last executing test programs: 1.523704354s ago: executing program 1 (id=2): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 830.379759ms ago: executing program 1 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) flistxattr(r1, 0x0, 0x0) 830.076139ms ago: executing program 0 (id=5): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x5e}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 709.636693ms ago: executing program 0 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) 590.259338ms ago: executing program 1 (id=7): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 440.605606ms ago: executing program 0 (id=8): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44001, &(0x7f0000000080)={0xa, 0x4e20, 0x800000, @empty, 0x101}, 0x1c) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001170000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) 351.651747ms ago: executing program 1 (id=9): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}]}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x10) 250.400999ms ago: executing program 0 (id=10): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={0x0}) 110.552246ms ago: executing program 0 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xffffffffffffffe1, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000, 0x0, 0x0, &(0x7f0000000400)="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"}, 0xf) 0s ago: executing program 0 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43519' (ED25519) to the list of known hosts. syzkaller login: [ 68.578191][ T3310] cgroup: Unknown subsys name 'net' [ 68.907700][ T3310] cgroup: Unknown subsys name 'cpuset' [ 68.933624][ T3310] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.376671][ T3310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.296710][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.313409][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.552860][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.567209][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.253205][ T3318] hsr_slave_0: entered promiscuous mode [ 79.258065][ T3318] hsr_slave_1: entered promiscuous mode [ 79.605656][ T3317] hsr_slave_0: entered promiscuous mode [ 79.611180][ T3317] hsr_slave_1: entered promiscuous mode [ 79.613489][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 79.615736][ T3317] Cannot create hsr debugfs directory [ 80.327513][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.357289][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.386367][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.405133][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.617348][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.646914][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.672911][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.694402][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.395029][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.520132][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.132588][ T3318] veth0_vlan: entered promiscuous mode [ 84.184704][ T3318] veth1_vlan: entered promiscuous mode [ 84.320719][ T3317] veth0_vlan: entered promiscuous mode [ 84.371605][ T3317] veth1_vlan: entered promiscuous mode [ 84.423945][ T3318] veth0_macvtap: entered promiscuous mode [ 84.464683][ T3318] veth1_macvtap: entered promiscuous mode [ 84.670393][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.675374][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.676292][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.679999][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.683259][ T3317] veth0_macvtap: entered promiscuous mode [ 84.703545][ T3317] veth1_macvtap: entered promiscuous mode [ 84.931112][ T1810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.931653][ T1810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.931784][ T1810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.931906][ T1810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.254718][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.935755][ T30] audit: type=1326 audit(85.790:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.941710][ T30] audit: type=1326 audit(85.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.942231][ T30] audit: type=1326 audit(85.800:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.946561][ T30] audit: type=1326 audit(85.800:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.951945][ T30] audit: type=1326 audit(85.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.962123][ T30] audit: type=1326 audit(85.810:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.963784][ T30] audit: type=1326 audit(85.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.971281][ T30] audit: type=1326 audit(85.820:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.985919][ T30] audit: type=1326 audit(85.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 85.993267][ T30] audit: type=1326 audit(85.850:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3464 comm="syz.1.2" exe="/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9f55b9e8 code=0x7ffc0000 [ 86.536061][ T3477] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7'. [ 87.016787][ T3481] ------------[ cut here ]------------ [ 87.021566][ T3488] syz.0.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 87.020247][ T3481] WARNING: CPU: 1 PID: 3481 at mm/page_alloc.c:5154 __alloc_frozen_pages_noprof+0x32c/0xd3c [ 87.028273][ T3481] Modules linked in: [ 87.030067][ T3481] CPU: 1 UID: 0 PID: 3481 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT [ 87.030812][ T3481] Hardware name: linux,dummy-virt (DT) [ 87.031543][ T3481] pstate: 21402009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 87.032441][ T3481] pc : __alloc_frozen_pages_noprof+0x32c/0xd3c [ 87.032927][ T3481] lr : alloc_pages_mpol+0xb8/0x1b8 [ 87.033697][ T3481] sp : ffff80008990bac0 [ 87.034026][ T3481] x29: ffff80008990bac0 x28: f1f0000007be12c0 x27: 0000000000000014 [ 87.034925][ T3481] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000040cc0 [ 87.036523][ T3481] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000014 [ 87.037479][ T3481] x20: ffffffffffffffff x19: 0000000000000000 x18: 00000000ffffffff [ 87.038665][ T3481] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000020000000 [ 87.039604][ T3481] x14: ffff80008990bd98 x13: ffff80008990bd5a x12: ffff800082981250 [ 87.040037][ T3481] x11: 00000000000000c0 x10: 77fb0d4d7ce27c1c x9 : ffff8000824df148 [ 87.040690][ T3481] x8 : ffff8000824df148 x7 : ffff80008990bd60 x6 : 0000000000000001 [ 87.041098][ T3481] x5 : 0000000000000000 x4 : f1f0000007be12c0 x3 : 0000000000000000 [ 87.041522][ T3481] x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffff800082c0c000 [ 87.042082][ T3481] Call trace: [ 87.042584][ T3481] __alloc_frozen_pages_noprof+0x32c/0xd3c (P) [ 87.043402][ T3481] alloc_pages_mpol+0xb8/0x1b8 [ 87.044000][ T3481] alloc_frozen_pages_noprof+0x48/0xc0 [ 87.044484][ T3481] ___kmalloc_large_node+0x10c/0x128 [ 87.044742][ T3481] __kmalloc_noprof+0x484/0x608 [ 87.045019][ T3481] raw_alloc_io_data+0x58/0xa0 [ 87.045283][ T3481] raw_ioctl+0x88c/0xd2c [ 87.045535][ T3481] __arm64_sys_ioctl+0xac/0x104 [ 87.045785][ T3481] invoke_syscall+0x48/0x110 [ 87.045998][ T3481] el0_svc_common.constprop.0+0x40/0xe0 [ 87.046279][ T3481] do_el0_svc+0x1c/0x28 [ 87.046544][ T3481] el0_svc+0x34/0x10c [ 87.047203][ T3481] el0t_64_sync_handler+0xa0/0xe4 [ 87.047884][ T3481] el0t_64_sync+0x1a4/0x1a8 [ 87.048598][ T3481] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.077856][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.161757][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.231773][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.326714][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.642298][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.728924][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.847216][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.994223][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.879880][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.910706][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.944915][ T62] bond0 (unregistering): Released all slaves [ 90.096067][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.124580][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.164398][ T62] bond0 (unregistering): Released all slaves [ 90.296025][ T62] hsr_slave_0: left promiscuous mode [ 90.301839][ T62] hsr_slave_1: left promiscuous mode [ 90.325850][ T62] hsr_slave_0: left promiscuous mode [ 90.333950][ T62] hsr_slave_1: left promiscuous mode [ 90.360097][ T62] veth1_macvtap: left promiscuous mode [ 90.360639][ T62] veth0_macvtap: left promiscuous mode [ 90.365715][ T62] veth1_vlan: left promiscuous mode [ 90.367353][ T62] veth0_vlan: left promiscuous mode [ 90.375194][ T62] veth1_macvtap: left promiscuous mode [ 90.375484][ T62] veth0_macvtap: left promiscuous mode [ 90.375997][ T62] veth1_vlan: left promiscuous mode [ 90.376245][ T62] veth0_vlan: left promiscuous mode