last executing test programs: 2m52.27073161s ago: executing program 4 (id=5): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000200"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) 2m51.520791743s ago: executing program 4 (id=8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 2m34.198158938s ago: executing program 32 (id=8): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 19.125061517s ago: executing program 0 (id=402): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') read$FUSE(r3, &(0x7f0000001e80)={0x2020}, 0x2062) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 18.949992205s ago: executing program 3 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680040008800c0002800800010000"], 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x404, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40850) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) 16.546992729s ago: executing program 3 (id=408): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 16.000517014s ago: executing program 3 (id=411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prlimit64(r1, 0xe, &(0x7f0000000040)={0xa, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x401, 0xe4340000, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$rds(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000090601080000000000000000050000000900020073797a3100000000050001000700000020000780060004404e21050005000700ff0000000c000180080001400a"], 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 12.042501006s ago: executing program 1 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) syz_io_uring_submit(0x0, 0x0, 0x0) 9.359672442s ago: executing program 5 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680040008800c0002800800010000"], 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x404, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40850) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) 9.275277296s ago: executing program 1 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.2642211s ago: executing program 0 (id=421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 8.237599561s ago: executing program 5 (id=422): openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) syz_io_uring_setup(0x73d3, 0x0, &(0x7f0000000540), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}}, &(0x7f00000001c0)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60ae", 0x29) r4 = accept$alg(r3, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff) 8.097721227s ago: executing program 1 (id=423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004000000090000"], 0x48) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x4, 0x4, 0x4, 0x488}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000027c00000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd27, 0x64c, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x2, 0xf}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r5 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x4) fallocate(r5, 0x1, 0x2, 0x7) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000140)={0x3, r6, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r5, 0xcc1ff000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 8.070257238s ago: executing program 2 (id=424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004000000090000"], 0x48) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x4, 0x4, 0x4, 0x488}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000027c00000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd27, 0x64c, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x2, 0xf}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r5 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x4) fallocate(r5, 0x1, 0x2, 0x7) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000140)={0x3, r6, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r5, 0xcc1ff000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 8.006831891s ago: executing program 0 (id=425): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004000000090000"], 0x48) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x4, 0x4, 0x4, 0x488}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000027c00000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd27, 0x64c, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x2, 0xf}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r5 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x4) fallocate(r5, 0x1, 0x2, 0x7) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000140)={0x3, r6, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r5, 0xcc1ff000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 4.038019234s ago: executing program 2 (id=426): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x7fffffff, 0x87b, 0xa, 0x24c, 0xffe, 0x7, 0x5, 0x5, 0x2, 0x105, 0xd11, 0x1, 0x2c03, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x8000, 0x800008, 0x4, 0x421, 0xfffffffd]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000a80), 0xd4, 0x100) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000ac0)=""/46) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.830264113s ago: executing program 3 (id=427): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000200"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 3.183163371s ago: executing program 0 (id=428): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r8, 0x4) 3.182824461s ago: executing program 5 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701002400128009000100626f6e64000000001400028008000700020000000800030008"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4606, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 3.178088391s ago: executing program 1 (id=430): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000600000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0x0, 0x0}, 0x10) signalfd4(r1, &(0x7f00000009c0)={[0x3]}, 0x8, 0x80c00) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 3.064331137s ago: executing program 3 (id=431): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') read$FUSE(r3, &(0x7f0000001e80)={0x2020}, 0x2062) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.539226339s ago: executing program 2 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680040008800c0002800800010000"], 