Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved INFO: task syz-executor.2:30385 blocked for more than 140 seconds. Unreclaimable slab info: Not tainted 4.19.211-syzkaller #0 Name Used Total "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. pid_3 2KB 11KB pid_2 608KB 708KB syz-executor.2 D24480 30385 24855 0x00000000 batadv_tt_change_cache 0KB 3KB Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 batadv_tl_cache 3KB 16KB IEEE-802.15.4-RAW 5KB 7KB TIPC 2929KB 2940KB rds_tcp_connection 4KB 7KB rds_connection 0KB 3KB SCTPv6 8111KB 8111KB DCCPv6 9677KB 9682KB DCCP 9184KB 9184KB ccid3_hc_tx_sock 1KB 4KB ccid3_hc_rx_sock 1KB 4KB tfrc_rxh_cache 1KB 3KB dccp_bind_bucket 1KB 4KB L2TP/IP 1KB 7KB KCM 3KB 15KB kcm_mux_cache 1KB 7KB RXRPC 3165KB 3165KB rxrpc_call_jar 21874KB 21876KB bridge_fdb_cache 13KB 27KB fib6_nodes 128KB 268KB ip6_dst_cache 202KB 378KB RAWv6 39190KB 39190KB UDPLITEv6 5KB 7KB UDPv6 3663KB 3667KB TCPv6 6462KB 6468KB nf_conntrack 2KB 11KB t10_alua_lu_gp_cache 0KB 3KB sd_ext_cdb 0KB 7KB scsi_sense_cache 1056KB 1060KB virtio_scsi_cmd 16KB 20KB sgpool-128 8KB 8KB sgpool-64 4KB 12KB sgpool-32 2KB 15KB sgpool-16 1KB 7KB sgpool-8 0KB 7KB mqueue_inode_cache 9KB 37KB bio_post_read_ctx 14KB 15KB bio-2 14KB 15KB jfs_mp 7KB 7KB fuse_request 0KB 4KB cifs_small_rq 15KB 16KB cifs_request 67KB 67KB cifs_mpx_ids 0KB 7KB nfs_commit_data 3KB 14KB nfs_write_data 34KB 44KB ext4_system_zone 1KB 7KB fanotify_event_info 0KB 3KB dio 2KB 7KB bio-1 1KB 7KB fasync_cache 0KB 4KB pid_namespace 7KB 19KB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 rpc_buffers 17KB 25KB schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 rpc_tasks 2KB 7KB __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 UNIX 129KB 135KB UDP-Lite 6KB 6KB tcp_bind_bucket 245KB 248KB ip_fib_trie 23KB 47KB ip_fib_alias 97KB 205KB ip_dst_cache 9KB 64KB ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 PING 4KB 7KB RAW 23235KB 23235KB UDP 6564KB 6567KB TCP 278KB 320KB ops_init+0xb3/0x410 net/core/net_namespace.c:129 hugetlbfs_inode_cache 3KB 15KB setup_net+0x2c2/0x720 net/core/net_namespace.c:316 fscache_cookie_jar 1KB 7KB eventpoll_pwq 12KB 31KB eventpoll_epi 23KB 47KB inotify_inode_mark 6KB 19KB request_queue 211KB 211KB blkdev_requests 1KB 3KB blkdev_ioc 56KB 57KB bio-0 12495KB 12498KB biovec-max 3778KB 3778KB biovec-64 8245KB 8245KB biovec-16 2742KB 2745KB bio_integrity_payload 1KB 8KB khugepaged_mm_slot 249KB 330KB user_namespace 0KB 3KB uid_cache 0KB 4KB copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 dmaengine-unmap-2 0KB 3KB create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 skbuff_fclone_cache 33KB 45KB copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 skbuff_head_cache 6865KB 6993KB configfs_dir_cache 3KB 7KB file_lock_cache 3KB 15KB file_lock_ctx 9KB 15KB fsnotify_mark_connector 2KB 19KB net_namespace 33871KB 33871KB shmem_inode_cache 7995KB 8353KB copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 task_delay_info 1913KB 2399KB IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 IPVS: ftp: loaded support on port[0] = 21 taskstats 135KB 275KB proc_dir_entry 175223KB 175226KB pde_opener 3KB 19KB seq_file 82KB 82KB sigqueue 153KB 157KB kernfs_node_cache 491275KB 491277KB mnt_cache 164KB 276KB filp 5076KB 7327KB names_cache 49593KB 49593KB iint_cache 28KB 67KB key_jar 10KB 22KB uts_namespace 5KB 15KB nsproxy 370KB 375KB vm_area_struct 37983KB 39147KB mm_struct 7458KB 7566KB fs_cache 2271KB 3160KB files_cache 8360KB 10871KB signal_cache 14369KB 17573KB sighand_cache 10669KB 11273KB task_struct 61925KB 61944KB cred_jar 5226KB 6880KB anon_vma_chain 46901KB 47537KB anon_vma 10935KB 11835KB pid 585KB 736KB Acpi-Operand 156KB 194KB Acpi-ParseExt 9KB 11KB Acpi-Parse 41KB 47KB Acpi-State 52KB 63KB Acpi-Namespace 20KB 27KB numa_policy 0KB 3KB debug_objects_cache 40507KB 40513KB trace_event_file 297KB 298KB ftrace_event_field 398KB 401KB pool_workqueue 4007KB 4008KB page->ptl 6544KB 7012KB kmalloc-4194304 0KB 8192KB kmalloc-2097152 2050KB 6150KB kmalloc-1048576 5130KB 6156KB kmalloc-524288 2056KB 3084KB kmalloc-262144 1290KB 1806KB kmalloc-131072 1820KB 1820KB kmalloc-65536 1584KB 1914KB kmalloc-32768 211233KB 211233KB kmalloc-16384 65026KB 65026KB kmalloc-8192 147864KB 147864KB kmalloc-4096 653909KB 653917KB kmalloc-2048 531222KB 531904KB kmalloc-1024 210647KB 210648KB kmalloc-512 166146KB 177210KB kmalloc-256 109442KB 111150KB kmalloc-128 56089KB 56093KB kmalloc-96 14179KB 15292KB kmalloc-64 39034KB 40300KB kmalloc-32 33839KB 34823KB kmalloc-192 74756KB 76052KB kmem_cache 178KB 183KB Out of memory (oom_kill_allocating_task): Kill process 22717 (syz-executor.2) score 0 or sacrifice child Killed process 22717 (syz-executor.2) total-vm:57196kB, anon-rss:428kB, file-rss:14092kB, shmem-rss:0kB oom_reaper: reaped process 22717 (syz-executor.2), now anon-rss:0kB, file-rss:14092kB, shmem-rss:0kB