last executing test programs: 1.400817967s ago: executing program 0 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) 1.198915635s ago: executing program 0 (id=32): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) finit_module(r1, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 1.039248367s ago: executing program 1 (id=33): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000700)=[{&(0x7f0000001300)="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", 0x56b}], 0x1) 929.942542ms ago: executing program 1 (id=34): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) unshare(0x2040400) signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) 860.477152ms ago: executing program 1 (id=35): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) 489.013733ms ago: executing program 0 (id=36): keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) 379.220568ms ago: executing program 0 (id=37): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0xf5, @remote}, 0x1c) 276.151623ms ago: executing program 1 (id=38): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x1412, 0x1, 0x70bd1c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) 275.650992ms ago: executing program 0 (id=39): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fremovexattr(0xffffffffffffffff, 0x0) 128.184933ms ago: executing program 0 (id=40): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 114.766485ms ago: executing program 1 (id=41): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x10000000000000e0, 0xbc66e6ed6125caf1, 0x0) 0s ago: executing program 1 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffceb, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r6 = socket$inet(0x2, 0x4, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xcb, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff23) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x368, 0xa, 0x148, 0x0, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x1, 0x1, 0x0, 0x1], 0x3}, {0x3, [0x2, 0x6, 0x1, 0x0, 0x0, 0x3], 0x4}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r9, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"], 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11], 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:49576' (ED25519) to the list of known hosts. syzkaller login: [ 78.296866][ T3312] cgroup: Unknown subsys name 'net' [ 78.587514][ T3312] cgroup: Unknown subsys name 'cpuset' [ 78.613865][ T3312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.088001][ T3312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.222181][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.236098][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.246355][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.284669][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.156412][ T3317] hsr_slave_0: entered promiscuous mode [ 87.165219][ T3317] hsr_slave_1: entered promiscuous mode [ 87.328605][ T3318] hsr_slave_0: entered promiscuous mode [ 87.332648][ T3318] hsr_slave_1: entered promiscuous mode [ 87.337807][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 87.340052][ T3318] Cannot create hsr debugfs directory [ 88.114243][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.142491][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.165617][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.213275][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.408242][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.432817][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.457532][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.478633][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.098588][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.364507][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.326186][ T3317] veth0_vlan: entered promiscuous mode [ 92.377363][ T3317] veth1_vlan: entered promiscuous mode [ 92.521376][ T3318] veth0_vlan: entered promiscuous mode [ 92.611396][ T3318] veth1_vlan: entered promiscuous mode [ 92.620332][ T3317] veth0_macvtap: entered promiscuous mode [ 92.662394][ T3317] veth1_macvtap: entered promiscuous mode [ 92.832865][ T3318] veth0_macvtap: entered promiscuous mode [ 92.881061][ T3318] veth1_macvtap: entered promiscuous mode [ 92.912628][ T1272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.913365][ T1272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.913502][ T1272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.913624][ T1272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.216923][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218153][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218317][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218481][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.314972][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.020511][ T3478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 97.859956][ T3495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 98.000134][ T30] audit: type=1326 audit(97.