[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 41.649272] audit: type=1800 audit(1546235122.076:25): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 41.685517] audit: type=1800 audit(1546235122.076:26): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 41.706147] audit: type=1800 audit(1546235122.076:27): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 48.314506] sshd (8119) used greatest stack depth: 15720 bytes left Warning: Permanently added '10.128.10.57' (ECDSA) to the list of known hosts. 2018/12/31 05:45:35 fuzzer started 2018/12/31 05:45:37 dialing manager at 10.128.0.26:44681 2018/12/31 05:45:37 syscalls: 1 2018/12/31 05:45:37 code coverage: enabled 2018/12/31 05:45:37 comparison tracing: enabled 2018/12/31 05:45:37 setuid sandbox: enabled 2018/12/31 05:45:37 namespace sandbox: enabled 2018/12/31 05:45:37 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/31 05:45:37 fault injection: enabled 2018/12/31 05:45:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/31 05:45:37 net packet injection: enabled 2018/12/31 05:45:37 net device setup: enabled 05:48:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") unshare(0x400) syncfs(0xffffffffffffffff) [ 254.359640] IPVS: ftp: loaded support on port[0] = 21 05:48:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000300)=ANY=[]}) [ 254.535053] chnl_net:caif_netlink_parms(): no params data found [ 254.634066] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.641272] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.649552] device bridge_slave_0 entered promiscuous mode [ 254.660290] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.667297] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.676457] device bridge_slave_1 entered promiscuous mode [ 254.697709] IPVS: ftp: loaded support on port[0] = 21 [ 254.711004] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 254.723603] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:48:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cfd000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r3 = creat(0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$EVIOCGBITSND(r3, 0x80404532, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000600)="f95e0139fa7af261f6ed534b45e15c3b90ef064a30515b8a92ddccfb83d9a7ea9cf8730f0bb5a208f067a3fc5fe3861130fe96", 0x33, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000580)="74d1f36114c27a1ed317970050e154f41c8d673f680ff5934c080a163d9ac030b66f7239e11f4e3205bba780dd8600344a95dc7cbd8b1e47f5186867228aef82ae32e18492f6d14d8bae2b741f423f4b24ca0f3255a0", 0x56) r5 = open(0x0, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000240)) fdatasync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fchmod(r6, 0x2000000000020) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000c15000/0x1000)=nil, 0x8, 0x0, 0x0, &(0x7f0000b94000/0x2000)=nil, 0x6}) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 254.767797] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 254.777640] team0: Port device team_slave_0 added [ 254.803666] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 254.814398] team0: Port device team_slave_1 added [ 254.855776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 254.876234] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 05:48:55 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) read$eventfd(r0, &(0x7f0000000080), 0xff97) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x0, &(0x7f0000000140)) read$eventfd(r0, 0x0, 0x0) [ 254.997552] device hsr_slave_0 entered promiscuous mode [ 255.054547] device hsr_slave_1 entered promiscuous mode [ 255.142812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 255.149933] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 255.190492] IPVS: ftp: loaded support on port[0] = 21 [ 255.208628] IPVS: ftp: loaded support on port[0] = 21 [ 255.229653] bridge0: port 2(bridge_slave_1) entered blocking state 05:48:55 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c440607040137544fdd93000d610300030004000007760100000000000040000000000000007901000013949bc7390f70f832094300020007fc0900008087000000010400000000000001000008000000000600000000007ba014db000000000000040000020000000009ea80975a9f2bac74bd9e"], 0x77) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000080)="7a4cfd63f52f740ded", 0x9, 0x8000, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0xff, 0x0) [ 255.236228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.243340] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.249719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.279587] chnl_net:caif_netlink_parms(): no params data found [ 255.476960] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 255.484362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.519032] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.528009] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.538465] device bridge_slave_0 entered promiscuous mode [ 255.547630] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.555616] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.564819] device bridge_slave_1 entered promiscuous mode [ 255.578987] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.587787] bridge0: port 2(bridge_slave_1) entered disabled state 05:48:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x800, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xe, 0x4, 0x4, 0x1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 255.610203] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 255.623458] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 255.637221] IPVS: ftp: loaded support on port[0] = 21 [ 255.641134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 255.677931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.688242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.699678] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 255.709076] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.794448] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 255.806252] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 255.864873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 255.877995] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 255.886550] team0: Port device team_slave_0 added [ 255.896712] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 255.904654] team0: Port device team_slave_1 added [ 255.913727] chnl_net:caif_netlink_parms(): no params data found [ 255.929021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.937202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.938992] IPVS: ftp: loaded support on port[0] = 21 [ 255.945171] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.956274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.965855] chnl_net:caif_netlink_parms(): no params data found [ 255.975491] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 256.019487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 256.050026] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 256.144257] device hsr_slave_0 entered promiscuous mode [ 256.212407] device hsr_slave_1 entered promiscuous mode [ 256.254531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 256.263140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.270686] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.277088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.287600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 256.311324] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.319465] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.327183] device bridge_slave_0 entered promiscuous mode [ 256.345675] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 256.354022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 256.362658] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 256.381338] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.388095] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.396167] device bridge_slave_1 entered promiscuous mode [ 256.408109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 256.441393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.456459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 256.466019] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.473065] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.480178] device bridge_slave_0 entered promiscuous mode [ 256.506147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 256.512764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.520663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.528598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.536524] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.543037] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.550035] device bridge_slave_1 entered promiscuous mode [ 256.567939] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 256.618644] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.628742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 256.659524] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 256.675767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.683904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.715459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 256.729488] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 256.747273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.756233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.803736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 256.811257] team0: Port device team_slave_0 added [ 256.819640] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 256.827609] team0: Port device team_slave_1 added [ 256.838083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 256.845285] chnl_net:caif_netlink_parms(): no params data found [ 256.855437] chnl_net:caif_netlink_parms(): no params data found [ 256.865311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 256.873303] team0: Port device team_slave_0 added [ 256.879097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 256.887101] team0: Port device team_slave_1 added [ 256.892536] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 256.899895] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 256.908910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.916512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.954628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 256.962367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 256.990602] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 256.997321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 257.075874] device hsr_slave_0 entered promiscuous mode [ 257.112601] device hsr_slave_1 entered promiscuous mode [ 257.186551] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.193504] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.200550] device bridge_slave_0 entered promiscuous mode [ 257.224870] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 257.238916] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 257.246990] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.254345] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.261383] device bridge_slave_1 entered promiscuous mode [ 257.276614] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 257.335823] device hsr_slave_0 entered promiscuous mode [ 257.372524] device hsr_slave_1 entered promiscuous mode [ 257.423146] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 257.430239] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 257.449750] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.456733] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.464559] device bridge_slave_0 entered promiscuous mode [ 