IPVS: ftp: loaded support on port[0] = 21 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 systemd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 systemd cpuset=/ mems_allowed=0-1 CPU: 0 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1132 [inline] out_of_memory+0x34d/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 __do_cache_alloc mm/slab.c:3361 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x1e4/0x370 mm/slab.c:3557 entry_SYSCALL_64_after_hwframe+0x49/0xbe getname_flags+0xce/0x590 fs/namei.c:140 do_sys_open+0x26c/0x520 fs/open.c:1079 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5c10a739b1 Code: Bad RIP value. RSP: 002b:00007ffc56524388 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c10a739b1 RDX: 000055df95c0cb8c RSI: 0000000000090800 RDI: 000055df95c0cb50 RBP: 00007ffc565243d8 R08: 0000000000000000 R09: 0000000000000050 R10: 00007f5c124d2500 R11: 0000000000000202 R12: 000055df95b555b0 R13: 00007ffc565243e0 R14: 000055df95bac710 R15: 0000000000000005 Mem-Info: active_anon:213186 inactive_anon:13849 isolated_anon:0 active_file:40 inactive_file:143 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:52448 slab_unreclaimable:1218261 mapped:4390 shmem:26080 pagetables:56122 bounce:0 free:26589 free_pcp:140 free_cma:0 Node 0 active_anon:845356kB inactive_anon:54504kB active_file:156kB inactive_file:572kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:17560kB dirty:0kB writeback:0kB shmem:103428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 129024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 1 active_anon:7388kB inactive_anon:892kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2693 2695 2695 2695 RIP: 0033:0x7f420a701e99 Node 0 DMA32 free:42612kB min:35996kB low:44992kB high:53988kB active_anon:841260kB inactive_anon:54504kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:35648kB pagetables:72936kB bounce:0kB free_pcp:488kB local_pcp:488kB free_cma:0kB Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 INFO: task syz-executor.2:706 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB syz-executor.2 D26920 706 28993 0x00000000 lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:53872kB min:53876kB low:67344kB high:80812kB active_anon:7388kB inactive_anon:892kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:107808kB pagetables:151544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 12*4kB (U) 1*8kB (E) 4*16kB (UE) 16*32kB (UE) 20*64kB (UE) 8*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10872kB Node 0 DMA32: 3703*4kB (UM) 782*8kB (UME) 695*16kB (UME) 280*32kB (UME) 3*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41340kB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 Node 1 Normal: 192*4kB (UM) 148*8kB (UM) 903*16kB (UME) 55*32kB (UME) 19*64kB (UME) 8*128kB (UM) 7*256kB (M) 2*512kB (ME) 4*1024kB (UME) 3*2048kB (UME) 5*4096kB (M) = 53936kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 26161 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 vti_init_net+0x2a/0x370 net/ipv4/ip_vti.c:520 Total swap = 0kB ops_init+0xb3/0x410 net/core/net_namespace.c:129 2097051 pages RAM setup_net+0x2c2/0x720 net/core/net_namespace.c:316 0 pages HighMem/MovableOnly copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 369649 pages reserved 0 pages cma reserved copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 Unreclaimable slab info: Name Used Total do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 pid_3 2KB 11KB pid_2 605KB 708KB entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f420a701e99 Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 batadv_tt_change_cache 0KB 3KB batadv_tl_cache 3KB 16KB RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 IEEE-802.15.4-RAW 5KB 7KB TIPC 2929KB 2940KB rds_tcp_connection 4KB 7KB rds_connection 0KB 3KB SCTPv6 8113KB 8118KB RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 DCCPv6 9685KB 9690KB DCCP 9193KB 9198KB ccid3_hc_tx_sock 1KB 4KB RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 ccid3_hc_rx_sock 1KB 4KB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 INFO: task syz-executor.2:731 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D26880 731 26206 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 tfrc_rxh_cache 1KB 3KB dccp_bind_bucket 1KB 4KB L2TP/IP 1KB 7KB KCM 3KB 15KB kcm_mux_cache 1KB 7KB RXRPC 3165KB 3165KB rxrpc_call_jar 21873KB 21876KB bridge_fdb_cache 13KB 27KB fib6_nodes 128KB 268KB ip6_dst_cache 202KB 378KB RAWv6 39224KB 39224KB UDPLITEv6 5KB 7KB UDPv6 3663KB 3667KB TCPv6 6462KB 6468KB nf_conntrack 2KB 11KB t10_alua_lu_gp_cache 0KB 3KB sd_ext_cdb 0KB 7KB scsi_sense_cache 1056KB 1060KB virtio_scsi_cmd 16KB 20KB sgpool-128 8KB 8KB sgpool-64 4KB 12KB sgpool-32 2KB 15KB sgpool-16 1KB 7KB sgpool-8 0KB 7KB ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 