862}, {0x1000008, 0x0, 0xe}, {0x9, 0x0, 0x2009}, {0x5, 0x0, 0xd5b}, {0x2, 0x0, 0xb3}, {0xfffffff7, 0x0, 0x40}]}) io_setup(0x11, &(0x7f0000000540)) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x42, 0x113) 3.001114665s ago: executing program 0 (id=43): unshare(0x24020400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x8, 0x4, &(0x7f00000009c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x34) poll(0x0, 0x0, 0x9) 2.984435819s ago: executing program 0 (id=44): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000ac0)=0xfff, 0x4) 2.907531156s ago: executing program 0 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af0ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1, r0}, 0xc) 2.907412806s ago: executing program 0 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2}) 2.826341735s ago: executing program 3 (id=47): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000b70000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.826204811s ago: executing program 0 (id=48): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@arena={0x21, 0x0, 0x0, 0x1, 0x20400, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) 2.637552197s ago: executing program 1 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f00000000c0)=[{0x35, 0x0, 0x3, 0xffffff7c}, {0x45, 0x1, 0x2, 0x5}, {0x44, 0x9, 0x6, 0x5}, {0x0, 0x6, 0xfb}, {0x6}]}) 2.096947429s ago: executing program 1 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.050141108s ago: executing program 1 (id=51): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000001340)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 2.043814836s ago: executing program 2 (id=52): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r0, 0xf8203000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240448c8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.001930053s ago: executing program 1 (id=53): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0xffffffff) ioctl(r0, 0x4010744d, 0x0) 1.937103563s ago: executing program 3 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0xc, &(0x7f0000000b80)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000cc0)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.89432095s ago: executing program 3 (id=55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2082, 0x0) write(r5, &(0x7f0000000640), 0x0) pipe(&(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00'}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000180)={0x5, 0x2, [{0x4, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x20000008001}, {0xb, 0x0, 0x1}, {0x6, 0x0, 0x2}, {0x80000000, 0x0, 0x7}, {0x5, 0x0, 0x9}, {0x9, 0x0, 0x100}, {0x81, 0x0, 0x8b}, {0x6, 0x0, 0x4}, {0x7b, 0x0, 0x2}, {0xffff0862}, {0x1000008, 0x0, 0xe}, {0x9, 0x0, 0x2009}, {0x5, 0x0, 0xd5b}, {0x2, 0x0, 0xb3}, {0xfffffff7, 0x0, 0x40}]}) io_setup(0x11, &(0x7f0000000540)) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x42, 0x113) 1.838065728s ago: executing program 1 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="3f729aeeb8ab"}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 1.617217909s ago: executing program 3 (id=57): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000cc0)={'syzkaller0\x00', 0xd132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="01030a917fe501794db737"], 0xffdd) 1.420204232s ago: executing program 2 (id=58): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xb0}}, 0x4000002) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010400ffffffffffffffff00ffff", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x40) 985.838688ms ago: executing program 2 (id=59): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc) 247.777054ms ago: executing program 2 (id=60): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000008c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x2, 0x4}, 0x50) 136.9115ms ago: executing program 2 (id=61): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000640), 0x0, 0x10, &(0x7f0000000680)}, 0x42) 73.347888ms ago: executing program 2 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x2, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000400)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "4b500028000000000000000001000001000000000000126700"/40}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:44674' (ED25519) to the list of known hosts. [ 32.828677][ T5651] cgroup: Unknown subsys name 'net' [ 32.953033][ T5651] cgroup: Unknown subsys name 'cpuset' [ 32.955514][ T5651] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.075500][ T5651] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.017579][ T5737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.020616][ T5737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.021145][ T5737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.023482][ T5737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.024052][ T5737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.038074][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.040014][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.051005][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.051060][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.053896][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.054569][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.056115][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.056551][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.057348][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.057626][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.057725][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.058513][ T66] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.059228][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.063462][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.069277][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.626296][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.626714][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.626779][ T5735] bridge_slave_0: entered allmulticast mode [ 38.627557][ T5735] bridge_slave_0: entered promiscuous mode [ 38.657364][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.657424][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.657485][ T5735] bridge_slave_1: entered allmulticast mode [ 38.658320][ T5735] bridge_slave_1: entered promiscuous mode [ 38.709533][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.728391][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.728476][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.728515][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.728567][ T5740] bridge_slave_0: entered allmulticast mode [ 38.729608][ T5740] bridge_slave_0: entered promiscuous mode [ 38.730545][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.730595][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.730647][ T5745] bridge_slave_0: entered allmulticast mode [ 38.731384][ T5745] bridge_slave_0: entered promiscuous mode [ 38.754066][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.754143][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.754228][ T5740] bridge_slave_1: entered allmulticast mode [ 38.755485][ T5740] bridge_slave_1: entered promiscuous mode [ 38.763490][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.763531][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.763583][ T5745] bridge_slave_1: entered allmulticast mode [ 38.764313][ T5745] bridge_slave_1: entered promiscuous mode [ 38.796619][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.807696][ T5735] team0: Port device team_slave_0 added [ 38.809043][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.821601][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.821745][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.821869][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.821959][ T5739] bridge_slave_0: entered allmulticast mode [ 38.823200][ T5739] bridge_slave_0: entered promiscuous mode [ 38.826542][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.826664][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.826735][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.826823][ T5739] bridge_slave_1: entered allmulticast mode [ 38.828067][ T5739] bridge_slave_1: entered promiscuous mode [ 38.832198][ T5735] team0: Port device team_slave_1 added [ 38.886286][ T5740] team0: Port device team_slave_0 added [ 38.886744][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.886755][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.886768][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.888355][ T5740] team0: Port device team_slave_1 added [ 38.895783][ T5745] team0: Port device team_slave_0 added [ 38.896526][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.896534][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.896547][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.909669][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.911216][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.912358][ T5745] team0: Port device team_slave_1 added [ 38.924684][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.924694][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.924707][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.957884][ T5739] team0: Port device team_slave_0 added [ 38.960299][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.960314][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.960335][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.961427][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.961439][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.961459][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.980103][ T5739] team0: Port device team_slave_1 added [ 38.999547][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.999562][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.999583][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.015445][ T5735] hsr_slave_0: entered promiscuous mode [ 39.015955][ T5735] hsr_slave_1: entered promiscuous mode [ 39.027770][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.027779][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.027796][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.059788][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.059803][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.059822][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.063949][ T5740] hsr_slave_0: entered promiscuous mode [ 39.064443][ T5740] hsr_slave_1: entered promiscuous mode [ 39.064753][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 39.064804][ T5740] Cannot create hsr debugfs directory [ 39.218625][ T5745] hsr_slave_0: entered promiscuous mode [ 39.219403][ T5745] hsr_slave_1: entered promiscuous mode [ 39.219962][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 39.219979][ T5745] Cannot create hsr debugfs directory [ 39.237506][ T5739] hsr_slave_0: entered promiscuous mode [ 39.238236][ T5739] hsr_slave_1: entered promiscuous mode [ 39.238797][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 39.238814][ T5739] Cannot create hsr debugfs directory [ 39.524166][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.530093][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.531050][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.534964][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.535513][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.541874][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.542858][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.545541][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.597800][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.599941][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.601398][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.607608][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.608174][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.613048][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.616384][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.620002][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.683311][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.687498][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.696275][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.699568][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.705553][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.709549][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.720964][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.725143][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.775285][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.776434][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.780925][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.781635][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.784612][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.796006][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.798710][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.803669][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.808741][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.829203][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.836418][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.842092][ T546] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.842275][ T546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.854757][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.854827][ T546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.890292][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.912958][ T546] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.913034][ T546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.929503][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.929609][ T546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.999780][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.006480][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.023826][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.036661][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.042210][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.042254][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.047684][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.047728][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.057887][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.057949][ T546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.058896][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.058936][ T546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.121024][ T5097] Bluetooth: hci2: command tx timeout [ 40.121029][ T5741] Bluetooth: hci3: command tx timeout [ 40.121036][ T5737] Bluetooth: hci1: command tx timeout [ 40.132634][ T5737] Bluetooth: hci0: command tx timeout [ 40.282428][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.287963][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.329302][ T5745] veth0_vlan: entered promiscuous mode [ 40.339344][ T5745] veth1_vlan: entered promiscuous mode [ 40.343842][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.347370][ T5735] veth0_vlan: entered promiscuous mode [ 40.363598][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.365125][ T5735] veth1_vlan: entered promiscuous mode [ 40.369834][ T5745] veth0_macvtap: entered promiscuous mode [ 40.380633][ T5745] veth1_macvtap: entered promiscuous mode [ 40.400978][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.418365][ T5735] veth0_macvtap: entered promiscuous mode [ 40.421964][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.424557][ T5740] veth0_vlan: entered promiscuous mode [ 40.427710][ T5735] veth1_macvtap: entered promiscuous