last executing test programs: 151.67474ms ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000019080)={'\x00', 0x7, 0x401, 0x7, 0xfffffffffffffffe, 0x7c, r0}) waitid(0x2, r3, &(0x7f0000019100), 0x8, &(0x7f0000019180)) setrlimit(0x6, &(0x7f0000019240)={0xfffffffffffffff8, 0xfffffffffffffffd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sync() gettid() socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, 0x0, 0x0, 0x200) 0s ago: executing program 1 (id=2): socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r5, 0x0, 0xeb87) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5736' (ED25519) to the list of known hosts. syzkaller login: [ 84.512183][ T3316] cgroup: Unknown subsys name 'net' [ 84.702127][ T3316] cgroup: Unknown subsys name 'cpuset' [ 84.728708][ T3316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.226410][ T3316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.629085][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.683627][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.702183][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.767455][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.781365][ T3321] hsr_slave_0: entered promiscuous mode [ 93.787847][ T3321] hsr_slave_1: entered promiscuous mode [ 93.948493][ T3322] hsr_slave_0: entered promiscuous mode [ 93.951949][ T3322] hsr_slave_1: entered promiscuous mode [ 93.957939][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 93.958791][ T3322] Cannot create hsr debugfs directory [ 94.770579][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.796212][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.810707][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.839510][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.062380][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.085792][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.103732][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.123921][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.989427][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.132080][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.916283][ T3321] veth0_vlan: entered promiscuous mode [ 98.947437][ T3321] veth1_vlan: entered promiscuous mode [ 99.110055][ T3322] veth0_vlan: entered promiscuous mode [ 99.117564][ T3321] veth0_macvtap: entered promiscuous mode [ 99.148401][ T3321] veth1_macvtap: entered promiscuous mode [ 99.172726][ T3322] veth1_vlan: entered promiscuous mode [ 99.320551][ T3322] veth0_macvtap: entered promiscuous mode [ 99.360987][ T3322] veth1_macvtap: entered promiscuous mode [ 99.398975][ T2135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.408210][ T2135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.419776][ T2135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.420212][ T2135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.672586][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.712699][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.713180][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.737518][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.972238][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.302519][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. [ 103.302819][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. [ 103.306712][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. [ 103.307075][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. [ 103.317556][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 103.317762][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. [ 103.328302][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. [ 103.328537][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. [ 103.336289][ T3478] INFO: The task syz.0.1:3478 has been waiting for writeback completion for more than 1 seconds. [ 104.456064][ T1533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.531764][ T1533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.593416][ T1533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.671901][ T1533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.391521][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.453325][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.491037][ T1533] bond0 (unregistering): Released all slaves [ 105.598769][ T1533] hsr_slave_0: left promiscuous mode [ 105.602066][ T1533] hsr_slave_1: left promiscuous mode [ 105.626455][ T1533] veth1_macvtap: left promiscuous mode [ 105.627024][ T1533] veth0_macvtap: left promiscuous mode [ 105.627473][ T1533] veth1_vlan: left promiscuous mode [ 105.627952][ T1533] veth0_vlan: left promiscuous mode [ 107.094811][ T1533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.169953][ T1533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.261672][ T1533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.331641][ T1533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.137656][ T1533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.165466][ T1533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.212323][ T1533] bond0 (unregistering): Released all slaves [ 108.322896][ T1533] hsr_slave_0: left promiscuous mode [ 108.327163][ T1533] hsr_slave_1: left promiscuous mode [ 108.345918][ T1533] veth1_macvtap: left promiscuous mode [ 108.346206][ T1533] veth0_macvtap: left promiscuous mode [ 108.346714][ T1533] veth1_vlan: left promiscuous mode [ 108.346945][ T1533] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 11:02:42 Registers: info registers vcpu 0 CPU#0 PC=ffff80008033fae0 X00=faf000000b5722c0 X01=faf000000b578000 X02=0000000000000001 X03=0000000000008000 X04=0000000000000040 X05=faf000000b57003f X06=faf000000b578000 X07=0000000000000000 X08=0000000000000038 X09=00000000000000fa X10=0000000000000000 X11=0000000000000000 X12=000000000006e3ba X13=0000000000000002 X14=0000000000000002 X15=0000000000000000 X16=ffff800082de8000 X17=fff07ffffcef4000 X18=0000000000000001 X19=ffff800082b1a000 X20=ffffc1ffc02d5c00 X21=0000000000000003 X22=0000000000000003 X23=0000000000000001 X24=fff000007fa01fb8 X25=0000000000000003 X26=fff000007fa01a40 X27=fff000007fa01a40 X28=fff000007f8dc600 X29=ffff800082deb8a0 X30=ffff80008033fd74 SP=ffff800082deb8a0 PSTATE=20402009 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:2525252525252525:2525252525252525 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6572207265767265:730073250a0d0a0d Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:65726f6d20726f66:206e6f6974656c70 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00ff00ff00000000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000000f0f0000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:74696177206e6565:6220736168203837 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6620676e69746961:77206e6565622073 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6d6f63206b636162:657469727720726f Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffc2dee1c0:0000ffffc2dee1c0 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd8:0000ffffc2dee190 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800081b93004 X00=f6f0000006f76780 X01=ffffffffffffffff X02=f1f0000006bab180 X03=00000000ffffffff X04=00000000460a91ae X05=ffff800089abbc70 X06=ffff8000816b45d8 X07=0000000000000004 X08=f1f0000006bac198 X09=0f535c522cced35d X10=450228a31244b706 X11=00000000000000c0 X12=ffff800082a012d0 X13=0000000000000000 X14=0000000000000230 X15=ffff8000831eba00 X16=0000000000000000 X17=0000000000000000 X18=00000000ffffffff X19=0000000000000000 X20=fbf00000071bb620 X21=0000000000000000 X22=ffff800089d13b58 X23=ffff800089d13b28 X24=00000000000027ff X25=f1f0000006591e40 X26=f1f0000006591e40 X27=0000000000000000 X28=ffff800089d13a6c X29=ffff800089d13940 X30=3bff8000803afea8 SP=ffff800089d13920 PSTATE=01402009 ---- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000009002000000:0000009002000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000090 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000028:0000000000000090 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffc5525d50:0000ffffc5525d50 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffc5525d20 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000