mqueue_inode_cache 9KB 37KB bio_post_read_ctx 14KB 15KB bio-2 14KB 15KB jfs_mp 7KB 7KB fuse_request 0KB 4KB ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 cifs_small_rq 15KB 16KB cifs_request 67KB 67KB copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 cifs_mpx_ids 0KB 7KB create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 nfs_commit_data 3KB 14KB copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 nfs_write_data 34KB 44KB copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 ext4_system_zone 1KB 7KB fanotify_event_info 0KB 3KB dio 2KB 7KB copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 bio-1 1KB 7KB fasync_cache 0KB 4KB pid_namespace 7KB 19KB do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe rpc_buffers 17KB 25KB RIP: 0033:0x7f420a701e99 rpc_tasks 2KB 7KB Code: Bad RIP value. UNIX 129KB 135KB RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 UDP-Lite 6KB 6KB tcp_bind_bucket 245KB 248KB ip_fib_trie 23KB 47KB ip_fib_alias 97KB 205KB ip_dst_cache 9KB 64KB PING 4KB 7KB RAW 23250KB 23250KB UDP 6564KB 6567KB TCP 278KB 320KB hugetlbfs_inode_cache 3KB 15KB fscache_cookie_jar 1KB 7KB eventpoll_pwq 12KB 31KB RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 eventpoll_epi 23KB 47KB RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 inotify_inode_mark 6KB 19KB RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 request_queue 211KB 211KB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 blkdev_requests 1KB 3KB R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 blkdev_ioc 55KB 57KB INFO: task syz-executor.2:8690 blocked for more than 140 seconds. bio-0 12638KB 12641KB Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. biovec-max 3786KB 3786KB syz-executor.2 D26784 8690 28144 0x00000000 biovec-64 8316KB 8316KB Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 biovec-16 2775KB 2778KB bio_integrity_payload 1KB 8KB khugepaged_mm_slot 249KB 330KB user_namespace 0KB 3KB uid_cache 0KB 4KB dmaengine-unmap-2 0KB 3KB skbuff_fclone_cache 33KB 45KB skbuff_head_cache 6915KB 6993KB configfs_dir_cache 3KB 7KB file_lock_cache 3KB 15KB file_lock_ctx 9KB 15KB fsnotify_mark_connector 2KB 19KB net_namespace 33888KB 33888KB shmem_inode_cache 7995KB 8353KB task_delay_info 1913KB 2399KB taskstats 131KB 275KB proc_dir_entry 175301KB 175305KB pde_opener 2KB 19KB seq_file 82KB 82KB sigqueue 155KB 157KB kernfs_node_cache 491323KB 491325KB mnt_cache 164KB 276KB schedule+0x8d/0x1b0 kernel/sched/core.c:3561 filp 5093KB 7327KB names_cache 49614KB 49614KB iint_cache 28KB 67KB key_jar 10KB 22KB uts_namespace 5KB 15KB nsproxy 370KB 375KB vm_area_struct 37983KB 39147KB mm_struct 7458KB 7566KB fs_cache 2271KB 3160KB files_cache 8360KB 10871KB signal_cache 14369KB 17573KB sighand_cache 10669KB 11273KB task_struct 61944KB 61944KB cred_jar 5226KB 6880KB anon_vma_chain 46901KB 47537KB anon_vma 10932KB 11835KB pid 585KB 736KB Acpi-Operand 156KB 194KB Acpi-ParseExt 9KB 11KB Acpi-Parse 41KB 47KB Acpi-State 52KB 63KB Acpi-Namespace 20KB 27KB numa_policy 0KB 3KB debug_objects_cache 40522KB 40528KB trace_event_file 297KB 298KB schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 ftrace_event_field 398KB 401KB __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 pool_workqueue 4007KB 4008KB page->ptl 6544KB 7012KB kmalloc-4194304 0KB 8192KB kmalloc-2097152 2050KB 6150KB kmalloc-1048576 5130KB 6156KB kmalloc-524288 2056KB 3084KB kmalloc-262144 1290KB 1806KB kmalloc-131072 1820KB 1820KB kmalloc-65536 1584KB 1914KB kmalloc-32768 211365KB 211365KB kmalloc-16384 65026KB 65026KB kmalloc-8192 147996KB 147996KB kmalloc-4096 654109KB 654109KB kmalloc-2048 531349KB 531904KB kmalloc-1024 210782KB 210782KB kmalloc-512 166198KB 177262KB kmalloc-256 109487KB 111195KB kmalloc-128 56101KB 56105KB kmalloc-96 14179KB 15292KB kmalloc-64 39049KB 40300KB kmalloc-32 33859KB 34842KB kmalloc-192 74776KB 76072KB kmem_cache 178KB 183KB Out of memory: Kill process 31451 (syz-executor.2) score 1001 or sacrifice child Killed process 31451 (syz-executor.2) total-vm:58648kB, anon-rss:504kB, file-rss:14340kB, shmem-rss:68kB oom_reaper: reaped process 31451 (syz-executor.2), now anon-rss:0kB, file-rss:14336kB, shmem-rss:4kB syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 syz-executor.2 cpuset=/ mems_allowed=0-1 CPU: 1 PID: 16894 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1114 [inline] out_of_memory+0x1072/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 __do_cache_alloc mm/slab.c:3361 [inline] slab_alloc mm/slab.c:3389 [inline] __do_kmalloc mm/slab.c:3725 [inline] __kmalloc+0x213/0x3c0 mm/slab.c:3736 kmalloc include/linux/slab.h:520 [inline] kzalloc include/linux/slab.h:709 [inline] __register_sysctl_table+0x112/0x1090 fs/proc/proc_sysctl.c:1310 neigh_sysctl_register+0x341/0x680 net/core/neighbour.c:3260 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 