mode [ 40.445084][ T5739] veth0_vlan: entered promiscuous mode [ 40.446866][ T5740] veth1_vlan: entered promiscuous mode [ 40.471532][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.473031][ T5739] veth1_vlan: entered promiscuous mode [ 40.478992][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.480420][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.480605][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.514080][ T546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.514098][ T546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.536396][ T5740] veth0_macvtap: entered promiscuous mode [ 40.551540][ T5740] veth1_macvtap: entered promiscuous mode [ 40.554361][ T546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.554378][ T546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.562809][ T5739] veth0_macvtap: entered promiscuous mode [ 40.586320][ T5739] veth1_macvtap: entered promiscuous mode [ 40.590384][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.590409][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.590427][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.590444][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.595910][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.595926][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.612004][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.620072][ T5745] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.628613][ T5745] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.629434][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.638235][ T5745] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.639190][ T5745] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.657430][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.658553][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.658564][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.662814][ T5745] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.675643][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.691121][ T5589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.691175][ T5589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.691206][ T5589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.691238][ T5589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.741065][ T5589] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.741107][ T5589] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.770806][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.770820][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.771550][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.771792][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.771969][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.772192][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.797181][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.797197][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.815116][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.815128][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.844266][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.844283][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.201629][ T5737] Bluetooth: hci3: command tx timeout [ 42.201651][ T5737] Bluetooth: hci1: command tx timeout [ 42.201688][ T5741] Bluetooth: hci0: command tx timeout [ 42.210255][ T5741] Bluetooth: hci2: command tx timeout [ 42.909189][ T5937] kernel profiling enabled (shift: 9) [ 43.538238][ T5955] FAULT_INJECTION: forcing a failure. [ 43.538238][ T5955] name failslab, interval 1, probability 0, space 0, times 1 [ 43.538271][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 43.538294][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.538305][ T5955] Call Trace: [ 43.538312][ T5955] [ 43.538320][ T5955] dump_stack_lvl+0x100/0x190 [ 43.538352][ T5955] should_fail_ex.cold+0x5/0xa [ 43.538377][ T5955] should_failslab+0xc2/0x120 [ 43.538410][ T5955] kmem_cache_alloc_noprof+0x92/0x6a0 [ 43.538438][ T5955] ? __kernfs_new_node+0xd2/0xa10 [ 43.538464][ T5955] __kernfs_new_node+0xd2/0xa10 [ 43.538487][ T5955] ? __pfx___kernfs_new_node+0x10/0x10 [ 43.538510][ T5955] ? lock_acquire+0x1d1/0x380 [ 43.538539][ T5955] ? kernfs_root+0x23/0x2a0 [ 43.538568][ T5955] ? find_held_lock+0x2b/0x80 [ 43.538590][ T5955] ? kernfs_root+0xee/0x2a0 [ 43.538617][ T5955] ? kernfs_root+0xee/0x2a0 [ 43.538652][ T5955] kernfs_new_node+0x117/0x150 [ 43.538676][ T5955] __kernfs_create_file+0x53/0x350 [ 43.538703][ T5955] sysfs_add_file_mode_ns+0x207/0x3c0 [ 43.538734][ T5955] sysfs_merge_group+0x194/0x340 [ 43.538758][ T5955] ? kernfs_add_one+0x214/0xaa0 [ 43.538775][ T5955] ? __pfx_sysfs_merge_group+0x10/0x10 [ 43.538805][ T5955] ? bus_add_device+0x2e2/0x6c0 [ 43.538823][ T5955] ? __pfx_bus_add_device+0x10/0x10 [ 43.538838][ T5955] ? __pfx_dev_add_physical_location+0x10/0x10 [ 43.538866][ T5955] dpm_sysfs_add+0x237/0x280 [ 43.538889][ T5955] device_add+0x9f4/0x1970 [ 43.538913][ T5955] ? __pfx_device_add+0x10/0x10 [ 43.538933][ T5955] ? kfree_const+0x5a/0x70 [ 43.538954][ T5955] ? kfree+0x1e5/0x6d0 [ 43.538985][ T5955] device_create_groups_vargs+0x1f8/0x270 [ 43.539013][ T5955] device_create+0xed/0x130 [ 43.539038][ T5955] ? __pfx_device_create+0x10/0x10 [ 43.539080][ T5955] ? do_raw_spin_lock+0x128/0x260 [ 43.539103][ T5955] ? is_console_locked+0x9/0x20 [ 43.539127][ T5955] ? con_is_visible+0x65/0x150 [ 43.539153][ T5955] ? csi_J+0x57e/0xad0 [ 43.539177][ T5955] vcs_make_sysfs+0x32/0x80 [ 43.539201][ T5955] vc_allocate+0x559/0x920 [ 43.539220][ T5955] ? __pfx_vc_allocate+0x10/0x10 [ 43.539247][ T5955] con_install+0xa1/0x620 [ 43.539268][ T5955] ? __pfx_con_install+0x10/0x10 [ 43.539295][ T5955] ? __pfx_con_install+0x10/0x10 [ 43.539316][ T5955] tty_init_dev.part.0+0x9e/0x470 [ 43.539342][ T5955] tty_open+0x953/0xe20 [ 43.539368][ T5955] ? __pfx_tty_open+0x10/0x10 [ 43.539387][ T5955] ? chrdev_open+0x589/0x6a0 [ 43.539412][ T5955] ? chrdev_open+0x589/0x6a0 [ 43.539442][ T5955] ? __pfx_tty_open+0x10/0x10 [ 43.539463][ T5955] chrdev_open+0x234/0x6a0 [ 43.539489][ T5955] ? __pfx_chrdev_open+0x10/0x10 [ 43.539515][ T5955] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 43.539541][ T5955] do_dentry_open+0x6ab/0x14d0 [ 43.539562][ T5955] ? __pfx_chrdev_open+0x10/0x10 [ 43.539592][ T5955] vfs_open+0x82/0x3f0 [ 43.539616][ T5955] path_openat+0x19fa/0x2440 [ 43.539647][ T5955] ? __pfx_path_openat+0x10/0x10 [ 43.539681][ T5955] do_file_open+0x20e/0x430 [ 43.539709][ T5955] ? __pfx_do_file_open+0x10/0x10 [ 43.539755][ T5955] ? _raw_spin_unlock+0x28/0x50 [ 43.539781][ T5955] ? alloc_fd+0x471/0x7a0 [ 43.539823][ T5955] do_sys_openat2+0x10f/0x1e0 [ 43.539844][ T5955] ? __pfx_do_sys_openat2+0x10/0x10 [ 43.539867][ T5955] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 43.539895][ T5955] __ia32_compat_sys_openat+0x12d/0x210 [ 43.539918][ T5955] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 43.539947][ T5955] do_int80_emulation+0x166/0x650 [ 43.539968][ T5955] asm_int80_emulation+0x1a/0x20 [ 43.539986][ T5955] RIP: 0023:0xf71d762b [ 43.540002][ T5955] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 43.540020][ T5955] RSP: 002b:00000000f545403c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 43.540041][ T5955] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5454100 [ 43.540052][ T5955] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.540063][ T5955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.540073][ T5955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 43.540083][ T5955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.540110][ T5955] [ 44.280274][ T5741] Bluetooth: hci1: command tx timeout [ 44.290497][ T5741] Bluetooth: hci2: command tx timeout [ 44.290518][ T5741] Bluetooth: hci0: command tx timeout [ 44.290530][ T5741] Bluetooth: hci3: command tx timeout [ 44.509310][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 44.813333][ T5971] binder: 5970:5971 ioctl 4018620d 0 returned -22 [ 44.813858][ T5971] binder: 5970:5971 ioctl 4030582b 0 returned -22 [ 44.950901][ T44] audit: type=1326 audit(1791929129.804:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.952468][ T44] audit: type=1326 audit(1791929129.804:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.952497][ T44] audit: type=1326 audit(1791929129.804:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.952517][ T44] audit: type=1326 audit(1791929129.804:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.952536][ T44] audit: type=1326 audit(1791929129.804:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.953051][ T44] audit: type=1326 audit(1791929129.804:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.953360][ T44] audit: type=1326 audit(1791929129.804:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.953622][ T44] audit: type=1326 audit(1791929129.804:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.953939][ T44] audit: type=1326 audit(1791929129.804:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7ff4fec code=0x7ffc0000 [ 44.954554][ T44] audit: type=1326 audit(1791929129.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.3.30" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71e762b code=0x7ffc0000 [ 46.361339][ T5737] Bluetooth: hci3: command tx timeout [ 46.370233][ T5737] Bluetooth: hci0: command tx timeout [ 46.370255][ T5737] Bluetooth: hci2: command tx timeout [ 46.370268][ T5737] Bluetooth: hci1: command tx timeout [ 48.347663][ T6044] syzkaller0: entered allmulticast mode [ 50.245421][ T6027] ------------[ cut here ]------------ [ 50.245431][ T6027] current->flags & PF_MEMALLOC [ 50.245436][ T6027] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#2: syz.0.48/6027 [ 50.252549][ T6027] Modules linked in: [ 50.254559][ T6027] CPU: 2 UID: 0 PID: 6027 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 50.257700][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.261109][ T6027] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 50.263229][ T6027] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 22 6f 1c 13 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 50.269378][ T6027] RSP: 0000:ffffc9000738e2d8 EFLAGS: 00010202 [ 50.271524][ T6027] RAX: ffff88802999cb00 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 50.274048][ T6027] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 50.276517][ T6027] RBP: ffff88802999cb2c R08: 0000000000008000 R09: 0000000000000001 [ 50.278989][ T6027] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 50.281573][ T6027] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000e71c75 [ 50.284306][ T6027] FS: 0000000000000000(0000) GS:ffff88809594a000(0063) knlGS:00000000f53d6b40 [ 50.287541][ T6027] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 50.289604][ T6027] CR2: 00000000f719b0f0 CR3: 000000006e5f2000 CR4: 0000000000352ef0 [ 50.292479][ T6027] Call Trace: [ 50.293570][ T6027] [ 50.294525][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.296461][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.298341][ T6027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.300456][ T6027] ? mas_find+0x2cb/0x790 [ 50.301883][ T6027] ? get_next_vma+0x319/0x420 [ 50.303327][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.304827][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.306674][ T6027] ? policy_nodemask+0xed/0x4f0 [ 50.308215][ T6027] alloc_pages_mpol+0x201/0x550 [ 50.309776][ T6027] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.311650][ T6027] ? filemap_get_entry+0x22d/0x450 [ 50.313325][ T6027] ? filemap_get_entry+0x22d/0x450 [ 50.315069][ T6027] folio_alloc_noprof+0x22/0x250 [ 50.316656][ T6027] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 50.318828][ T6027] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 50.321216][ T6027] ? lock_acquire+0x1d1/0x380 [ 50.322887][ T6027] ? ext4_get_group_info+0x146/0x480 [ 50.324633][ T6027] ? find_held_lock+0x2b/0x80 [ 50.326139][ T6027] __filemap_get_folio_mpol+0x653/0x1280 [ 50.327994][ T6027] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 50.329787][ T6027] ext4_discard_preallocations+0x584/0x10c0 [ 50.331792][ T6027] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 50.334295][ T6027] ? __pfx_xa_destroy+0x10/0x10 [ 50.336228][ T6027] ? inode_wait_for_writeback+0x171/0x390 [ 50.338501][ T6027] ? inode_lru_isolate+0x37/0xf00 [ 50.340634][ T6027] ext4_clear_inode+0x6e/0x280 [ 50.342550][ T6027] ext4_evict_inode+0x1de/0x17d0 [ 50.344151][ T6027] ? evict+0x37e/0xad0 [ 50.345478][ T6027] ? __pfx_ext4_evict_inode+0x10/0x10 [ 50.347558][ T6027] evict+0x3c2/0xad0 [ 50.348894][ T6027] ? _raw_spin_unlock+0x28/0x50 [ 50.350520][ T6027] ? __list_lru_walk_one+0x26d/0x550 [ 50.352360][ T6027] ? __pfx_evict+0x10/0x10 [ 50.353829][ T6027] ? xa_load+0x149/0x2c0 [ 50.355171][ T6027] ? xa_load+0x149/0x2c0 [ 50.356517][ T6027] dispose_list+0x117/0x1e0 [ 50.357978][ T6027] prune_icache_sb+0xea/0x150 [ 50.359475][ T6027] ? list_lru_count_one+0x147/0x320 [ 50.361209][ T6027] ? __pfx_prune_icache_sb+0x10/0x10 [ 50.362904][ T6027] super_cache_scan+0x376/0x550 [ 50.364462][ T6027] do_shrink_slab+0x416/0x1200 [ 50.366076][ T6027] shrink_slab+0xa82/0x12e0 [ 50.367599][ T6027] ? shrink_slab+0x677/0x12e0 [ 50.369195][ T6027] ? __pfx_shrink_slab+0x10/0x10 [ 50.370924][ T6027] ? lock_acquire+0x1d1/0x380 [ 50.372461][ T6027] shrink_one+0x398/0x850 [ 50.373860][ T6027] ? shrink_node+0x2b00/0x4320 [ 50.375648][ T6027] shrink_node+0x2b20/0x4320 [ 50.377567][ T6027] ? shrink_node+0x286e/0x4320 [ 50.379325][ T6027] ? __pfx_shrink_node+0x10/0x10 [ 50.381073][ T6027] ? queue_work_on+0x141/0x1e0 [ 50.382588][ T6027] ? do_try_to_free_pages+0x33e/0x16d0 [ 50.384308][ T6027] do_try_to_free_pages+0x33e/0x16d0 [ 50.385993][ T6027] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 50.387879][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.389814][ T6027] try_to_free_pages+0x2a0/0x740 [ 50.391737][ T6027] ? __pfx_try_to_free_pages+0x10/0x10 [ 50.393459][ T6027] ? find_held_lock+0x2b/0x80 [ 50.395086][ T6027] ? fs_reclaim_acquire+0x70/0x100 [ 50.396702][ T6027] ? fs_reclaim_acquire+0x70/0x100 [ 50.398313][ T6027] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 50.400238][ T6027] ? __schedule+0x126b/0x6920 [ 50.401734][ T6027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.403722][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.405330][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.407256][ T6027] ? __page_table_check_ptes_set+0x1d5/0x530 [ 50.409145][ T6027] ? do_raw_spin_lock+0x128/0x260 [ 50.410782][ T6027] ? find_held_lock+0x2b/0x80 [ 50.412296][ T6027] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 50.414143][ T6027] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 50.416038][ T6027] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 50.417851][ T6027] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 50.419805][ T6027] ? __apply_to_page_range+0x12b2/0x1520 [ 50.421702][ T6027] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 50.423588][ T6027] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 50.425564][ T6027] ? alloc_pages_bulk_noprof+0x66b/0x13c0 [ 50.427346][ T6027] ? alloc_pages_bulk_noprof+0x71e/0x13c0 [ 50.429141][ T6027] __kasan_populate_vmalloc+0xf0/0x210 [ 50.430924][ T6027] alloc_vmap_area+0x95d/0x2bb0 [ 50.432540][ T6027] ? kasan_save_track+0x14/0x30 [ 50.434285][ T6027] ? __kasan_kmalloc+0xaa/0xb0 [ 50.435905][ T6027] ? __pfx_alloc_vmap_area+0x10/0x10 [ 50.437601][ T6027] ? __get_vm_area_node+0x124/0x350 [ 50.439255][ T6027] __get_vm_area_node+0x1ed/0x350 [ 50.441003][ T6027] ? arena_map_alloc+0x2a0/0x8e0 [ 50.442642][ T6027] get_vm_area+0x73/0xa0 [ 50.444071][ T6027] ? arena_map_alloc+0x2a0/0x8e0 [ 50.445644][ T6027] arena_map_alloc+0x2a0/0x8e0 [ 50.447291][ T6027] map_create+0x874/0x30d0 [ 50.448733][ T6027] ? kasan_save_stack+0x30/0x50 [ 50.450314][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.451868][ T6027] ? __pfx_map_create+0x10/0x10 [ 50.453683][ T6027] ? lock_acquire+0x1d1/0x380 [ 50.455180][ T6027] ? __might_fault+0xc5/0x140 [ 50.456857][ T6027] ? __might_fault+0xc5/0x140 [ 50.458435][ T6027] __sys_bpf+0x12a0/0x4a30 [ 50.459966][ T6027] ? __pfx___sys_bpf+0x10/0x10 [ 50.461569][ T6027] ? tomoyo_path_number_perm+0x28f/0x580 [ 50.463395][ T6027] ? tomoyo_path_number_perm+0x188/0x580 [ 50.465170][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.466793][ T6027] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.468373][ T6027] ? rcu_is_watching+0x13/0xc0 [ 50.469884][ T6027] ? kcov_ioctl+0x17a/0x760 [ 50.471586][ T6027] ? kfree+0x1e5/0x6d0 [ 50.472895][ T6027] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.474795][ T6027] ? __ia32_sys_bpf+0xcc/0x170 [ 50.476361][ T6027] __ia32_sys_bpf+0xcc/0x170 [ 50.477944][ T6027] ? __do_fast_syscall_32+0xb3/0x8b0 [ 50.479584][ T6027] __do_fast_syscall_32+0x13a/0x8b0 [ 50.481456][ T6027] do_fast_syscall_32+0x32/0x70 [ 50.483058][ T6027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.485205][ T6027] RIP: 0023:0xf7f24fec [ 50.486494][ T6027] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 50.488864][ T6027] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 50.491920][ T6027] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080001140 [ 50.494427][ T6027] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.496860][ T6027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.499321][ T6027] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.501957][ T6027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.504447][ T6027] [ 50.505413][ T6027] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.507607][ T6027] CPU: 2 UID: 0 PID: 6027 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 50.510689][ T6027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.514073][ T6027] Call Trace: [ 50.515132][ T6027] [ 50.516070][ T6027] dump_stack_lvl+0x100/0x190 [ 50.517592][ T6027] vpanic+0x553/0x970 [ 50.518850][ T6027] ? __pfx_vpanic+0x10/0x10 [ 50.520283][ T6027] panic+0xd1/0xe0 [ 50.521487][ T6027] ? __pfx_panic+0x10/0x10 [ 50.522900][ T6027] check_panic_on_warn.cold+0x19/0x34 [ 50.524759][ T6027] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 50.526683][ T6027] __warn.cold+0x191/0x318 [ 50.528092][ T6027] __report_bug+0x30f/0x440 [ 50.529686][ T6027] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 50.531603][ T6027] ? __pfx___report_bug+0x10/0x10 [ 50.533140][ T6027] ? __zone_watermark_ok+0x281/0x500 [ 50.534780][ T6027] ? get_page_from_freelist+0x344/0x35d0 [ 50.536538][ T6027] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 50.538597][ T6027] report_bug+0xb3/0x220 [ 50.540035][ T6027] ? __alloc_frozen_pages_noprof+0x1eac/0x3300 [ 50.542115][ T6027] handle_bug+0x16a/0x2a0 [ 50.543497][ T6027] exc_invalid_op+0x17/0x50 [ 50.544955][ T6027] asm_exc_invalid_op+0x1a/0x20 [ 50.546487][ T6027] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300 [ 50.548605][ T6027] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 22 6f 1c 13 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 [ 50.554893][ T6027] RSP: 0000:ffffc9000738e2d8 EFLAGS: 00010202 [ 50.556792][ T6027] RAX: ffff88802999cb00 RBX: 0000000000000000 RCX: 1ffff1100fffad29 [ 50.559138][ T6027] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 50.561606][ T6027] RBP: ffff88802999cb2c R08: 0000000000008000 R09: 0000000000000001 [ 50.564294][ T6027] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40 [ 50.566748][ T6027] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000e71c75 [ 50.569338][ T6027] ? __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 50.571237][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.573126][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.574975][ T6027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.576954][ T6027] ? mas_find+0x2cb/0x790 [ 50.578317][ T6027] ? get_next_vma+0x319/0x420 [ 50.579804][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.581407][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.583263][ T6027] ? policy_nodemask+0xed/0x4f0 [ 50.584825][ T6027] alloc_pages_mpol+0x201/0x550 [ 50.586355][ T6027] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 50.588034][ T6027] ? filemap_get_entry+0x22d/0x450 [ 50.589653][ T6027] ? filemap_get_entry+0x22d/0x450 [ 50.591278][ T6027] folio_alloc_noprof+0x22/0x250 [ 50.592845][ T6027] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 50.594831][ T6027] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 50.596963][ T6027] ? lock_acquire+0x1d1/0x380 [ 50.598456][ T6027] ? ext4_get_group_info+0x146/0x480 [ 50.600118][ T6027] ? find_held_lock+0x2b/0x80 [ 50.601616][ T6027] __filemap_get_folio_mpol+0x653/0x1280 [ 50.603390][ T6027] ext4_mb_load_buddy_gfp+0x70d/0x1b20 [ 50.605136][ T6027] ext4_discard_preallocations+0x584/0x10c0 [ 50.606992][ T6027] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 50.608975][ T6027] ? __pfx_xa_destroy+0x10/0x10 [ 50.610523][ T6027] ? inode_wait_for_writeback+0x171/0x390 [ 50.612308][ T6027] ? inode_lru_isolate+0x37/0xf00 [ 50.613906][ T6027] ext4_clear_inode+0x6e/0x280 [ 50.615416][ T6027] ext4_evict_inode+0x1de/0x17d0 [ 50.616980][ T6027] ? evict+0x37e/0xad0 [ 50.618272][ T6027] ? __pfx_ext4_evict_inode+0x10/0x10 [ 50.619959][ T6027] evict+0x3c2/0xad0 [ 50.621217][ T6027] ? _raw_spin_unlock+0x28/0x50 [ 50.622751][ T6027] ? __list_lru_walk_one+0x26d/0x550 [ 50.624419][ T6027] ? __pfx_evict+0x10/0x10 [ 50.625827][ T6027] ? xa_load+0x149/0x2c0 [ 50.627165][ T6027] ? xa_load+0x149/0x2c0 [ 50.628509][ T6027] dispose_list+0x117/0x1e0 [ 50.629950][ T6027] prune_icache_sb+0xea/0x150 [ 50.631450][ T6027] ? list_lru_count_one+0x147/0x320 [ 50.633085][ T6027] ? __pfx_prune_icache_sb+0x10/0x10 [ 50.634747][ T6027] super_cache_scan+0x376/0x550 [ 50.636284][ T6027] do_shrink_slab+0x416/0x1200 [ 50.637800][ T6027] shrink_slab+0xa82/0x12e0 [ 50.639233][ T6027] ? shrink_slab+0x677/0x12e0 [ 50.640724][ T6027] ? __pfx_shrink_slab+0x10/0x10 [ 50.642286][ T6027] ? lock_acquire+0x1d1/0x380 [ 50.643778][ T6027] shrink_one+0x398/0x850 [ 50.645159][ T6027] ? shrink_node+0x2b00/0x4320 [ 50.646663][ T6027] shrink_node+0x2b20/0x4320 [ 50.648126][ T6027] ? shrink_node+0x286e/0x4320 [ 50.649641][ T6027] ? __pfx_shrink_node+0x10/0x10 [ 50.651205][ T6027] ? queue_work_on+0x141/0x1e0 [ 50.652732][ T6027] ? do_try_to_free_pages+0x33e/0x16d0 [ 50.654435][ T6027] do_try_to_free_pages+0x33e/0x16d0 [ 50.656092][ T6027] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 50.657879][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.659436][ T6027] try_to_free_pages+0x2a0/0x740 [ 50.661002][ T6027] ? __pfx_try_to_free_pages+0x10/0x10 [ 50.662708][ T6027] ? find_held_lock+0x2b/0x80 [ 50.664196][ T6027] ? fs_reclaim_acquire+0x70/0x100 [ 50.665811][ T6027] ? fs_reclaim_acquire+0x70/0x100 [ 50.667422][ T6027] __alloc_frozen_pages_noprof+0xf8a/0x3300 [ 50.669279][ T6027] ? __schedule+0x126b/0x6920 [ 50.670760][ T6027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 50.672744][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.674308][ T6027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 50.676160][ T6027] ? __page_table_check_ptes_set+0x1d5/0x530 [ 50.678052][ T6027] ? do_raw_spin_lock+0x128/0x260 [ 50.679631][ T6027] ? find_held_lock+0x2b/0x80 [ 50.681124][ T6027] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 50.682879][ T6027] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 50.684653][ T6027] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 50.686289][ T6027] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 50.688159][ T6027] ? __apply_to_page_range+0x12b2/0x1520 [ 50.689874][ T6027] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 50.691726][ T6027] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 50.693617][ T6027] ? alloc_pages_bulk_noprof+0x66b/0x13c0 [ 50.695324][ T6027] ? alloc_pages_bulk_noprof+0x71e/0x13c0 [ 50.697025][ T6027] __kasan_populate_vmalloc+0xf0/0x210 [ 50.698682][ T6027] alloc_vmap_area+0x95d/0x2bb0 [ 50.700176][ T6027] ? kasan_save_track+0x14/0x30 [ 50.701682][ T6027] ? __kasan_kmalloc+0xaa/0xb0 [ 50.703120][ T6027] ? __pfx_alloc_vmap_area+0x10/0x10 [ 50.704760][ T6027] ? __get_vm_area_node+0x124/0x350 [ 50.706418][ T6027] __get_vm_area_node+0x1ed/0x350 [ 50.708000][ T6027] ? arena_map_alloc+0x2a0/0x8e0 [ 50.709566][ T6027] get_vm_area+0x73/0xa0 [ 50.710908][ T6027] ? arena_map_alloc+0x2a0/0x8e0 [ 50.712467][ T6027] arena_map_alloc+0x2a0/0x8e0 [ 50.713984][ T6027] map_create+0x874/0x30d0 [ 50.715389][ T6027] ? kasan_save_stack+0x30/0x50 [ 50.716926][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.718490][ T6027] ? __pfx_map_create+0x10/0x10 [ 50.720017][ T6027] ? lock_acquire+0x1d1/0x380 [ 50.721511][ T6027] ? __might_fault+0xc5/0x140 [ 50.722996][ T6027] ? __might_fault+0xc5/0x140 [ 50.724492][ T6027] __sys_bpf+0x12a0/0x4a30 [ 50.725910][ T6027] ? __pfx___sys_bpf+0x10/0x10 [ 50.727413][ T6027] ? tomoyo_path_number_perm+0x28f/0x580 [ 50.729170][ T6027] ? tomoyo_path_number_perm+0x188/0x580 [ 50.730930][ T6027] ? __lock_acquire+0x5c0/0x1f40 [ 50.732483][ T6027] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 50.734065][ T6027] ? rcu_is_watching+0x13/0xc0 [ 50.735564][ T6027] ? kcov_ioctl+0x17a/0x760 [ 50.737007][ T6027] ? kfree+0x1e5/0x6d0 [ 50.738298][ T6027] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 50.740122][ T6027] ? __ia32_sys_bpf+0xcc/0x170 [ 50.741647][ T6027] __ia32_sys_bpf+0xcc/0x170 [ 50.743107][ T6027] ? __do_fast_syscall_32+0xb3/0x8b0 [ 50.744786][ T6027] __do_fast_syscall_32+0x13a/0x8b0 [ 50.746425][ T6027] do_fast_syscall_32+0x32/0x70 [ 50.747959][ T6027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.749931][ T6027] RIP: 0023:0xf7f24fec [ 50.751235][ T6027] Code: Unable to access opcode bytes at 0xf7f24fc2. [ 50.753302][ T6027] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 50.755890][ T6027] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080001140 [ 50.758413][ T6027] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.760957][ T6027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.763384][ T6027] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 50.765859][ T6027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.768325][ T6027] [ 50.769878][ T6027] Kernel Offset: disabled [ 50.771239][ T6027] Rebooting in 86400 seconds..