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.004446][ T30] audit: type=1326 audit(97.820:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.013692][ T30] audit: type=1326 audit(97.830:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.022791][ T30] audit: type=1326 audit(97.830:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.028086][ T30] audit: type=1326 audit(97.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.039687][ T30] audit: type=1326 audit(97.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=194 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.040144][ T30] audit: type=1326 audit(97.850:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.052149][ T30] audit: type=1326 audit(97.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.052654][ T30] audit: type=1326 audit(97.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3498 comm="syz.0.15" exe="/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 98.333583][ T30] audit: type=1326 audit(98.140:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3508 comm="syz.0.20" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ab5ca68 code=0x7ffc0000 [ 101.117330][ T3557] ------------[ cut here ]------------ [ 101.119846][ T3557] WARNING: CPU: 1 PID: 3557 at mm/page_alloc.c:5154 __alloc_frozen_pages_noprof+0x32c/0xd3c [ 101.124667][ T3557] Modules linked in: [ 101.125928][ T3557] CPU: 1 UID: 0 PID: 3557 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT [ 101.126442][ T3557] Hardware name: linux,dummy-virt (DT) [ 101.126893][ T3557] pstate: 21402009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 101.127285][ T3557] pc : __alloc_frozen_pages_noprof+0x32c/0xd3c [ 101.127461][ T3557] lr : alloc_pages_mpol+0xb8/0x1b8 [ 101.127621][ T3557] sp : ffff800089733ac0 [ 101.127841][ T3557] x29: ffff800089733ac0 x28: f6f000000874ddc0 x27: 0000000000000013 [ 101.128535][ T3557] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000040cc0 [ 101.128750][ T3557] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000013 [ 101.128954][ T3557] x20: ffffffffffffffff x19: 0000000000000000 x18: 00000000ffffffff [ 101.129269][ T3557] x17: 0000000000000000 x16: 0000000000000000 x15: 00000000200000c0 [ 101.129500][ T3557] x14: ffff800089733d98 x13: ffff800089733d5a x12: 0000000000000000 [ 101.129705][ T3557] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000824dfaf8 [ 101.129977][ T3557] x8 : ffff8000824dfaf8 x7 : ffff800089733d60 x6 : 0000000000000001 [ 101.130202][ T3557] x5 : 0000000000000000 x4 : f6f000000874ddc0 x3 : 0000000000000000 [ 101.130421][ T3557] x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffff800082c0c000 [ 101.130744][ T3557] Call trace: [ 101.131087][ T3557] __alloc_frozen_pages_noprof+0x32c/0xd3c (P) [ 101.131496][ T3557] alloc_pages_mpol+0xb8/0x1b8 [ 101.131683][ T3557] alloc_frozen_pages_noprof+0x48/0xc0 [ 101.131905][ T3557] ___kmalloc_large_node+0x10c/0x128 [ 101.132050][ T3557] __kmalloc_noprof+0x484/0x608 [ 101.132182][ T3557] raw_alloc_io_data+0x58/0xa0 [ 101.132331][ T3557] raw_ioctl+0x1e4/0xd2c [ 101.132507][ T3557] __arm64_sys_ioctl+0xac/0x104 [ 101.132641][ T3557] invoke_syscall+0x48/0x110 [ 101.132758][ T3557] el0_svc_common.constprop.0+0x40/0xe0 [ 101.132907][ T3557] do_el0_svc+0x1c/0x28 [ 101.133031][ T3557] el0_svc+0x34/0x10c [ 101.133234][ T3557] el0t_64_sync_handler+0xa0/0xe4 [ 101.133388][ T3557] el0t_64_sync+0x1a4/0x1a8 [ 101.133679][ T3557] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.240733][ T3414] hid-generic 0000:86010001:0006.0001: unknown main item tag 0x0 [ 101.254489][ T3414] hid-generic 0000:86010001:0006.0001: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 101.794344][ T168] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.851620][ T168] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.915640][ T168] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.021499][ T168] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.648608][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.711070][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.746712][ T168] bond0 (unregistering): Released all slaves [ 102.862154][ T168] hsr_slave_0: left promiscuous mode [ 102.866490][ T168] hsr_slave_1: left promiscuous mode [ 102.893840][ T168] veth1_macvtap: left promiscuous mode [ 102.895478][ T168] veth0_macvtap: left promiscuous mode [ 102.902025][ T168] veth1_vlan: left promiscuous mode [ 102.903618][ T168] veth0_vlan: left promiscuous mode [ 104.484249][ T168] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.570080][ T168] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.654011][ T168] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.732151][ T168] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.576029][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.597803][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.634656][ T168] bond0 (unregistering): Released all slaves [ 105.710833][ T168] hsr_slave_0: left promiscuous mode [ 105.714285][ T168] hsr_slave_1: left promiscuous mode [ 105.732988][ T168] veth1_macvtap: left promiscuous mode [ 105.734403][ T168] veth0_macvtap: left promiscuous mode [ 105.738090][ T168] veth1_vlan: left promiscuous mode [ 105.742797][ T168] veth0_vlan: left promiscuous mode