257.475402] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.481770] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.489458] device bridge_slave_1 entered promiscuous mode [ 257.511251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.527277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.538309] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.561038] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 257.609291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.619446] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.651418] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.684114] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.697001] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.704821] team0: Port device team_slave_0 added [ 257.710756] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.718447] team0: Port device team_slave_1 added [ 257.724412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 05:48:58 executing program 0: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) prctl$PR_GET_FP_MODE(0x2e) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES32], 0x2c7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x11, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) ioctl$FS_IOC_GETFLAGS(r2, 0xc020660b, &(0x7f0000000000)) [ 257.746857] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 257.757875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 257.776860] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.802378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.810484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.827564] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.835787] team0: Port device team_slave_0 added [ 257.845957] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 257.853081] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.874524] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.881994] team0: Port device team_slave_1 added [ 257.891387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 257.910143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.954458] device hsr_slave_0 entered promiscuous mode [ 257.992751] device hsr_slave_1 entered promiscuous mode 05:48:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000001c0)=0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) statfs(&(0x7f0000000040)='./control\x00', &(0x7f0000000100)=""/7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00007a7000)='./control\x00', 0xa4000960) r4 = dup3(r2, r3, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) [ 258.032772] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 258.039820] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 258.049420] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 258.069285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.079643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.087642] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.094068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.101648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.111976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 258.125499] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 258.138229] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 258.160943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.170583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.178550] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.184984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.195979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 258.207796] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 258.256591] device hsr_slave_0 entered promiscuous mode [ 258.292640] device hsr_slave_1 entered promiscuous mode 05:48:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)) r1 = fcntl$getown(r0, 0x9) sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0) [ 258.332998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.343043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.355648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.403439] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 258.411525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 258.428268] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 258.437567] 8021q: adding VLAN 0 to HW filter on device team0 05:48:58 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='F}\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40286608, 0x20000001) pipe(&(0x7f0000000080)) [ 258.449604] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 258.460895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.481448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 258.501353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 258.522922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.525882] EXT4-fs warning (device sda1): verify_group_input:105: Cannot add at group 125 (only 16 groups) [ 258.534536] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 05:48:59 executing program 0: futex(&(0x7f0000000240)=0x1, 0x8b, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f00000002c0), 0x0) [ 258.552296] EXT4-fs warning (device sda1): verify_group_input:105: Cannot add at group 125 (only 16 groups) [ 258.559635] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 258.569232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.577981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.586037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.594557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 05:48:59 executing program 0: setrlimit(0x400000000000007, &(0x7f0000000000)={0x4, 0x4}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x200) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f00000000c0)={0x8266, 0xffff, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)) [ 258.603416] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.609795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.627125] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 258.637061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 258.647612] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 05:48:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000140)={0x0, "44a0318c604ad0b28662c9dbdb7cd579f6ca3e6f2acf08682695a6e50c831726", 0x3, 0x400, 0x5, 0x10001, 0x6, 0x2, 0x9, 0xff}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000300)={0x0, 0x7f, 0x186, {}, 0x5, 0xff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setattr(r3, &(0x7f0000000080)={0x30, 0x7, 0x1, 0x5, 0x0, 0x5, 0x400, 0x9377}, 0x0) dup2(r2, r1) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) getpid() [ 258.688913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 258.702518] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 258.733083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.740355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.749282] hrtimer: interrupt took 34644 ns [ 258.756675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.790403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.799046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.815010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.828430] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.834908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.841995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.851082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.858149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.872360] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 258.883577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 258.896880] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 258.913461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.921500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.931048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.939310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.954193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.963751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.985474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 258.994682] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 259.000761] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.014838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.021878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.030090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.039195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.047798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.056175] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.062591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.069463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.080614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 259.090808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 259.100589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 259.107846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.116405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.124123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.131666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.139490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.147151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.182241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.195236] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 259.201278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.213411] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 259.219445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.234631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.241668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.249736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.258099] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.264508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.281983] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 259.296941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 259.310986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 259.325767] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 259.333762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.341863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.350810] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.363580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.373829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 259.387151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.398655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.408983] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.416082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.425713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.434044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.440913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.449546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 259.463336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.472093] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.479779] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 259.491175] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.498956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.509841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.518211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.526072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.533085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.543516] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 259.556307] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 