devinet_sysctl_register+0xb1/0x230 net/ipv4/devinet.c:2381 ops_init+0xb3/0x410 net/core/net_namespace.c:129 inetdev_init+0x223/0x4a0 net/ipv4/devinet.c:269 inetdev_event+0x9cf/0x1270 net/ipv4/devinet.c:1477 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 notifier_call_chain+0xc0/0x230 kernel/notifier.c:93 call_netdevice_notifiers net/core/dev.c:1762 [inline] register_netdevice+0xdd2/0x10f0 net/core/dev.c:8761 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 __ip_tunnel_create+0x398/0x580 net/ipv4/ip_tunnel.c:280 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 ip_tunnel_init_net+0x330/0x990 net/ipv4/ip_tunnel.c:1035 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f420a701e99 Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 Mem-Info: copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 active_anon:213161 inactive_anon:13849 isolated_anon:0 active_file:69 inactive_file:85 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:52471 slab_unreclaimable:1218477 mapped:4366 shmem:26080 pagetables:56122 bounce:0 free:26243 free_pcp:350 free_cma:0 Node 0 active_anon:845256kB inactive_anon:54504kB active_file:1052kB inactive_file:944kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:18664kB dirty:0kB writeback:0kB shmem:103428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 129024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 1 active_anon:7388kB inactive_anon:892kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:41216kB min:35996kB low:44992kB high:53988kB active_anon:841108kB inactive_anon:54504kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:35616kB pagetables:72868kB bounce:0kB free_pcp:672kB local_pcp:496kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:7388kB inactive_anon:892kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:107840kB pagetables:151544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 12*4kB (U) 1*8kB (E) 4*16kB (UE) 16*32kB (UE) 20*64kB (UE) 8*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10872kB Node 0 DMA32: 3703*4kB (UME) 797*8kB (UME) 687*16kB (UME) 281*32kB (UME) 3*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41364kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 192*4kB (UM) 134*8kB (UM) 903*16kB (UME) 54*32kB (UME) 19*64kB (UME) 8*128kB (UM) 7*256kB (M) 2*512kB (ME) 4*1024kB (UME) 3*2048kB (UME) 5*4096kB (M) = 53792kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 26183 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved Unreclaimable slab info: Name Used Total pid_3 2KB 11KB pid_2 588KB 708KB batadv_tt_change_cache 0KB 3KB batadv_tl_cache 3KB 16KB IEEE-802.15.4-RAW 5KB 7KB TIPC 2928KB 2940KB rds_tcp_connection 4KB 7KB rds_connection 0KB 3KB SCTPv6 8113KB 8118KB DCCPv6 9682KB 9690KB DCCP 9191KB 9198KB ccid3_hc_tx_sock 1KB 4KB ccid3_hc_rx_sock 1KB 4KB tfrc_rxh_cache 1KB 3KB dccp_bind_bucket 1KB 4KB L2TP/IP 1KB 7KB KCM 3KB 15KB kcm_mux_cache 1KB 7KB RXRPC 3163KB 3165KB rxrpc_call_jar 21872KB 21876KB bridge_fdb_cache 13KB 27KB fib6_nodes 128KB 268KB ip6_dst_cache 201KB 378KB RAWv6 39224KB 39224KB UDPLITEv6 5KB 7KB UDPv6 3661KB 3667KB TCPv6 6453KB 6468KB nf_conntrack 2KB 11KB t10_alua_lu_gp_cache 0KB 3KB sd_ext_cdb 0KB 7KB scsi_sense_cache 1056KB 1060KB virtio_scsi_cmd 16KB 20KB sgpool-128 8KB 8KB sgpool-64 4KB 12KB sgpool-32 2KB 15KB sgpool-16 1KB 7KB sgpool-8 0KB 7KB mqueue_inode_cache 9KB 37KB bio_post_read_ctx 14KB 15KB bio-2 14KB 15KB jfs_mp 7KB 7KB fuse_request 0KB 4KB cifs_small_rq 15KB 16KB cifs_request 67KB 67KB cifs_mpx_ids 0KB 7KB nfs_commit_data 3KB 14KB nfs_write_data 34KB 44KB ext4_system_zone 1KB 7KB fanotify_event_info 0KB 3KB dio 2KB 7KB bio-1 1KB 7KB fasync_cache 0KB 4KB pid_namespace 7KB 19KB rpc_buffers 17KB 25KB rpc_tasks 2KB 7KB UNIX 129KB 135KB UDP-Lite 6KB 6KB tcp_bind_bucket 244KB 248KB ip_fib_trie 23KB 47KB ip_fib_alias 97KB 205KB ip_dst_cache 9KB 64KB PING 4KB 7KB RAW 23247KB 23250KB UDP 6561KB 6567KB TCP 278KB 320KB hugetlbfs_inode_cache 3KB 15KB fscache_cookie_jar 1KB 7KB eventpoll_pwq 12KB 31KB eventpoll_epi 23KB 47KB inotify_inode_mark 6KB 19KB request_queue 211KB 211KB blkdev_requests 1KB 3KB blkdev_ioc 54KB 57KB bio-0 12776KB 12780KB biovec-max 3786KB 3786KB biovec-64 8316KB 8316KB biovec-16 2805KB 2808KB bio_integrity_payload 1KB 8KB khugepaged_mm_slot 247KB 330KB user_namespace 0KB 3KB uid_cache 0KB 4KB dmaengine-unmap-2 0KB 3KB skbuff_fclone_cache 43KB 45KB skbuff_head_cache 6941KB 6993KB configfs_dir_cache 3KB 7KB file_lock_cache 3KB 15KB file_lock_ctx 9KB 15KB fsnotify_mark_connector 2KB 19KB net_namespace 33888KB 33888KB shmem_inode_cache 7995KB 8353KB task_delay_info 1891KB 2399KB taskstats 125KB 275KB proc_dir_entry 175300KB 175305KB pde_opener 2KB 19KB seq_file 81KB 82KB sigqueue 161KB 161KB kernfs_node_cache 491322KB 491325KB mnt_cache 164KB 276KB filp 5086KB 7327KB names_cache 49614KB 49614KB iint_cache 27KB 67KB key_jar 10KB 22KB