259.562972] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.571698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.589488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.597421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.612041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.633070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.650479] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.656958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.667295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.688247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 259.700123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.714889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.740792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.760322] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.766795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.774139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.782016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.790254] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.796622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.806681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 259.820888] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 259.830714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.838711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.847116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.855768] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.862180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.869432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.877248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.888051] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 259.898421] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 05:49:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000140)={0x0, "44a0318c604ad0b28662c9dbdb7cd579f6ca3e6f2acf08682695a6e50c831726", 0x3, 0x400, 0x5, 0x10001, 0x6, 0x2, 0x9, 0xff}) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000300)={0x0, 0x7f, 0x186, {}, 0x5, 0xff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setattr(r3, &(0x7f0000000080)={0x30, 0x7, 0x1, 0x5, 0x0, 0x5, 0x400, 0x9377}, 0x0) dup2(r2, r1) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) getpid() [ 259.906874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.919027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.930142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 259.948261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.976521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 259.986913] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 259.996109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.005714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 260.017165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.027665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.039658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.050431] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.063332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 260.076189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 260.085149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.096626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.104465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.112589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.120208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.129618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 260.139142] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 260.149998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.158166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.168313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.176394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.187230] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 260.196922] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 260.210048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.218084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.226145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.235152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.258003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 260.266335] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 260.277575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.287573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.297666] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 260.305014] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.313729] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 260.319752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.344130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.355055] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 260.368623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.381763] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 260.437578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.487590] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 05:49:01 executing program 2: socketpair(0xa, 0x2000000001, 0x2, &(0x7f0000000180)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x70ec, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200000, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xffffffffffff8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffff801}, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x7c, [0x20, 0x6, 0x100000000, 0xbe2c, 0x4, 0x0, 0x10001, 0x564c]}, 0x5c) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6gre0\x00') 05:49:01 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x8000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x101, 0x4000000000, 0xb4, 0x3000, 0x0, 0x8, 0x80200, 0xa, 0x3, 0x4, 0xe00000, 0x7db, 0xfffffffffffffff8, 0x8, 0x8001, 0xb92, 0x3ff, 0x400, 0x7ff, 0xffffffff, 0x7, 0x0, 0x0, 0x2, 0x827, 0x3f, 0x800, 0x2, 0x200, 0x80000000, 0x5, 0x7, 0x3, 0xffff, 0x0, 0x2, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000000), 0x8}, 0x9402, 0x473f1e86, 0x400, 0x5, 0xa5a1, 0x5, 0xdde}, r2, 0x10, r0, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x18) 05:49:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000400)=0x5, 0x4) getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0xfffffffffffffffe, 0x0, {{0x5, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe0000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}}, 0xffffffffffffff5e) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0xffffffffffffffbd, 0x0}}], 0x3fffcf6, 0x0, 0x0) 05:49:01 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000b8e000/0x3000)=nil, 0x3000, 0x0, 0x1012, r0, 0x0) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x30013, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x2, 0x70, 0x6, 0x20, 0x954f, 0x81, 0x0, 0x2d, 0x8, 0xd, 0xffffffff, 0x9, 0x0, 0xffffffffffffff0a, 0x7, 0x8, 0x3, 0xfff, 0x9, 0x0, 0x5, 0x3, 0x3, 0x41, 0x68d, 0x1, 0x3, 0x3f, 0x100000001, 0x4, 0x7, 0xa1a8, 0x40, 0x5, 0x6, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x56, 0xd979, 0xfffffffffffffffb, 0xd, 0xa6, 0x8, 0xfffffffffffffff7}) 05:49:01 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x9, 0x30, 0x8, 0x7ff}, &(0x7f0000000180)=0x18) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)=ANY=[@ANYBLOB="6b2e423772220cf3"]) r2 = socket$inet6(0xa, 0x802, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f0000000040)) 05:49:01 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) ioctl$KDDISABIO(r0, 0x4b37) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x100000001) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) [ 260.880645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:49:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd3000/0x18000)=nil, 0x0, 0xfffffffffffffda1, 0x41, 0x0, 0x32c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:49:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) msgget(0x1, 0x458) fremovexattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="737900000000000000057204c531e26bfbe3bd00ac5f7be429845286ad6a85efe41a40eead3bd39209cf03e97462ef2822d5b484b774bc4309eb7582912884e79bfcb67f74a8857481aea0187475f2035898aa2fa7754bdcd861fdfd9274458fd8aca40e0eafb13060c3773f090087317f4eb8e1817987f33330bba614de554a66d644e01dcde287468e08c3e8479b939d5a"]) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000a40a009d8b28810000000000"], 0x28}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd28, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) 05:49:01 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0xffffffffffffffff, 0x8001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f00007e0000)=""/4, &(0x7f0000000080)=0x150) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5, 0x80) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x800000, 0x1, [], &(0x7f0000000140)={0x9a090e, 0x100000001, [], @value=0xab43}}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x1e0d, 0x5, 0x8, 0x0, r4}, 0x2c) 05:49:01 executing program 3: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000040)={0x0, 0x2e, 0x7, 0x0, 0x0, 0x9}) r3 = dup2(r1, r0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000780)=""/35) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="15a9dee6a14df50d06d9355b11083e26bc2abb3a3990d735b4d909c8f948b916dfcd101d173095039091300b3cd2b10f67c042", 0x33}, {&(0x7f00000000c0)="52d23f8b5989082035f91bd9b805225e7835be2680b192de62c7da2c7a15", 0x1e}, {&(0x7f0000000380)="8f175f51bce5c85090b4c558db0162367f26d8a4da2b9c7237ea160506c3184376846ab6037fe4565741d48c980791886d8e02d5ce74b6e66451f04d72f7d8f9740e7d7ff154a4cfe36fb49253cb5567a70cef830bb86ed94d89908fa9cf4996a33118234bc3c40a15e3bf139e9b0b44c4bb1e3cb7e8e47039eb5758b50c86b040874e80512886b7997fdb31803eccca6cef60bb693d09337a7859a982785172db288b6e0d3fbe9d90763d27e35e6364020e2af0e08416c144615ed6f33208a56fc9ff3b51ba757cc1e113514006f6b784c8572964ae4ff134d9a739345072e740d35793e47f949a06b2bbeb9e2bf6", 0xef}, {&(0x7f0000000100)="4ffa6177203b173d91a88f0f721f3d529665d5fd9579b372ce011dcf756fe01ad9b94bfe83ff78f314d62308d367c9b7410b16396fef6e5f4a0fa1d41967cc033a21fa0b7e3f9e180198543a06", 0x4d}, {&(0x7f0000000200)="0c38686583ac4d580467f7236e1081edab171eb37c2ff3d1a114dccfaff986cfb1e54767c1b539d5e1cb0da2fbfcae844a310a3738aab76ece6408b31e4cd31caec24feec95fe35f8dffd716a2a8eb043b8b0d09606cfa1a48913c862df003f42f70fb5be16d173cc346a7eb2c134f30c789405c211168362aef0fd717c033cd07f3a319eb018a5c87bbd521eae2ad4bb38bc593a3ef310140093656c0bd47d01cc1444c16994a56e39ccc99371b8d3b5597", 0xb2}, {&(0x7f0000000480)="10c11b5c84258b5da8f5e0a992505be05350c11c784adc0580261788f276dd3bbb36de2d083aaea7ab24ba23a2b294b89adf460331ed549dd7f75be74d47e8ea7f572ea213dec026eca7575cc42a1b41785b77d007bbb2b23bf41f32becb47c74b877ad2199b7112fd28e13e68fde6040ce3b8297d163f062e205e738b10e3d9f99f50dbe88e25e57181193a4db0ee8e90ec8cfa666b9a3c8bdad5f17d3706d52db1d3adff", 0xa5}], 0x6, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000002c0)={0x80, 0x100000000000001, 'clien\x00\x00\x00\x00\x00\x00\x04\x00\x02\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfd\xe9\x99\xdc\x00', 0x0, "000000000000001f", "88e7ed00047ff9fff77711be18a3d118e000000000d200"}) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x2000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0xe8, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x14}, 0x15}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x1c}, 0x9}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x5, @multicast1}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0xffffffff80000001}, @in6={0xa, 0x4e24, 0x32, @local, 0x10001}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc2}, @in6={0xa, 0x4e24, 0x200, @mcast2, 0xffffffff}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000740)={r4, 0x7fff, 0x100000000, 0x10001}, 0x10) 05:49:01 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x8000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x101, 