uts_namespace 5KB 15KB nsproxy 369KB 375KB vm_area_struct 37981KB 39147KB mm_struct 7416KB 7566KB fs_cache 2265KB 3160KB files_cache 8309KB 10848KB signal_cache 14367KB 17573KB sighand_cache 10658KB 11266KB task_struct 61944KB 61944KB cred_jar 5226KB 6880KB anon_vma_chain 46896KB 47537KB anon_vma 10926KB 11835KB pid 584KB 736KB Acpi-Operand 156KB 194KB Acpi-ParseExt 9KB 11KB Acpi-Parse 41KB 47KB Acpi-State 52KB 63KB Acpi-Namespace 20KB 27KB numa_policy 0KB 3KB debug_objects_cache 40522KB 40528KB trace_event_file 297KB 298KB ftrace_event_field 398KB 401KB pool_workqueue 4006KB 4008KB page->ptl 6539KB 7012KB kmalloc-4194304 0KB 8192KB kmalloc-2097152 2050KB 6150KB kmalloc-1048576 5130KB 6156KB kmalloc-524288 2056KB 3084KB kmalloc-262144 1290KB 1806KB kmalloc-131072 1820KB 1820KB kmalloc-65536 1584KB 1914KB kmalloc-32768 211365KB 211365KB kmalloc-16384 65026KB 65026KB kmalloc-8192 147996KB 147996KB kmalloc-4096 654109KB 654109KB kmalloc-2048 531349KB 531904KB kmalloc-1024 210829KB 210829KB kmalloc-512 166210KB 177273KB kmalloc-256 109499KB 111206KB kmalloc-128 56101KB 56105KB kmalloc-96 14179KB 15292KB kmalloc-64 39049KB 40300KB kmalloc-32 33859KB 34842KB kmalloc-192 74776KB 76072KB kmem_cache 178KB 183KB Out of memory (oom_kill_allocating_task): Kill process 16894 (syz-executor.2) score 0 or sacrifice child Killed process 13344 (syz-executor.2) total-vm:57196kB, anon-rss:428kB, file-rss:14080kB, shmem-rss:0kB oom_reaper: reaped process 13344 (syz-executor.2), now anon-rss:0kB, file-rss:14080kB, shmem-rss:0kB systemd invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 systemd cpuset=/ mems_allowed=0-1 CPU: 1 PID: 1 Comm: systemd Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 dump_header+0x15d/0xc3f mm/oom_kill.c:443 oom_kill_process.cold+0x10/0x692 mm/oom_kill.c:956 out_of_memory mm/oom_kill.c:1132 [inline] out_of_memory+0x34d/0x1390 mm/oom_kill.c:1064 __alloc_pages_may_oom mm/page_alloc.c:3553 [inline] __alloc_pages_slowpath mm/page_alloc.c:4255 [inline] __alloc_pages_nodemask+0x23a2/0x2890 mm/page_alloc.c:4419 __alloc_pages include/linux/gfp.h:496 [inline] __alloc_pages_node include/linux/gfp.h:509 [inline] kmem_getpages mm/slab.c:1412 [inline] cache_grow_begin+0xa4/0x8a0 mm/slab.c:2682 fallback_alloc+0x213/0x2e0 mm/slab.c:3224 __do_cache_alloc mm/slab.c:3361 [inline] slab_alloc mm/slab.c:3389 [inline] kmem_cache_alloc+0x1e4/0x370 mm/slab.c:3557 getname_flags+0xce/0x590 fs/namei.c:140 do_sys_open+0x26c/0x520 fs/open.c:1079 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f5c10a739b1 Code: Bad RIP value. RSP: 002b:00007ffc56524388 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c10a739b1 RDX: 000055df95c0cb8c RSI: 0000000000090800 RDI: 000055df95c0cb50 RBP: 00007ffc565243d8 R08: 0000000000000000 R09: 0000000000000050 R10: 00007f5c124d2500 R11: 0000000000000202 R12: 000055df95b555b0 R13: 00007ffc565243e0 R14: 000055df95bac710 R15: 0000000000000005 Mem-Info: active_anon:213148 inactive_anon:13849 isolated_anon:0 active_file:36 inactive_file:54 isolated_file:0 unevictable:0 dirty:0 writeback:0 unstable:0 slab_reclaimable:52476 slab_unreclaimable:1218524 mapped:4288 shmem:26080 pagetables:56105 bounce:0 free:26654 free_pcp:67 free_cma:0 Node 0 active_anon:845204kB inactive_anon:54504kB active_file:144kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:17152kB dirty:0kB writeback:0kB shmem:103428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 129024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no Node 1 active_anon:7388kB inactive_anon:892kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:892kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes Node 0 DMA free:10872kB min:204kB low:252kB high:300kB active_anon:4096kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 2693 2695 2695 2695 Node 0 DMA32 free:41944kB min:35996kB low:44992kB high:53988kB active_anon:841108kB inactive_anon:54504kB active_file:160kB inactive_file:436kB unevictable:0kB writepending:0kB present:3129332kB managed:2763452kB mlocked:0kB kernel_stack:35616kB pagetables:72868kB bounce:0kB free_pcp:268kB local_pcp:268kB free_cma:0kB lowmem_reserve[]: 0 0 1 1 1 Node 0 Normal free:8kB min:24kB low:28kB high:32kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:2000kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 1 Normal free:53792kB min:53876kB low:67344kB high:80812kB active_anon:7388kB inactive_anon:892kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128248kB mlocked:0kB kernel_stack:107840kB pagetables:151544kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB lowmem_reserve[]: 0 0 0 0 0 Node 0 DMA: 12*4kB (U) 1*8kB (E) 4*16kB (UE) 16*32kB (UE) 20*64kB (UE) 8*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10872kB Node 0 DMA32: 3791*4kB (UME) 804*8kB (UME) 687*16kB (UME) 281*32kB (UME) 3*64kB (ME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41772kB Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB Node 1 Normal: 192*4kB (UM) 134*8kB (UM) 903*16kB (UME) 54*32kB (UME) 19*64kB (UME) 8*128kB (UM) 7*256kB (M) 2*512kB (ME) 4*1024kB (UME) 3*2048kB (UME) 5*4096kB (M) = 53792kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 26155 total pagecache pages 0 pages in swap cache Swap cache stats: add 0, delete 0, find 0/0 Free swap = 0kB Total swap = 0kB 2097051 pages RAM 0 pages HighMem/MovableOnly 369649 pages reserved 0 pages cma reserved Unreclaimable slab info: Name Used Total pid_3 2KB 11KB pid_2 588KB 708KB batadv_tt_change_cache 0KB 3KB batadv_tl_cache 3KB 16KB IEEE-802.15.4-RAW 5KB 7KB TIPC 2928KB 2940KB rds_tcp_connection 4KB 7KB rds_connection 0KB 3KB SCTPv6 8113KB 8118KB DCCPv6 9682KB 9690KB DCCP 9191KB 9198KB ccid3_hc_tx_sock 1KB 4KB ccid3_hc_rx_sock 1KB 4KB tfrc_rxh_cache 1KB 3KB dccp_bind_bucket 1KB 4KB L2TP/IP 1KB 7KB KCM 3KB 15KB kcm_mux_cache 1KB 7KB RXRPC 3163KB 3165KB rxrpc_call_jar 21872KB 21876KB bridge_fdb_cache 13KB 27KB fib6_nodes 128KB 268KB ip6_dst_cache 201KB 378KB RAWv6 39224KB 39224KB UDPLITEv6 5KB 7KB UDPv6 3661KB 3667KB TCPv6 6453KB 6468KB nf_conntrack 2KB 11KB t10_alua_lu_gp_cache 0KB 3KB sd_ext_cdb 0KB 7KB scsi_sense_cache 1056KB 1060KB virtio_scsi_cmd 16KB 20KB sgpool-128 8KB 8KB sgpool-64 4KB 12KB sgpool-32 2KB 15KB do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 sgpool-16 1KB 7KB entry_SYSCALL_64_after_hwframe+0x49/0xbe sgpool-8 0KB 7KB RIP: 0033:0x7f420a701e99 mqueue_inode_cache 9KB 37KB Code: Bad RIP value. bio_post_read_ctx 14KB 15KB RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 bio-2 14KB 15KB RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 jfs_mp 7KB 7KB RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 fuse_request 0KB 4KB RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 cifs_small_rq 15KB 16KB R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 cifs_request 67KB 67KB R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 cifs_mpx_ids 0KB 7KB nfs_commit_data 3KB 14KB nfs_write_data 34KB 44KB ext4_system_zone 1KB 7KB fanotify_event_info 0KB 3KB dio 2KB 7KB bio-1 1KB 7KB fasync_cache 0KB 4KB pid_namespace 7KB 19KB rpc_buffers 17KB 25KB rpc_tasks 2KB 7KB UNIX 129KB 135KB UDP-Lite 6KB 6KB tcp_bind_bucket 244KB 248KB ip_fib_trie 23KB 47KB ip_fib_alias 97KB 205KB ip_dst_cache 9KB 64KB PING 4KB 7KB RAW 23247KB 23250KB UDP 6561KB 6567KB TCP 278KB 320KB hugetlbfs_inode_cache 3KB 15KB fscache_cookie_jar 1KB 7KB eventpoll_pwq 12KB 31KB INFO: task syz-executor.2:10071 blocked for more than 140 seconds. eventpoll_epi 23KB 47KB Not tainted 4.19.211-syzkaller #0 inotify_inode_mark 6KB 19KB "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D25752 10071 706 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 vti_init_net+0x2a/0x370 net/ipv4/ip_vti.c:520 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f420a701e99 Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 INFO: task syz-executor.2:14884 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D26880 14884 30385 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f420a701e99 Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 INFO: task syz-executor.2:16898 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D26920 16898 27537 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f420a701e99 Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 INFO: task syz-executor.2:16980 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D26928 16980 5390 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f420a701e99 Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 INFO: task syz-executor.2:19102 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D26920 19102 26299 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f420a701e99 Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 INFO: task syz-executor.2:19109 blocked for more than 140 seconds. Not tainted 4.19.211-syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. syz-executor.2 D26880 19109 8690 0x00000000 Call Trace: context_switch kernel/sched/core.c:2828 [inline] __schedule+0x887/0x2040 kernel/sched/core.c:3517 schedule+0x8d/0x1b0 kernel/sched/core.c:3561 schedule_preempt_disabled+0xf/0x20 kernel/sched/core.c:3619 __mutex_lock_common kernel/locking/mutex.c:1016 [inline] __mutex_lock+0x5f0/0x1190 kernel/locking/mutex.c:1078 ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 ops_init+0xb3/0x410 net/core/net_namespace.c:129 setup_net+0x2c2/0x720 net/core/net_namespace.c:316 copy_net_ns+0x1f7/0x340 net/core/net_namespace.c:439 create_new_namespaces+0x3f6/0x7b0 kernel/nsproxy.c:107 copy_namespaces+0x325/0x3c0 kernel/nsproxy.c:165 copy_process.part.0+0x3a59/0x8260 kernel/fork.c:1916 copy_process kernel/fork.c:1710 [inline] _do_fork+0x22f/0xf30 kernel/fork.c:2219 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f420a701e99 Code: Bad RIP value. RSP: 002b:00007f4209056168 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f420a815030 RCX: 00007f420a701e99 RDX: 9999999999999999 RSI: 0000000000000000 RDI: 20000000c2000000 RBP: 00007f420a75c031 R08: ffffffffffffffff R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffe2ad4579f R14: 00007f4209056300 R15: 0000000000022000 Showing all locks held in the system: 4 locks held by systemd/1: 1 lock held by khungtaskd/1569: #0: 0000000001063e56 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x265 kernel/locking/lockdep.c:4441 1 lock held by kswapd0/1967: 2 locks held by agetty/8020: request_queue 211KB 211KB #0: 00000000f85a8f6a (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 drivers/tty/tty_ldisc.c:272 blkdev_requests 1KB 3KB #1: 00000000473ed217 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x217/0x1950 drivers/tty/n_tty.c:2154 blkdev_ioc 54KB 57KB 2 locks held by syz-fuzzer/8096: bio-0 12810KB 12813KB biovec-max 3786KB 3786KB biovec-64 8316KB 8316KB biovec-16 2809KB 2812KB bio_integrity_payload 1KB 8KB khugepaged_mm_slot 247KB 330KB user_namespace 0KB 3KB uid_cache 0KB 4KB dmaengine-unmap-2 0KB 3KB #0: 000000003d0f75b5 (sk_lock-AF_INET){+.+.}, at: lock_sock include/net/sock.h:1512 [inline] #0: 000000003d0f75b5 (sk_lock-AF_INET){+.+.}, at: tcp_sendmsg+0x1d/0x40 net/ipv4/tcp.c:1461 skbuff_fclone_cache 43KB 45KB #1: 000000001119fa6f (fs_reclaim){+.+.}, at: fs_reclaim_release mm/page_alloc.c:3778 [inline] #1: 000000001119fa6f (fs_reclaim){+.+.}, at: fs_reclaim_release mm/page_alloc.c:3774 [inline] #1: 000000001119fa6f (fs_reclaim){+.+.}, at: __perform_reclaim mm/page_alloc.c:3805 [inline] #1: 000000001119fa6f (fs_reclaim){+.+.}, at: __alloc_pages_direct_reclaim mm/page_alloc.c:3821 [inline] #1: 000000001119fa6f (fs_reclaim){+.+.}, at: __alloc_pages_slowpath mm/page_alloc.c:4211 [inline] #1: 000000001119fa6f (fs_reclaim){+.+.}, at: __alloc_pages_nodemask+0x191e/0x2890 mm/page_alloc.c:4419 4 locks held by kworker/u4:4/8885: skbuff_head_cache 6958KB 6993KB #0: 00000000ffd0a779 ((wq_completion)"%s""netns"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 configfs_dir_cache 3KB 7KB #1: 0000000068866c3c (net_cleanup_work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 file_lock_cache 3KB 15KB #2: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: cleanup_net+0xa8/0x8b0 net/core/net_namespace.c:521 file_lock_ctx 9KB 15KB #3: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip6gre_exit_batch_net+0x82/0x6c0 net/ipv6/ip6_gre.c:1632 1 lock held by syz-executor.0/20607: #0: 00000000066f6f91 (rtnl_mutex){+.+.}, at: netdev_run_todo+0x719/0xab0 net/core/dev.c:9005 1 lock held by syz-executor.1/1285: #0: 00000000066f6f91 (rtnl_mutex){+.+.}, at: tun_detach drivers/net/tun.c:759 [inline] #0: 00000000066f6f91 (rtnl_mutex){+.+.}, at: tun_chr_close+0x3a/0x180 drivers/net/tun.c:3323 1 lock held by syz-executor.4/3493: #0: 00000000066f6f91 (rtnl_mutex){+.+.}, at: tun_detach drivers/net/tun.c:759 [inline] #0: 00000000066f6f91 (rtnl_mutex){+.+.}, at: tun_chr_close+0x3a/0x180 drivers/net/tun.c:3323 1 lock held by syz-executor.3/19962: #0: 00000000066f6f91 (rtnl_mutex){+.+.}, at: netdev_run_todo+0x719/0xab0 net/core/dev.c:9005 3 locks held by kworker/1:1/22280: #0: 00000000e479168b ((wq_completion)"events"){+.+.}, at: process_one_work+0x767/0x1570 kernel/workqueue.c:2124 #1: 0000000027788c5b ((linkwatch_work).work){+.+.}, at: process_one_work+0x79c/0x1570 kernel/workqueue.c:2128 #2: 00000000066f6f91 (rtnl_mutex){+.+.}, at: linkwatch_event+0xb/0x60 net/core/link_watch.c:236 2 locks held by syz-executor.2/24393: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/24437: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/24514: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/24527: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/24692: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/24693: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/24708: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/24710: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/24826: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/24833: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/24850: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/24855: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/24869: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/24883: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/24892: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/24893: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25065: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25132: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25198: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25212: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25216: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25254: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25282: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25283: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25292: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25324: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25344: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25355: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25359: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25369: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25374: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25433: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25544: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25650: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25692: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25712: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25740: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25825: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25843: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25849: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25908: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/25931: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/25971: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26000: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26016: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26049: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26072: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26101: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26131: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26171: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26172: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26206: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26233: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26265: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26286: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26287: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26288: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26297: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26298: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26299: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26353: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26401: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26421: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26567: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26591: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26645: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26729: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26784: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26795: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/26897: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26917: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/26962: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27030: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27177: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27301: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/27365: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27379: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/27380: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27408: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27420: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27447: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27536: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27537: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27538: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/27545: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27635: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27646: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27665: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/27713: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27714: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27715: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27717: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27726: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27782: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/27803: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/27810: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27885: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: register_netdev+0x11/0x50 net/core/dev.c:8857 2 locks held by syz-executor.2/27891: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435 #1: 00000000066f6f91 (rtnl_mutex){+.+.}, at: ip_tunnel_init_net+0x321/0x990 net/ipv4/ip_tunnel.c:1034 2 locks held by syz-executor.2/27896: #0: 00000000fe43ab66 (pernet_ops_rwsem){++++}, at: copy_net_ns+0x1d8/0x340 net/core/net_namespace.c:435