0x4000000000, 0xb4, 0x3000, 0x0, 0x8, 0x80200, 0xa, 0x3, 0x4, 0xe00000, 0x7db, 0xfffffffffffffff8, 0x8, 0x8001, 0xb92, 0x3ff, 0x400, 0x7ff, 0xffffffff, 0x7, 0x0, 0x0, 0x2, 0x827, 0x3f, 0x800, 0x2, 0x200, 0x80000000, 0x5, 0x7, 0x3, 0xffff, 0x0, 0x2, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000000), 0x8}, 0x9402, 0x473f1e86, 0x400, 0x5, 0xa5a1, 0x5, 0xdde}, r2, 0x10, r0, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x18) 05:49:01 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000340)) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r1, &(0x7f0000fc4fbe)=""/80, 0x50) r2 = openat(r1, &(0x7f0000000080)='./control\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000001c0)=0x1e) rmdir(&(0x7f0000000300)='./control\x00') 05:49:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x14, 0x5, 0x8, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0xa}, [@typed={0xc, 0x80, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x801) 05:49:01 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) msgget(0x1, 0x458) fremovexattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="737900000000000000057204c531e26bfbe3bd00ac5f7be429845286ad6a85efe41a40eead3bd39209cf03e97462ef2822d5b484b774bc4309eb7582912884e79bfcb67f74a8857481aea0187475f2035898aa2fa7754bdcd861fdfd9274458fd8aca40e0eafb13060c3773f090087317f4eb8e1817987f33330bba614de554a66d644e01dcde287468e08c3e8479b939d5a"]) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000a40a009d8b28810000000000"], 0x28}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd28, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) 05:49:01 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) msgget(0x1, 0x458) fremovexattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="737900000000000000057204c531e26bfbe3bd00ac5f7be429845286ad6a85efe41a40eead3bd39209cf03e97462ef2822d5b484b774bc4309eb7582912884e79bfcb67f74a8857481aea0187475f2035898aa2fa7754bdcd861fdfd9274458fd8aca40e0eafb13060c3773f090087317f4eb8e1817987f33330bba614de554a66d644e01dcde287468e08c3e8479b939d5a"]) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000a40a009d8b28810000000000"], 0x28}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd28, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) 05:49:01 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x8000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x101, 0x4000000000, 0xb4, 0x3000, 0x0, 0x8, 0x80200, 0xa, 0x3, 0x4, 0xe00000, 0x7db, 0xfffffffffffffff8, 0x8, 0x8001, 0xb92, 0x3ff, 0x400, 0x7ff, 0xffffffff, 0x7, 0x0, 0x0, 0x2, 0x827, 0x3f, 0x800, 0x2, 0x200, 0x80000000, 0x5, 0x7, 0x3, 0xffff, 0x0, 0x2, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000000), 0x8}, 0x9402, 0x473f1e86, 0x400, 0x5, 0xa5a1, 0x5, 0xdde}, r2, 0x10, r0, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x18) 05:49:01 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x101, 0x1, {0x2, @raw_data="41ba0be3cb02ec0ea1a1db378334df8b1fb064ae17cccde81b4bf02f5af943a89b3efd56e522185c2ee78e0846596b012a5482b6847a687739d0937c57b830cdb1e895503e5e58cba7ecc9f3144c1bf0c6255a6f15453a4df62583fa820a1f8a95ef025b145ca11584c2a1ad91214f87f938892cce518c560f4fa2b437b8aedd832b0bfa46ec6b508629b0496948925c5dee544dfc5ff2af2c3d55d1a2e9c5401d74c88925db8bf9460c34752d64a32d281cdf9a0912e7adc9d3625efbc3c28c4e8c40d8f35c8018"}}) 05:49:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x14, 0x5, 0x8, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0xa}, [@typed={0xc, 0x80, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x801) 05:49:02 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r0, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe78f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000002, 0x1011, r2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x28001, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000200)=0x80) 05:49:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) msgget(0x1, 0x458) fremovexattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="737900000000000000057204c531e26bfbe3bd00ac5f7be429845286ad6a85efe41a40eead3bd39209cf03e97462ef2822d5b484b774bc4309eb7582912884e79bfcb67f74a8857481aea0187475f2035898aa2fa7754bdcd861fdfd9274458fd8aca40e0eafb13060c3773f090087317f4eb8e1817987f33330bba614de554a66d644e01dcde287468e08c3e8479b939d5a"]) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000a40a009d8b28810000000000"], 0x28}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd28, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) 05:49:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='statm\x00') connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x2, 0x3ff, 0x1, 0xffffffff80000000, 0x683, 0x5}, 0x1717}, 0xa) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x77, 0x2}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="9080"], 0x2) recvfrom(r0, &(0x7f0000000040)=""/32, 0x20, 0x2000, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x20000050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) close(0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)) mknod(&(0x7f0000000480)='./file0\x00', 0x1043, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000140)) ioctl$TCGETA(r0, 0x5405, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x100, 0x10000) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x6, 0x40000000000000, 0xd65, 0x1000, 0x15, 0x2, 0x80000000, 0x2, 0x5, 0x800}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 05:49:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) msgget(0x1, 0x458) fremovexattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="737900000000000000057204c531e26bfbe3bd00ac5f7be429845286ad6a85efe41a40eead3bd39209cf03e97462ef2822d5b484b774bc4309eb7582912884e79bfcb67f74a8857481aea0187475f2035898aa2fa7754bdcd861fdfd9274458fd8aca40e0eafb13060c3773f090087317f4eb8e1817987f33330bba614de554a66d644e01dcde287468e08c3e8479b939d5a"]) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000a40a009d8b28810000000000"], 0x28}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd28, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) [ 261.753509] mmap: syz-executor1 (8305) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 05:49:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4), 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)={0x1c, 0x15, 0xa, 0xfffffffffffffffd, 0x0, 0x0, {}, [@typed={0x8, 0x1}]}, 0x1c}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x14, 0x5, 0x8, 0x70bd2a, 0x25dfdbfe, {0x1, 0x0, 0xa}, [@typed={0xc, 0x80, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x801) 05:49:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) msgget(0x1, 0x458) fremovexattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="737900000000000000057204c531e26bfbe3bd00ac5f7be429845286ad6a85efe41a40eead3bd39209cf03e97462ef2822d5b484b774bc4309eb7582912884e79bfcb67f74a8857481aea0187475f2035898aa2fa7754bdcd861fdfd9274458fd8aca40e0eafb13060c3773f090087317f4eb8e1817987f33330bba614de554a66d644e01dcde287468e08c3e8479b939d5a"]) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000a40a009d8b28810000000000"], 0x28}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd28, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) 05:49:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) msgget(0x1, 0x458) fremovexattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="737900000000000000057204c531e26bfbe3bd00ac5f7be429845286ad6a85efe41a40eead3bd39209cf03e97462ef2822d5b484b774bc4309eb7582912884e79bfcb67f74a8857481aea0187475f2035898aa2fa7754bdcd861fdfd9274458fd8aca40e0eafb13060c3773f090087317f4eb8e1817987f33330bba614de554a66d644e01dcde287468e08c3e8479b939d5a"]) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000a40a009d8b28810000000000"], 0x28}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd28, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) 05:49:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000010, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000016000504de02bc000000007c7400000a9d5557f3ca3a2fc5ba83daf2dc787a83000000d3690d21ffde160412c9d33fc3d7d6b1dc87aadb4803c59b7d13c5f87848d806a55d7d61265b4a6883317df6082e76ebc2b201c842f70a5b299a041afa9b26d144a7a4bd08b5e831de1cb216f87242a7b7005f23aeace29f85c558f30e9831f15e9c5989bf9cdc2599ac5c9c441ca171ab90a21c9ccddfe0f7a3ebc897feeb90aacdfa1531c88700b329537fd1cc", @ANYRES32=0x0, @ANYBLOB="14000a00000000000000000f0000000000000001"], 0x2c}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x492081) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000001380)=""/4096, 0x1000) 05:49:02 executing program 4: stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000980)) setresuid(r0, r1, r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in6, @in=@remote, 0x4e22, 0x3, 0x4e23, 0x0, 0x2, 0xa0, 0x80, 0x2b, r4, r5}, {0xc934, 0x7, 0x948e, 0x8, 0x3, 0xb604, 0x5, 0x9}, {0x8000, 0x0, 0x4, 0x100}, 0x9, 0x6e6bb9, 0x1, 0x1, 0x2, 0x1}, {{@in6=@loopback, 0x4d4}, 0x2, @in6=@mcast2, 0x3502, 0x0, 0x0, 0xffffffffffff0000, 0x6, 0x1, 0x100000000}}, 0xe8) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x38) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) 05:49:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) msgget(0x1, 0x458) fremovexattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="737900000000000000057204c531e26bfbe3bd00ac5f7be429845286ad6a85efe41a40eead3bd39209cf03e97462ef2822d5b484b774bc4309eb7582912884e79bfcb67f74a8857481aea0187475f2035898aa2fa7754bdcd861fdfd9274458fd8aca40e0eafb13060c3773f090087317f4eb8e1817987f33330bba614de554a66d644e01dcde287468e08c3e8479b939d5a"]) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000000000002900000002000000000000000000000000000000a40a009d8b28810000000000"], 0x28}, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0xd28, 0x4}) [ 262.153142] input: syz1 as /devices/virtual/input/input5 [ 262.208436] input: syz1 as /devices/virtual/input/input6 [ 268.832458] oom_reaper: reaped process 8298 (syz-executor0), now anon-rss:0kB, file-rss:32704kB, shmem-rss:0kB [ 268.918519] rsyslogd invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 268.928709] CPU: 1 PID: 8020 Comm: rsyslogd Not tainted 4.20.0-rc7-next-20181224 #190 [ 268.936686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.946080] Call Trace: [ 268.948860] dump_stack+0x1d3/0x2c6 [ 268.952508] ? dump_stack_print_info.cold.1+0x20/0x20 [ 268.957759] dump_header+0x253/0x1239 [ 268.961581] ? pagefault_out_of_memory+0x19d/0x19d [ 268.966551] ? mark_held_locks+0x130/0x130 [ 268.970843] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 268.976134] ? __lock_acquire+0x62f/0x4c20 [ 268.980416] ? percpu_ref_tryget_live+0x460/0x460 [ 268.985282] ? graph_lock+0x270/0x270 [ 268.989089] ? graph_lock+0x270/0x270 [ 268.992903] ? print_usage_bug+0xc0/0xc0 [ 268.997031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.002581] ? find_held_lock+0x36/0x1c0 [ 269.006657] ? mark_held_locks+0xc7/0x130 [ 269.010860] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 269.015985] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 269.021095] ? lockdep_hardirqs_on+0x421/0x5c0 [ 269.025749] ? trace_hardirqs_on+0xbd/0x310 [ 269.030138] ? kasan_check_read+0x11/0x20 [ 269.034307] ? ___ratelimit+0x36f/0x655 [ 269.038288] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 269.043748] ? trace_hardirqs_on+0x310/0x310 [ 269.048163] ? lock_downgrade+0x900/0x900 [ 269.052321] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 269.057431] ? ___ratelimit+0xaa/0x655 [ 269.061328] ? idr_get_free+0xf70/0xf70 [ 269.065323] ? task_will_free_mem+0xb30/0xb30 [ 269.069820] ? find_held_lock+0x36/0x1c0 [ 269.073899] oom_kill_process.cold.27+0x10/0x8f9 [ 269.078693] ? graph_lock+0x270/0x270 [ 269.082511] ? oom_badness+0xe6/0xaa0 [ 269.086322] ? kasan_check_read+0x11/0x20 [ 269.090475] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 269.095778] ? oom_evaluate_task+0x540/0x540 [ 269.100193] ? find_held_lock+0x36/0x1c0 [ 269.104270] ? out_of_memory+0xcc5/0x1480 [ 269.108423] ? lock_downgrade+0x900/0x900 [ 269.112630] ? check_preemption_disabled+0x48/0x280 [ 269.117661] ? kasan_check_read+0x11/0x20 [ 269.121832] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 269.127121] ? rcu_read_unlock_special+0x370/0x370 [ 269.132060] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.137608] ? oom_evaluate_task+0x302/0x540 [ 269.142027] out_of_memory+0x8ba/0x1480 [ 269.146019] ? oom_killer_disable+0x3a0/0x3a0 [ 269.149401] syz-executor0: vmalloc: allocation failure, allocated 1399951360 of 3905806336 bytes, mode:0x6080c0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 269.150541] ? __alloc_pages_slowpath+0xf45/0x2d90 [ 269.171761] ? __ww_mutex_check_waiters+0x160/0x160 [ 269.176817] __alloc_pages_slowpath+0x22f7/0x2d90 [ 269.181666] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 269.186535] ? warn_alloc+0x120/0x120 [ 269.190341] ? __alloc_pages_slowpath+0x25dd/0x2d90 [ 269.195367] ? graph_lock+0x270/0x270 [ 269.199170] ? graph_lock+0x270/0x270 [ 269.202982] ? check_preemption_disabled+0x48/0x280 [ 269.208018] ? graph_lock+0x270/0x270 [ 269.211824] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.217397] ? should_fail+0x22d/0xd01 [ 269.221301] ? graph_lock+0x270/0x270 [ 269.225131] ? __lock_is_held+0xb5/0x140 [ 269.229256] ? ___might_sleep+0x1ed/0x300 [ 269.233406] ? lock_release+0xa00/0xa00 [ 269.237394] ? arch_local_save_flags+0x40/0x40 [ 269.242002] __alloc_pages_nodemask+0xa89/0xde0 [ 269.246682] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 269.251705] ? __lock_is_held+0xb5/0x140 [ 269.255782] ? __lock_acquire+0x62f/0x4c20 [ 269.260020] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 269.265038] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 269.270613] alloc_pages_current+0x10c/0x210 [ 269.275035] __page_cache_alloc+0x38c/0x5b0 [ 269.279361] ? xa_load+0x2ba/0x460 [ 269.282905] ? filemap_range_has_page+0x4e0/0x4e0 [ 269.287770] ? check_preemption_disabled+0x48/0x280 [ 269.292841] pagecache_get_page+0x396/0xf30 [ 269.297175] ? find_get_pages_contig+0x18d0/0x18d0 [ 269.302106] ? __page_cache_alloc+0x191/0x5b0 [ 269.306596] ? xa_load+0x2e1/0x460 [ 269.310136] ? xa_clear_mark+0x40/0x40 [ 269.314022] ? graph_lock+0x270/0x270 [ 269.317832] ? print_usage_bug+0xc0/0xc0 [ 269.321894] ? graph_lock+0x270/0x270 [ 269.325692] ? graph_lock+0x270/0x270 [ 269.329510] ? __do_page_cache_readahead+0x663/0x810 [ 269.334617] ? find_held_lock+0x36/0x1c0 [ 269.338686] ? filemap_fault+0x1a61/0x2a70 [ 269.342941] ? lock_downgrade+0x900/0x900 [ 269.347111] ? check_preemption_disabled+0x48/0x280 [ 269.352134] ? kasan_check_read+0x11/0x20 [ 269.356286] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 269.361568] ? rcu_read_unlock_special+0x370/0x370 [ 269.366502] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.372044] ? check_preemption_disabled+0x48/0x280 [ 269.377069] filemap_fault+0x129c/0x2a70 [ 269.381144] ? grab_cache_page_write_begin+0xa0/0xa0 [ 269.386256] ? filemap_map_pages+0xec9/0x1d20 [ 269.390765] ? rcu_softirq_qs+0x20/0x20 [ 269.394751] ? __lock_page_killable+0x170/0x170 [ 269.399537] ? is_bpf_text_address+0xd3/0x170 [ 269.404069] ? kernel_text_address+0x79/0xf0 [ 269.408508] ? __save_stack_trace+0x8d/0xf0 [ 269.412834] ? graph_lock+0x270/0x270 [ 269.416642] ? save_stack+0xa9/0xd0 [ 269.420288] ? save_stack+0x43/0xd0 [ 269.423946] ? __kasan_slab_free+0x102/0x150 [ 269.428368] ? __lock_is_held+0xb5/0x140 [ 269.432448] ? lock_acquire+0x1ed/0x520 [ 269.436449] ? ext4_filemap_fault+0x7a/0xad [ 269.440796] ? lock_release+0xa00/0xa00 [ 269.444772] ? arch_local_save_flags+0x40/0x40 [ 269.449374] ? down_read+0x8d/0x120 [ 269.453002] ? ext4_filemap_fault+0x7a/0xad [ 269.457343] ? __down_interruptible+0x700/0x700 [ 269.462021] ext4_filemap_fault+0x82/0xad [ 269.466201] __do_fault+0x176/0x6f0 [ 269.469834] ? lock_page+0x170/0x170 [ 269.473545] ? pmd_val+0x88/0x100 [ 269.476995] ? add_mm_counter_fast+0xd0/0xd0 [ 269.481417] ? pmd_val+0x88/0x100 [ 269.484872] ? add_mm_counter_fast+0xd0/0xd0 [ 269.489308] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 269.494331] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.499899] __handle_mm_fault+0x392f/0x55f0 [ 269.504353] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 269.509192] ? graph_lock+0x270/0x270 [ 269.512996] ? print_usage_bug+0xc0/0xc0 [ 269.517063] ? graph_lock+0x270/0x270 [ 269.520888] ? graph_lock+0x270/0x270 [ 269.524712] ? handle_mm_fault+0x42a/0xc70 [ 269.528990] ? lock_downgrade+0x900/0x900 [ 269.533145] ? check_preemption_disabled+0x48/0x280 [ 269.538174] ? kasan_check_read+0x11/0x20 [ 269.542324] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 269.547604] ? rcu_read_unlock_special+0x370/0x370 [ 269.552549] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.558087] ? check_preemption_disabled+0x48/0x280 [ 269.563115] handle_mm_fault+0x54f/0xc70 [ 269.567179] ? __handle_mm_fault+0x55f0/0x55f0 [ 269.571770] ? find_vma+0x34/0x190 [ 269.575841] __do_page_fault+0x5f6/0xd70 [ 269.579944] ? kernel_write+0x120/0x120 [ 269.583944] do_page_fault+0xf2/0x7e0 [ 269.587825] ? vmalloc_sync_all+0x30/0x30 [ 269.591989] ? error_entry+0x70/0xd0 [ 269.595708] ? trace_hardirqs_off_caller+0xbb/0x310 [ 269.600745] ? trace_hardirqs_on_caller+0xc0/0x310 [ 269.605686] ? syscall_return_slowpath+0x5e0/0x5e0 [ 269.610615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.615461] ? trace_hardirqs_on_caller+0x310/0x310 [ 269.620478] ? trace_hardirqs_off+0x310/0x310 [ 269.624984] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 269.630006] ? prepare_exit_to_usermode+0x291/0x3b0 [ 269.635029] ? page_fault+0x8/0x30 [ 269.638575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.643421] ? page_fault+0x8/0x30 [ 269.646971] page_fault+0x1e/0x30 [ 269.650424] RIP: 0033:0x7fcab5ce31fd [ 269.654152] Code: Bad RIP value. [ 269.657514] RSP: 002b:00007fcab3282e30 EFLAGS: 00010293 [ 269.662874] RAX: 0000000000000075 RBX: 00000000013cc670 RCX: 00007fcab5ce31fd [ 269.670167] RDX: 0000000000000fff RSI: 00007fcab4ab75a0 RDI: 0000000000000004 [ 269.677460] RBP: 0000000000000000 R08: 00000000013b7260 R09: 0000000000000000 [ 269.684731] R10: 6b205d3834353030 R11: 0000000000000293 R12: 000000000065e420 [ 269.692006] R13: 00007fcab32839c0 R14: 00007fcab6328040 R15: 0000000000000003 [ 269.699301] CPU: 0 PID: 8298 Comm: syz-executor0 Not tainted 4.20.0-rc7-next-20181224 #190 [ 269.702260] Mem-Info: [ 269.707711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.707720] Call Trace: [ 269.710162] active_anon:119473 inactive_anon:190 isolated_anon:0 [ 269.710162] active_file:17 inactive_file:17 isolated_file:0 [ 269.710162] unevictable:0 dirty:0 writeback:0 unstable:0 [ 269.710162] slab_reclaimable:10304 slab_unreclaimable:85540 [ 269.710162] mapped:49154 shmem:244 pagetables:810 bounce:0 [ 269.710162] free:13713 free_pcp:312 free_cma:0 [ 269.719487] dump_stack+0x1d3/0x2c6 [ 269.719511] ? dump_stack_print_info.cold.1+0x20/0x20 [ 269.719538] warn_alloc.cold.118+0xc3/0x1c9 [ 269.722263] Node 0 active_anon:477888kB inactive_anon:760kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 269.755031] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 269.755061] ? __lock_is_held+0xb5/0x140 [ 269.755105] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 269.755137] __vmalloc_node_range+0x64c/0x8d0 [ 269.758802] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 269.763938] ? vfree_atomic+0xe0/0xe0 [ 269.764026] ? vb2_vmalloc_alloc+0xeb/0x3b0 [ 269.764042] ? rcu_read_lock_sched_held+0x108/0x120 [ 269.768346] Node 0 DMA free:10252kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.795843] ? kmem_cache_alloc_trace+0x356/0x750 [ 269.795862] ? vb2_vmalloc_alloc+0x127/0x3b0 [ 269.795894] vmalloc_user+0x75/0x170 [ 269.795912] ? vb2_vmalloc_alloc+0x127/0x3b0 [ 269.795933] vb2_vmalloc_alloc+0x127/0x3b0 [ 269.800796] lowmem_reserve[]: 0 2537 2539 2539 [ 269.804827] ? vb2_vmalloc_attach_dmabuf+0x150/0x150 [ 269.804848] ? __vb2_queue_alloc+0xf7/0xfa0 [ 269.804882] ? vb2_vmalloc_attach_dmabuf+0x150/0x150 [ 269.810395] Node 0 DMA32 free:18120kB min:36092kB low:45112kB high:54132kB active_anon:477888kB inactive_anon:760kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2601688kB mlocked:0kB kernel_stack:6656kB pagetables:3240kB bounce:0kB free_pcp:820kB local_pcp:468kB free_cma:0kB [ 269.814888] __vb2_queue_alloc+0x5e1/0xfa0 [ 269.814966] ? vicodec_buf_prepare+0x350/0x350 [ 269.814984] vb2_core_create_bufs+0x3af/0x950 [ 269.841612] lowmem_reserve[]: 0 0 2 2 [ 269.844447] ? __vb2_queue_alloc+0xfa0/0xfa0 [ 269.844467] ? unwind_get_return_address+0x61/0xa0 [ 269.844490] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 269.848786] Node 0 Normal free:8kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.853857] ? v4l2_prio_open+0x80/0x80 [ 269.853889] vb2_create_bufs+0x4b9/0x8f0 [ 269.853905] ? video_ioctl2+0x2c/0x33 [ 269.880096] lowmem_reserve[]: 0 0 0 0 [ 269.884866] ? vb2_request_queue+0x120/0x120 [ 269.884896] ? v4l2_prio_open+0x80/0x80 [ 269.884914] ? find_held_lock+0x36/0x1c0 [ 269.889306] Node 1 Normal free:26472kB min:53760kB low:67200kB high:80640kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:428kB local_pcp:180kB free_cma:0kB [ 269.893061] v4l2_m2m_create_bufs+0x7c/0xe0 [ 269.893084] v4l2_m2m_ioctl_create_bufs+0x6b/0x80 [ 269.893101] v4l_create_bufs+0x152/0x230 [ 269.897519] lowmem_reserve[]: 0 0 0 0 [ 269.901726] __video_do_ioctl+0x7d4/0xd70 [ 269.906320] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10252kB [ 269.911398] ? v4l_s_fmt+0xb50/0xb50 [ 269.915786] Node 0 DMA32: 802*4kB (UM) 522*8kB (UME) 269*16kB (ME) 113*32kB (ME) 36*64kB (ME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 269.920790] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.949668] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 269.953801] video_usercopy+0x5c1/0x1760 [ 269.953818] ? v4l_s_fmt+0xb50/0xb50 [ 269.953840] ? v4l_enumstd+0x70/0x70 [ 269.958395] Node 1 Normal: 4*4kB (ME) 3*8kB (ME) 4*16kB (ME) 4*32kB (UME) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 0*2048kB 5*4096kB (M) = 26472kB [ 269.962884] ? unwind_dump+0x190/0x190 [ 269.962907] ? find_held_lock+0x36/0x1c0 [ 269.962991] ? __fget+0x4aa/0x740 [ 269.963011] ? lock_downgrade+0x900/0x900 [ 269.967683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.971209] ? check_preemption_disabled+0x48/0x280 [ 269.976168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 269.981235] ? kasan_check_read+0x11/0x20 [ 270.007471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.011034] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 270.015104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 270.018855] ? rcu_read_unlock_special+0x370/0x370 [ 270.022781] 278 total pagecache pages [ 270.027078] ? __fget+0x4d1/0x740 [ 270.031028] 0 pages in swap cache [ 270.035077] ? ksys_dup3+0x680/0x680 [ 270.035095] ? __might_fault+0x12b/0x1e0 [ 270.035114] ? video_usercopy+0x1760/0x1760 [ 270.062801] Swap cache stats: add 0, delete 0, find 0/0 [ 270.067009] video_ioctl2+0x2c/0x33 [ 270.071825] Free swap = 0kB [ 270.075917] v4l2_ioctl+0x154/0x1b0 [ 270.075935] ? video_devdata+0xa0/0xa0 [ 270.075988] do_vfs_ioctl+0x1de/0x1790 [ 270.076010] ? ioctl_preallocate+0x300/0x300 [ 270.076024] ? __fget_light+0x2e9/0x430 [ 270.076038] ? fget_raw+0x20/0x20 [ 270.076051] ? _copy_to_user+0xc8/0x110 [ 270.076068] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 270.076082] ? put_timespec64+0x10f/0x1b0 [ 270.076098] ? nsecs_to_jiffies+0x30/0x30 [ 270.076115] ? do_syscall_64+0x9a/0x820 [ 270.076129] ? do_syscall_64+0x9a/0x820 [ 270.076143] ? lockdep_hardirqs_on+0x421/0x5c0 [ 270.076186] ? security_file_ioctl+0x94/0xc0 [ 270.076206] ksys_ioctl+0xa9/0xd0 [ 270.076238] __x64_sys_ioctl+0x73/0xb0 [ 270.080018] Total swap = 0kB [ 270.084161] do_syscall_64+0x1b9/0x820 [ 270.084178] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 270.084197] ? syscall_return_slowpath+0x5e0/0x5e0 [ 270.084235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.084252] ? trace_hardirqs_on_caller+0x310/0x310 [ 270.097274] 1965979 pages RAM [ 270.100085] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 270.114547] 0 pages HighMem/MovableOnly [ 270.119992] ? prepare_exit_to_usermode+0x291/0x3b0 [ 270.131029] 343419 pages reserved [ 270.135039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.135063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.135076] RIP: 0033:0x457ec9 [ 270.135102] Code: Bad RIP value. [ 270.138818] 0 pages cma reserved [ 270.142483] RSP: 002b:00007f4a647aec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.142499] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 270.142508] RDX: 0000000020000100 RSI: 00000000c100565c RDI: 0000000000000003 [ 270.142517] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 270.142530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a647af6d4 [ 270.158056] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-fuzzer,pid=8130,uid=0 [ 270.161830] R13: 00000000004c26d8 R14: 00000000004d4ba0 R15: 00000000ffffffff [ 270.192284] Mem-Info: [ 270.196130] Out of memory: Kill process 8130 (syz-fuzzer) score 72 or sacrifice child [ 270.200208] active_anon:119473 inactive_anon:190 isolated_anon:0 [ 270.200208] active_file:17 inactive_file:17 isolated_file:0 [ 270.200208] unevictable:0 dirty:0 writeback:0 unstable:0 [ 270.200208] slab_reclaimable:10304 slab_unreclaimable:85543 [ 270.200208] mapped:49154 shmem:244 pagetables:810 bounce:0 [ 270.200208] free:13713 free_pcp:308 free_cma:0 [ 270.210720] Killed process 8143 (syz-executor0) total-vm:70272kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 270.507917] Node 0 active_anon:477888kB inactive_anon:760kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 270.535924] oom_reaper: reaped process 8143 (syz-executor0), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 270.546355] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 270.551290] syz-fuzzer invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 270.572116] Node 0 DMA free:10252kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.572172] lowmem_reserve[]: 0 2537 2539 2539 [ 270.572195] Node 0 DMA32 free:18120kB min:36092kB low:45112kB high:54132kB active_anon:477888kB inactive_anon:760kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2601688kB mlocked:0kB kernel_stack:6656kB pagetables:3240kB bounce:0kB free_pcp:852kB local_pcp:388kB free_cma:0kB [ 270.588488] CPU: 1 PID: 8132 Comm: syz-fuzzer Not tainted 4.20.0-rc7-next-20181224 #190 [ 270.610211] lowmem_reserve[]: 0 0 2 2 [ 270.613353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.613359] Call Trace: [ 270.613383] dump_stack+0x1d3/0x2c6 [ 270.613403] ? dump_stack_print_info.cold.1+0x20/0x20 [ 270.642246] Node 0 Normal free:8kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 270.650342] dump_header+0x253/0x1239 [ 270.654130] lowmem_reserve[]: 0 0 0 0 [ 270.663457] ? mark_held_locks+0x130/0x130 [ 270.663470] ? print_usage_bug+0xc0/0xc0 [ 270.663495] ? pagefault_out_of_memory+0x19d/0x19d [ 270.666051] Node 1 Normal free:26472kB min:53760kB low:67200kB high:80640kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:428kB local_pcp:248kB free_cma:0kB [ 270.669671] ? mark_held_locks+0x130/0x130 [ 270.674862] lowmem_reserve[]: 0 0 0 0 [ 270.700677] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 270.700701] ? __lock_acquire+0x62f/0x4c20 [ 270.700720] ? print_usage_bug+0xc0/0xc0 [ 270.704537] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10252kB [ 270.708310] ? percpu_ref_tryget_live+0x460/0x460 [ 270.712537] Node 0 DMA32: 802*4kB (UM) 526*8kB (UME) 269*16kB (ME) 113*32kB (ME) 36*64kB (ME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18152kB [ 270.716560] ? graph_lock+0x270/0x270 [ 270.721462] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 270.749034] ? graph_lock+0x270/0x270 [ 270.749050] ? print_usage_bug+0xc0/0xc0 [ 270.749073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.753352] Node 1 Normal: 4*4kB (ME) 3*8kB (ME) 4*16kB (ME) 4*32kB (UME) 4*64kB (UME) 1*128kB (E) 3*256kB (UME) 3*512kB (ME) 3*1024kB (ME) 0*2048kB 5*4096kB (M) = 26472kB [ 270.757118] ? find_held_lock+0x36/0x1c0 [ 270.762416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.766615] ? mark_held_locks+0xc7/0x130 [ 270.770652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 270.782796] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 270.782809] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 270.782824] ? lockdep_hardirqs_on+0x421/0x5c0 [ 270.787653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.802030] ? trace_hardirqs_on+0xbd/0x310 [ 270.802045] ? kasan_check_read+0x11/0x20 [ 270.802060] ? ___ratelimit+0x36f/0x655 [ 270.802080] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 270.805867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 270.816857] ? trace_hardirqs_on+0x310/0x310 [ 270.816870] ? lock_downgrade+0x900/0x900 [ 270.816889] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 270.820668] 278 total pagecache pages [ 270.824718] ? ___ratelimit+0xaa/0x655 [ 270.824743] ? idr_get_free+0xf70/0xf70 [ 270.824760] ? task_will_free_mem+0xb30/0xb30 [ 270.830284] 0 pages in swap cache [ 270.845696] ? find_held_lock+0x36/0x1c0 [ 270.845722] oom_kill_process.cold.27+0x10/0x8f9 [ 270.849778] Swap cache stats: add 0, delete 0, find 0/0 [ 270.858596] ? graph_lock+0x270/0x270 [ 270.858613] ? oom_badness+0xe6/0xaa0 [ 270.858629] ? kasan_check_read+0x11/0x20 [ 270.862782] Free swap = 0kB [ 270.871326] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 270.876432] Total swap = 0kB [ 270.881503] ? oom_evaluate_task+0x540/0x540 [ 270.886090] 1965979 pages RAM [ 270.894885] ? find_held_lock+0x36/0x1c0 [ 270.894909] ? out_of_memory+0xcc5/0x1480 [ 270.894923] ? lock_downgrade+0x900/0x900 [ 270.899231] 0 pages HighMem/MovableOnly [ 270.903369] ? check_preemption_disabled+0x48/0x280 [ 270.903390] ? kasan_check_read+0x11/0x20 [ 270.903406] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 270.907374] 343419 pages reserved [ 270.912813] ? rcu_read_unlock_special+0x370/0x370 [ 270.912829] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 270.912862] ? oom_evaluate_task+0x302/0x540 [ 270.921418] 0 pages cma reserved [ 270.925852] out_of_memory+0x8ba/0x1480 [ 270.925896] ? oom_killer_disable+0x3a0/0x3a0 [ 271.059944] ? __alloc_pages_slowpath+0xf45/0x2d90 [ 271.064894] ? __ww_mutex_check_waiters+0x160/0x160 [ 271.069927] __alloc_pages_slowpath+0x22f7/0x2d90 [ 271.074781] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 271.079652] ? warn_alloc+0x120/0x120 [ 271.083454] ? __alloc_pages_slowpath+0x25dd/0x2d90 [ 271.088487] ? graph_lock+0x270/0x270 [ 271.092289] ? graph_lock+0x270/0x270 [ 271.096097] ? check_preemption_disabled+0x48/0x280 [ 271.101118] ? graph_lock+0x270/0x270 [ 271.104963] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.110510] ? should_fail+0x22d/0xd01 [ 271.114406] ? graph_lock+0x270/0x270 [ 271.118234] ? __lock_is_held+0xb5/0x140 [ 271.122311] ? ___might_sleep+0x1ed/0x300 [ 271.126456] ? lock_release+0xa00/0xa00 [ 271.130435] ? arch_local_save_flags+0x40/0x40 [ 271.135035] __alloc_pages_nodemask+0xa89/0xde0 [ 271.139714] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 271.144753] ? __lock_is_held+0xb5/0x140 [ 271.148830] ? __lock_acquire+0x62f/0x4c20 [ 271.153072] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 271.158093] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 271.163637] alloc_pages_current+0x10c/0x210 [ 271.168060] __page_cache_alloc+0x38c/0x5b0 [ 271.172384] ? xa_load+0x2ba/0x460 [ 271.175933] ? filemap_range_has_page+0x4e0/0x4e0 [ 271.180789] ? check_preemption_disabled+0x48/0x280 [ 271.185818] pagecache_get_page+0x396/0xf30 [ 271.190149] ? find_get_pages_contig+0x18d0/0x18d0 [ 271.195101] ? __page_cache_alloc+0x191/0x5b0 [ 271.199595] ? xa_load+0x2e1/0x460 [ 271.203135] ? xa_clear_mark+0x40/0x40 [ 271.207040] ? graph_lock+0x270/0x270 [ 271.210855] ? print_usage_bug+0xc0/0xc0 [ 271.214929] ? graph_lock+0x270/0x270 [ 271.218750] ? graph_lock+0x270/0x270 [ 271.222548] ? __do_page_cache_readahead+0x663/0x810 [ 271.227670] ? find_held_lock+0x36/0x1c0 [ 271.231746] ? filemap_fault+0x1a61/0x2a70 [ 271.235992] ? lock_downgrade+0x900/0x900 [ 271.240143] ? check_preemption_disabled+0x48/0x280 [ 271.245166] ? kasan_check_read+0x11/0x20 [ 271.249317] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 271.254601] ? rcu_read_unlock_special+0x370/0x370 [ 271.259536] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.265090] ? check_preemption_disabled+0x48/0x280 [ 271.270135] filemap_fault+0x129c/0x2a70 [ 271.274209] ? grab_cache_page_write_begin+0xa0/0xa0 [ 271.279339] ? filemap_map_pages+0xec9/0x1d20 [ 271.283896] ? hrtimer_try_to_cancel+0xb8/0x6f0 [ 271.288595] ? __lock_page_killable+0x170/0x170 [ 271.293270] ? debug_object_free+0x32a/0x640 [ 271.297681] ? kasan_check_read+0x11/0x20 [ 271.301882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.307432] ? __hrtimer_init+0xdb/0x240 [ 271.311496] ? graph_lock+0x270/0x270 [ 271.315295] ? destroy_hrtimer_on_stack+0x1c/0x20 [ 271.320166] ? futex_wait+0x5ec/0xa50 [ 271.323989] ? __lock_is_held+0xb5/0x140 [ 271.328055] ? lock_acquire+0x1ed/0x520 [ 271.332044] ? ext4_filemap_fault+0x7a/0xad [ 271.336373] ? lock_release+0xa00/0xa00 [ 271.340352] ? arch_local_save_flags+0x40/0x40 [ 271.344961] ? down_read+0x8d/0x120 [ 271.348604] ? ext4_filemap_fault+0x7a/0xad [ 271.352929] ? __down_interruptible+0x700/0x700 [ 271.357618] ext4_filemap_fault+0x82/0xad [ 271.361784] __do_fault+0x176/0x6f0 [ 271.365414] ? lock_page+0x170/0x170 [ 271.369130] ? pmd_val+0x88/0x100 [ 271.372597] ? add_mm_counter_fast+0xd0/0xd0 [ 271.377007] ? pmd_val+0x88/0x100 [ 271.380462] ? add_mm_counter_fast+0xd0/0xd0 [ 271.384933] ? ep_poll+0x3f8/0x15d0 [ 271.388577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.394125] __handle_mm_fault+0x392f/0x55f0 [ 271.398543] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 271.403398] ? graph_lock+0x270/0x270 [ 271.407198] ? find_held_lock+0x36/0x1c0 [ 271.411260] ? print_usage_bug+0xc0/0xc0 [ 271.415324] ? graph_lock+0x270/0x270 [ 271.419124] ? graph_lock+0x270/0x270 [ 271.422948] ? handle_mm_fault+0x42a/0xc70 [ 271.427194] ? lock_downgrade+0x900/0x900 [ 271.431343] ? check_preemption_disabled+0x48/0x280 [ 271.436365] ? kasan_check_read+0x11/0x20 [ 271.440517] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 271.445802] ? rcu_read_unlock_special+0x370/0x370 [ 271.450742] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.456281] ? check_preemption_disabled+0x48/0x280 [ 271.461307] handle_mm_fault+0x54f/0xc70 [ 271.465389] ? __handle_mm_fault+0x55f0/0x55f0 [ 271.469996] ? find_vma+0x34/0x190 [ 271.473547] __do_page_fault+0x5f6/0xd70 [ 271.477609] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 271.483159] do_page_fault+0xf2/0x7e0 [ 271.486975] ? vmalloc_sync_all+0x30/0x30 [ 271.491127] ? error_entry+0x70/0xd0 [ 271.494846] ? trace_hardirqs_off_caller+0xbb/0x310 [ 271.499863] ? trace_hardirqs_on_caller+0xc0/0x310 [ 271.504797] ? syscall_return_slowpath+0x5e0/0x5e0 [ 271.509732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.514574] ? trace_hardirqs_on_caller+0x310/0x310 [ 271.519591] ? trace_hardirqs_off+0x310/0x310 [ 271.524107] ? prepare_exit_to_usermode+0x291/0x3b0 [ 271.529123] ? page_fault+0x8/0x30 [ 271.532692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.537542] ? page_fault+0x8/0x30 [ 271.541086] page_fault+0x1e/0x30 [ 271.544534] RIP: 0033:0x45ddf3 [ 271.547745] Code: Bad RIP value. [ 271.551104] RSP: 002b:000000c42001e6a0 EFLAGS: 00010206 [ 271.556464] RAX: ffffffffffffff92 RBX: 000000003b976544 RCX: 000000000045ddf3 [ 271.563738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000015fb200 [ 271.571002] RBP: 000000c42001e6e8 R08: 0000000000000000 R09: 0000000000000000 [ 271.578761] R10: 000000c42001e6d8 R11: 0000000000000206 R12: 0000000000000001 [ 271.586028] R13: 0000000000000002 R14: 000000000045b6a0 R15: 0000000000000000 [ 271.620854] Mem-Info: [ 271.624532] active_anon:119461 inactive_anon:190 isolated_anon:0 [ 271.624532] active_file:17 inactive_file:17 isolated_file:0 [ 271.624532] unevictable:0 dirty:0 writeback:0 unstable:0 [ 271.624532] slab_reclaimable:10304 slab_unreclaimable:85542 [ 271.624532] mapped:49154 shmem:244 pagetables:810 bounce:0 [ 271.624532] free:13721 free_pcp:307 free_cma:0 [ 271.688204] Node 0 active_anon:477840kB inactive_anon:760kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:196616kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 225280kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 271.742111] Node 1 active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 271.787392] Node 0 DMA free:10252kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.821475] lowmem_reserve[]: 0 2537 2539 2539 [ 271.826122] Node 0 DMA32 free:18152kB min:36092kB low:45112kB high:54132kB active_anon:477840kB inactive_anon:760kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2601688kB mlocked:0kB kernel_stack:6624kB pagetables:3240kB bounce:0kB free_pcp:1160kB local_pcp:676kB free_cma:0kB [ 271.857168] lowmem_reserve[]: 0 0 2 2 [ 271.860985] Node 0 Normal free:8kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2460kB mlocked:0kB kernel_stack:96kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.889326] lowmem_reserve[]: 0 0 0 0 [ 271.893232] Node 1 Normal free:79872kB min:53760kB low:67200kB high:80640kB active_anon:4kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1632kB local_pcp:180kB free_cma:0kB [ 271.922281] lowmem_reserve[]: 0 0 0 0 [ 271.926103] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 2*4096kB (M) = 10252kB [ 271.938453] Node 0 DMA32: 802*4kB (UM) 526*8kB (UME) 269*16kB (ME) 114*32kB (UME) 36*64kB (ME) 4*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18184kB [ 271.954258] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 271.965471] Node 1 Normal: 3*4kB (UE) 5*8kB (UME) 6*16kB (UE) 5*32kB (UME) 5*64kB (UME) 3*128kB (UE) 3*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 2*2048kB (U) 32*4096kB (UM) = 144628kB [ 271.983330] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.994096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 272.003663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.013529] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 272.023251] 648 total pagecache pages [ 272.027222] 0 pages in swap cache [ 272.030676] Swap cache stats: add 0, delete 0, find 0/0 [ 272.036316] Free swap = 0kB [ 272.040329] Total swap = 0kB [ 272.043424] 1965979 pages RAM [ 272.046528] 0 pages HighMem/MovableOnly [ 272.050490] 343419 pages reserved [ 272.054003] 0 pages cma reserved [ 272.057481] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-fuzzer,pid=8130,uid=0 [ 272.072006] Out of memory: Kill process 8130 (syz-fuzzer) score 72 or sacrifice child [ 272.080577] Killed process 8149 (syz-executor2) total-vm:70272kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 272.755183] device bridge_slave_1 left promiscuous mode [ 272.761114] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.818178] device bridge_slave_0 left promiscuous mode [ 272.830234] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.166562] device hsr_slave_1 left promiscuous mode [ 273.275746] device hsr_slave_0 left promiscuous mode [ 273.443782] team0 (unregistering): Port device team_slave_1 removed [ 273.465923] team0 (unregistering): Port device team_slave_0 removed [ 273.489746] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 273.559099] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 273.740940] bond0 (unregistering): Released all slaves [ 276.329192] syz-executor0 (8298) used greatest stack depth: 8424 bytes left [ 278.575604] IPVS: ftp: loaded support on port[0] = 21 [ 278.583173] device bridge_slave_1 left promiscuous mode [ 278.589234] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.643106] device bridge_slave_0 left promiscuous mode [ 278.648538] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.344458] device hsr_slave_1 left promiscuous mode [ 282.398084] device hsr_slave_0 left promiscuous mode [ 282.438369] team0 (unregistering): Port device team_slave_1 removed [ 282.449815] team0 (unregistering): Port device team_slave_0 removed [ 282.461391] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 282.509126] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 282.604185] bond0 (unregistering): Released all slaves [ 282.805590] chnl_net:caif_netlink_parms(): no params data found [ 282.840440] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.847038] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.854100] device bridge_slave_0 entered promiscuous mode [ 282.864115] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.870528] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.878100] device bridge_slave_1 entered promiscuous mode [ 282.898111] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 282.907598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 282.927604] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 282.935113] team0: Port device team_slave_0 added [ 282.940619] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 282.948087] team0: Port device team_slave_1 added [ 282.953552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 282.960992] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 283.025416] device hsr_slave_0 entered promiscuous mode [ 283.065503] device hsr_slave_1 entered promiscuous mode [ 283.127973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 283.134885] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 283.148170] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.154553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.161212] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.167610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.251157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.260761] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 283.271273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.279627] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.288127] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.305928] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 283.312004] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.323127] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.330798] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.337222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.352797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.360452] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.366861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.394410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.403204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.411038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.425116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.435400] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 283.441422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.449556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.467220] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 283.480037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.892573] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 288.900936] CPU: 0 PID: 2489 Comm: kworker/u4:3 Not tainted 4.20.0-rc7-next-20181224 #190 [ 288.909283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.918721] Workqueue: writeback wb_workfn (flush-8:0) [ 288.924014] Call Trace: [ 288.926623] dump_stack+0x1d3/0x2c6 [ 288.930297] ? dump_stack_print_info.cold.1+0x20/0x20 [ 288.935578] panic+0x2ad/0x632 [ 288.938782] ? add_taint.cold.5+0x16/0x16 [ 288.942953] ? graph_lock+0x270/0x270 [ 288.946768] ? print_usage_bug+0xc0/0xc0 [ 288.950831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.956400] ? check_preemption_disabled+0x48/0x280 [ 288.961418] ? check_preemption_disabled+0x3a/0x280 [ 288.966459] __schedule+0x1ecf/0x1ed0 [ 288.970267] ? graph_lock+0x270/0x270 [ 288.974070] ? graph_lock+0x270/0x270 [ 288.977891] ? __sched_text_start+0x8/0x8 [ 288.982060] ? find_held_lock+0x36/0x1c0 [ 288.986146] ? mark_held_locks+0xc7/0x130 [ 288.990297] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 288.995404] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 289.000513] ? lockdep_hardirqs_on+0x421/0x5c0 [ 289.005098] ? preempt_schedule+0x4d/0x60 [ 289.009256] preempt_schedule_common+0x1f/0xe0 [ 289.013857] preempt_schedule+0x4d/0x60 [ 289.017854] ___preempt_schedule+0x16/0x18 [ 289.022099] _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 289.027039] __debug_object_init+0xda1/0x12d0 [ 289.031540] ? _raw_spin_unlock+0x3f/0x50 [ 289.035702] ? debug_object_free+0x640/0x640 [ 289.040117] ? wq_calc_node_cpumask+0x390/0x390 [ 289.044789] ? lock_acquire+0x1ed/0x520 [ 289.048776] ? drain_all_pages+0xa0/0x670 [ 289.052930] ? mark_held_locks+0xc7/0x130 [ 289.057091] ? queue_work_on+0xe8/0x1e0 [ 289.061080] ? queue_work_on+0xe8/0x1e0 [ 289.065059] ? lockdep_hardirqs_on+0x421/0x5c0 [ 289.069641] ? trace_hardirqs_on+0xbd/0x310 [ 289.073970] ? drain_all_pages+0x396/0x670 [ 289.078209] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 289.083680] ? drain_all_pages+0xa0/0x670 [ 289.087833] ? __ww_mutex_check_waiters+0x160/0x160 [ 289.092854] debug_object_init+0x16/0x20 [ 289.096916] __init_work+0x50/0x60 [ 289.100459] drain_all_pages+0x2dc/0x670 [ 289.104523] ? ___might_sleep+0x1e7/0x300 [ 289.108673] ? drain_local_pages_wq+0x60/0x60 [ 289.113182] __alloc_pages_slowpath+0xb73/0x2d90 [ 289.117973] ? warn_alloc+0x120/0x120 [ 289.121779] ? graph_lock+0x270/0x270 [ 289.125606] ? graph_lock+0x270/0x270 [ 289.129408] ? graph_lock+0x270/0x270 [ 289.133214] ? check_preemption_disabled+0x48/0x280 [ 289.138237] ? graph_lock+0x270/0x270 [ 289.142062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 289.147624] ? should_fail+0x22d/0xd01 [ 289.151523] ? find_held_lock+0x36/0x1c0 [ 289.155585] ? graph_lock+0x270/0x270 [ 289.159389] ? lock_downgrade+0x900/0x900 [ 289.163538] ? check_preemption_disabled+0x48/0x280 [ 289.168565] ? __lock_is_held+0xb5/0x140 [ 289.172637] ? ___might_sleep+0x1ed/0x300 [ 289.176790] ? arch_local_save_flags+0x40/0x40 [ 289.181442] ? __cpuset_node_allowed+0x19b/0x660 [ 289.186207] ? cpuset_nodemask_valid_mems_allowed+0x90/0x90 [ 289.191946] __alloc_pages_nodemask+0xa89/0xde0 [ 289.196657] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 289.201696] ? __isolate_free_page+0x660/0x660 [ 289.206281] ? __lock_is_held+0xb5/0x140 [ 289.210351] ? __isolate_free_page+0x660/0x660 [ 289.214934] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 289.220505] alloc_pages_current+0x10c/0x210 [ 289.224924] __page_cache_alloc+0x38c/0x5b0 [ 289.229265] ? lock_downgrade+0x900/0x900 [ 289.233418] ? check_preemption_disabled+0x48/0x280 [ 289.238440] ? filemap_range_has_page+0x4e0/0x4e0 [ 289.243285] ? kasan_check_read+0x11/0x20 [ 289.247442] ? rcu_read_unlock_special+0x370/0x370 [ 289.252377] pagecache_get_page+0x396/0xf30 [ 289.256710] ? find_get_pages_contig+0x18d0/0x18d0 [ 289.261640] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 289.267180] ? mark_page_accessed+0xcaf/0x2040 [ 289.271769] ? kasan_check_read+0x11/0x20 [ 289.275930] ? __zone_watermark_ok+0x330/0x7b0 [ 289.280607] ? print_usage_bug+0xc0/0xc0 [ 289.284715] ? graph_lock+0x270/0x270 [ 289.288568] ? free_unref_page_list+0x11e0/0x11e0 [ 289.293429] ? free_unref_page_list+0x11e0/0x11e0 [ 289.298277] ? __lock_is_held+0xb5/0x140 [ 289.302339] ? print_usage_bug+0xc0/0xc0 [ 289.306420] ? ___might_sleep+0x1ed/0x300 [ 289.310572] ? arch_local_save_flags+0x40/0x40 [ 289.315164] ? __might_sleep+0x95/0x190 [ 289.319144] ext4_mb_load_buddy_gfp+0xddf/0x1e70 [ 289.323915] ? ext4_mb_good_group+0x730/0x730 [ 289.328410] ? mark_held_locks+0x130/0x130 [ 289.332647] ? __isolate_free_page+0x660/0x660 [ 289.337238] ? mark_held_locks+0x130/0x130 [ 289.341472] ? __isolate_free_page+0x660/0x660 [ 289.346069] ? __lock_acquire+0x62f/0x4c20 [ 289.350308] ? __lock_acquire+0x62f/0x4c20 [ 289.354556] ? mark_held_locks+0x130/0x130 [ 289.358792] ? mark_held_locks+0x130/0x130 [ 289.363050] ? __read_once_size_nocheck.constprop.8+0x10/0x10 [ 289.368934] ? ret_from_fork+0x3a/0x50 [ 289.372853] ? print_usage_bug+0xc0/0xc0 [ 289.376936] ? unwind_next_frame.part.7+0x1ae/0x9e0 [ 289.381958] ? unwind_dump+0x190/0x190 [ 289.385860] ? unwind_dump+0x190/0x190 [ 289.389753] ? graph_lock+0x270/0x270 [ 289.393556] ? graph_lock+0x270/0x270 [ 289.397398] ? unwind_next_frame+0x3e/0x50 [ 289.401637] ? find_held_lock+0x36/0x1c0 [ 289.405708] ext4_mb_find_by_goal+0x2fa/0x1040 [ 289.410326] ? ext4_mb_normalize_request.constprop.32+0x8e4/0x1940 [ 289.416653] ? ext4_mb_use_best_found+0x9b0/0x9b0 [ 289.421504] ? kasan_check_read+0x11/0x20 [ 289.425656] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 289.430939] ? kasan_check_read+0x11/0x20 [ 289.435106] ext4_mb_regular_allocator+0x282/0x1590 [ 289.440144] ? ext4_mb_complex_scan_group+0xb10/0xb10 [ 289.445348] ? ext4_mb_free_metadata+0xc90/0xc90 [ 289.450117] ? ext4_mb_new_blocks+0x787/0x4840 [ 289.454704] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.459722] ? kmem_cache_alloc+0x33f/0x730 [ 289.464056] ext4_mb_new_blocks+0x1de3/0x4840 [ 289.468576] ? ext4_discard_preallocations+0x13c0/0x13c0 [ 289.474038] ? unwind_next_frame.part.7+0x1ae/0x9e0 [ 289.479057] ? unwind_dump+0x190/0x190 [ 289.482972] ? unwind_dump+0x190/0x190 [ 289.486881] ? unwind_next_frame+0x3e/0x50 [ 289.491125] ? __save_stack_trace+0x7d/0xf0 [ 289.495453] ? ret_from_fork+0x3a/0x50 [ 289.499350] ? save_stack+0xa9/0xd0 [ 289.502988] ? save_stack+0x43/0xd0 [ 289.506614] ? kasan_kmalloc+0xcb/0xd0 [ 289.510497] ? __kmalloc+0x15d/0x760 [ 289.514267] ? ext4_find_extent+0x757/0x9b0 [ 289.518593] ? ext4_ext_map_blocks+0x2ad/0x6180 [ 289.523263] ? ext4_map_blocks+0x8ce/0x1b40 [ 289.527584] ? ext4_writepages+0x2598/0x4190 [ 289.532018] ? do_writepages+0x9a/0x1a0 [ 289.536007] ? __writeback_single_inode+0x20a/0x1660 [ 289.541117] ? writeback_sb_inodes+0x71f/0x1210 [ 289.545791] ? __writeback_inodes_wb+0x1b9/0x340 [ 289.550546] ? wb_writeback+0xa73/0xfc0 [ 289.554537] ? wb_workfn+0xee9/0x1790 [ 289.558357] ? process_one_work+0xc90/0x1c40 [ 289.562763] ? worker_thread+0x17f/0x1390 [ 289.566905] ? kthread+0x35a/0x440 [ 289.570441] ? ret_from_fork+0x3a/0x50 [ 289.574340] ? graph_lock+0x270/0x270 [ 289.578346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.583898] ? check_preemption_disabled+0x48/0x280 [ 289.588928] ? __lock_is_held+0xb5/0x140 [ 289.592999] ? graph_lock+0x270/0x270 [ 289.596803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.602345] ? check_preemption_disabled+0x48/0x280 [ 289.607374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.612912] ? ext4_ext_search_right+0x2e1/0xb10 [ 289.617667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.623206] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 289.628242] ext4_ext_map_blocks+0x2eef/0x6180 [ 289.632845] ? ext4_ext_release+0x10/0x10 [ 289.637014] ? __pagevec_release+0x88/0x120 [ 289.641341] ? find_held_lock+0x36/0x1c0 [ 289.645409] ? graph_lock+0x270/0x270 [ 289.649216] ? graph_lock+0x270/0x270 [ 289.653023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.658585] ? lock_acquire+0x1ed/0x520 [ 289.662559] ? ext4_map_blocks+0x866/0x1b40 [ 289.666899] ? lock_release+0xa00/0xa00 [ 289.670873] ? arch_local_save_flags+0x40/0x40 [ 289.675455] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 289.680175] ? down_write+0x8a/0x130 [ 289.683891] ? ext4_map_blocks+0x866/0x1b40 [ 289.688232] ? down_read+0x120/0x120 [ 289.691986] ext4_map_blocks+0x8ce/0x1b40 [ 289.696137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.701676] ? check_preemption_disabled+0x48/0x280 [ 289.706704] ? ext4_issue_zeroout+0x190/0x190 [ 289.711200] ? __lock_is_held+0xb5/0x140 [ 289.715278] ext4_writepages+0x2598/0x4190 [ 289.719544] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 289.724305] ? print_usage_bug+0xc0/0xc0 [ 289.728375] ? graph_lock+0x270/0x270 [ 289.732253] ? __update_load_avg_se+0x5eb/0xae0 [ 289.736921] ? mark_held_locks+0x130/0x130 [ 289.741169] ? __lock_acquire+0x62f/0x4c20 [ 289.745410] ? print_usage_bug+0xc0/0xc0 [ 289.749473] ? update_load_avg+0x387/0x2470 [ 289.753836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.759380] ? __lock_acquire+0x62f/0x4c20 [ 289.763619] ? mark_held_locks+0x130/0x130 [ 289.767867] ? mark_held_locks+0x130/0x130 [ 289.772127] ? graph_lock+0x270/0x270 [ 289.775952] ? __writeback_single_inode+0x6d8/0x1660 [ 289.781096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.786636] ? check_preemption_disabled+0x48/0x280 [ 289.791666] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 289.796441] do_writepages+0x9a/0x1a0 [ 289.800262] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 289.805030] ? do_writepages+0x9a/0x1a0 [ 289.809017] __writeback_single_inode+0x20a/0x1660 [ 289.813949] ? __lock_acquire+0x62f/0x4c20 [ 289.818217] ? __mark_inode_dirty+0x1510/0x1510 [ 289.822888] ? mark_held_locks+0x130/0x130 [ 289.827139] ? find_held_lock+0x36/0x1c0 [ 289.831218] ? find_held_lock+0x36/0x1c0 [ 289.835297] ? wbc_attach_and_unlock_inode+0x5c0/0xa30 [ 289.840579] ? lock_downgrade+0x900/0x900 [ 289.844735] ? find_held_lock+0x13f/0x1c0 [ 289.848889] ? kasan_check_read+0x11/0x20 [ 289.853042] ? do_raw_spin_unlock+0xa7/0x330 [ 289.857490] ? do_raw_spin_trylock+0x270/0x270 [ 289.862071] ? __lock_is_held+0xb5/0x140 [ 289.866143] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 289.871689] ? wbc_attach_and_unlock_inode+0x675/0xa30 [ 289.876987] ? __writeback_single_inode+0x1660/0x1660 [ 289.882195] writeback_sb_inodes+0x71f/0x1210 [ 289.886714] ? wbc_detach_inode+0x960/0x960 [ 289.891047] ? lock_release+0xa00/0xa00 [ 289.895043] ? down_read_trylock+0xda/0x140 [ 289.899370] ? trylock_super+0x22/0x110 [ 289.903350] ? downgrade_write+0x270/0x270 [ 289.907588] ? up_read_non_owner+0x100/0x100 [ 289.912010] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 289.917561] __writeback_inodes_wb+0x1b9/0x340 [ 289.922155] ? writeback_sb_inodes+0x1210/0x1210 [ 289.926915] ? __lock_is_held+0xb5/0x140 [ 289.931001] wb_writeback+0xa73/0xfc0 [ 289.934859] ? writeback_inodes_wb.constprop.50+0x330/0x330 [ 289.940571] ? widen_string+0xe0/0x2e0 [ 289.944459] ? mark_held_locks+0x130/0x130 [ 289.948749] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 289.953960] ? print_usage_bug+0xc0/0xc0 [ 289.958038] ? string+0x225/0x2d0 [ 289.961494] ? widen_string+0x2e0/0x2e0 [ 289.965477] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 289.970551] ? find_next_bit+0x104/0x130 [ 289.974632] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 289.979655] ? find_next_bit+0x104/0x130 [ 289.983722] ? cpumask_next+0x41/0x50 [ 289.987526] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 289.992546] ? get_nr_dirty_inodes+0xd6/0x130 [ 289.997044] ? __local_bh_enable_ip+0x160/0x260 [ 290.001720] ? get_nr_dirty_pages+0x17c/0x1f0 [ 290.006216] ? _raw_spin_unlock_bh+0x30/0x40 [ 290.010631] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 290.015655] ? wb_split_bdi_pages.isra.33+0x134/0x1b0 [ 290.020847] ? block_dump___mark_inode_dirty+0x120/0x120 [ 290.026299] ? wb_workfn+0x521/0x1790 [ 290.030102] ? __local_bh_enable_ip+0x160/0x260 [ 290.034780] wb_workfn+0xee9/0x1790 [ 290.038420] ? __lock_acquire+0x62f/0x4c20 [ 290.042673] ? inode_wait_for_writeback+0x40/0x40 [ 290.047523] ? mark_held_locks+0x130/0x130 [ 290.051757] ? lock_downgrade+0x900/0x900 [ 290.055904] ? lock_downgrade+0x900/0x900 [ 290.060060] ? trace_hardirqs_off+0xb8/0x310 [ 290.064486] ? kasan_check_read+0x11/0x20 [ 290.068639] ? do_raw_spin_unlock+0xa7/0x330 [ 290.073071] ? trace_hardirqs_on+0x310/0x310 [ 290.077483] ? rcu_read_lock+0x70/0x70 [ 290.081380] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 290.086485] ? try_to_wake_up+0x11c/0x1460 [ 290.090727] ? graph_lock+0x270/0x270 [ 290.094543] ? debug_object_deactivate+0x37d/0x480 [ 290.099472] ? lock_downgrade+0x900/0x900 [ 290.103628] ? find_held_lock+0x36/0x1c0 [ 290.107691] ? graph_lock+0x270/0x270 [ 290.111508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.117051] ? check_preemption_disabled+0x48/0x280 [ 290.122070] ? __lock_is_held+0xb5/0x140 [ 290.126150] process_one_work+0xc90/0x1c40 [ 290.130384] ? mark_held_locks+0x130/0x130 [ 290.134637] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 290.139309] ? __switch_to_asm+0x34/0x70 [ 290.143383] ? __switch_to_asm+0x34/0x70 [ 290.147437] ? __switch_to_asm+0x40/0x70 [ 290.151491] ? __switch_to_asm+0x34/0x70 [ 290.155566] ? __switch_to_asm+0x40/0x70 [ 290.159635] ? __switch_to_asm+0x34/0x70 [ 290.163696] ? __switch_to_asm+0x34/0x70 [ 290.167774] ? __switch_to_asm+0x34/0x70 [ 290.171832] ? __switch_to_asm+0x40/0x70 [ 290.175887] ? __switch_to_asm+0x34/0x70 [ 290.179943] ? __switch_to_asm+0x40/0x70 [ 290.184009] ? __switch_to_asm+0x34/0x70 [ 290.188110] ? __sched_text_start+0x8/0x8 [ 290.192286] ? graph_lock+0x270/0x270 [ 290.196094] ? __sched_text_start+0x8/0x8 [ 290.200255] ? lockdep_hardirqs_on+0x421/0x5c0 [ 290.204840] ? find_held_lock+0x36/0x1c0 [ 290.208910] ? lock_acquire+0x1ed/0x520 [ 290.212904] ? worker_thread+0x3e0/0x1390 [ 290.217063] ? kasan_check_write+0x14/0x20 [ 290.221294] ? do_raw_spin_lock+0x14f/0x350 [ 290.225618] ? __schedule+0x1ed0/0x1ed0 [ 290.229597] ? rwlock_bug.part.2+0x90/0x90 [ 290.233832] ? trace_hardirqs_on+0x310/0x310 [ 290.238257] worker_thread+0x17f/0x1390 [ 290.242242] ? __bpf_trace_sched_wake_idle_without_ipi+0x10/0x10 [ 290.248401] ? process_one_work+0x1c40/0x1c40 [ 290.252899] ? __schedule+0x9e6/0x1ed0 [ 290.256833] ? __sched_text_start+0x8/0x8 [ 290.261003] ? __sched_text_start+0x8/0x8 [ 290.265175] ? __kthread_parkme+0xce/0x1a0 [ 290.269412] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 290.274514] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 290.279618] ? lockdep_hardirqs_on+0x421/0x5c0 [ 290.284203] ? trace_hardirqs_on+0xbd/0x310 [ 290.288530] ? kasan_check_read+0x11/0x20 [ 290.292680] ? __kthread_parkme+0xce/0x1a0 [ 290.296931] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 290.302395] ? __schedule+0x1ed0/0x1ed0 [ 290.306376] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 290.311480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 290.317022] ? __kthread_parkme+0xfb/0x1a0 [ 290.321270] ? process_one_work+0x1c40/0x1c40 [ 290.325764] kthread+0x35a/0x440 [ 290.329135] ? kthread_bind+0x40/0x40 [ 290.332987] ret_from_fork+0x3a/0x50 [ 290.338074] Kernel Offset: disabled [ 290.341878] Rebooting in 86400 seconds..