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x404, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r3) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40850) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) 2.100953488s ago: executing program 5 (id=433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 1.83394006s ago: executing program 0 (id=434): unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.501797944s ago: executing program 2 (id=435): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 1.482461466s ago: executing program 1 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.354105091s ago: executing program 5 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 877.784551ms ago: executing program 1 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004000000090000"], 0x48) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x4, 0x4, 0x4, 0x488}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000027c00000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd27, 0x64c, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x2, 0xf}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r5 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x4) fallocate(r5, 0x1, 0x2, 0x7) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000140)={0x3, r6, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r5, 0xcc1ff000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 531.090027ms ago: executing program 3 (id=439): openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) syz_io_uring_setup(0x73d3, 0x0, &(0x7f0000000540), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}}, &(0x7f00000001c0)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60ae", 0x29) r4 = accept$alg(r3, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff) 319.724216ms ago: executing program 5 (id=440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004000000090000"], 0x48) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x4, 0x4, 0x4, 0x488}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x9200000000000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000035000701feffffff00000000027c00000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd27, 0x64c, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x2, 0xf}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r5 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x4) fallocate(r5, 0x1, 0x2, 0x7) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000140)={0x3, r6, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x12, r5, 0xcc1ff000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 313.479556ms ago: executing program 2 (id=441): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000200"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 41.263918ms ago: executing program 2 (id=442): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000200"], 0x48) r1 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=443): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) mkdir(0x0, 0x18e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) kernel console output (not intermixed with test programs): IRQ> [ 354.723108][ C1] dump_stack_lvl+0x168/0x22e [ 354.727800][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 354.734248][ C1] ? show_regs_print_info+0x12/0x12 [ 354.739469][ C1] ? load_image+0x3b0/0x3b0 [ 354.743980][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 354.750405][ C1] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 354.756946][ C1] warn_alloc+0x20c/0x300 [ 354.761292][ C1] ? zone_watermark_ok_safe+0x270/0x270 [ 354.766832][ C1] ? wakeup_kcompactd+0x8d/0x590 [ 354.771769][ C1] __alloc_pages_slowpath+0x2162/0x21e0 [ 354.777312][ C1] ? zone_watermark_fast+0x168/0x240 [ 354.782633][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 354.788378][ C1] __alloc_pages+0x33c/0x4e0 [ 354.793067][ C1] ? zone_statistics+0x170/0x170 [ 354.798013][ C1] ? alloc_pages+0x4d8/0x740 [ 354.802609][ C1] alloc_slab_page+0x5d/0x160 [ 354.807294][ C1] ? mempolicy_slab_node+0x3e/0x390 [ 354.812543][ C1] new_slab+0x1bd/0x2c0 [ 354.816742][ C1] ___slab_alloc+0xbc6/0x1230 [ 354.821432][ C1] ? __alloc_skb+0xfc/0x7e0 [ 354.825976][ C1] kmem_cache_alloc_node+0x1e5/0x320 [ 354.831261][ C1] ? __alloc_skb+0xfc/0x7e0 [ 354.835772][ C1] __alloc_skb+0xfc/0x7e0 [ 354.840131][ C1] wg_packet_send_keepalive+0x61/0x2b0 [ 354.845604][ C1] call_timer_fn+0x1a0/0x670 [ 354.850191][ C1] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 354.856395][ C1] ? call_timer_fn+0xc1/0x670 [ 354.861073][ C1] ? __run_timers+0x7d0/0x7d0 [ 354.865750][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 354.871021][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 354.876480][ C1] ? wg_expired_zero_key_material+0x2a0/0x2a0 [ 354.882560][ C1] __run_timers+0x529/0x7d0 [ 354.887154][ C1] ? detach_timer+0x350/0x350 [ 354.891833][ C1] ? lock_chain_count+0x20/0x20 [ 354.896688][ C1] run_timer_softirq+0x63/0xf0 [ 354.901452][ C1] handle_softirqs+0x2a1/0x920 [ 354.906221][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 354.911073][ C1] ? do_softirq+0x200/0x200 [ 354.915604][ C1] __irq_exit_rcu+0x12f/0x220 [ 354.920379][ C1] ? irq_exit_rcu+0x20/0x20 [ 354.924886][ C1] irq_exit_rcu+0x5/0x20 [ 354.929142][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 354.934787][ C1] [ 354.937720][ C1] [ 354.940696][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 354.946707][ C1] RIP: 0010:memset+0x9/0x40 [ 354.951212][ C1] Code: cc 89 f6 48 8b 0c 24 31 d2 e9 a3 ec ff ff 0f 1f 00 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 90 ec ff ff 55 41 56 53 48 89 d3 89 f5 <49> 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 72 ec ff ff 84 [ 354.970832][ C1] RSP: 0000:ffffc90003226720 EFLAGS: 00000246 [ 354.976913][ C1] RAX: ffffc90003226960 RBX: 0000000000000028 RCX: 0000000000000000 [ 354.984972][ C1] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003226910 [ 354.992962][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffc90003226960 [ 355.000933][ C1] R10: fffff52000644d31 R11: 1ffff92000644d2c R12: ffffc90003226960 [ 355.008992][ C1] R13: 0000000000000020 R14: ffffc90003226f20 R15: ffffc90003226910 [ 355.016977][ C1] shrink_lruvec+0x13c/0x3c60 [ 355.021665][ C1] ? verify_lock_unused+0x140/0x140 [ 355.026876][ C1] ? verify_lock_unused+0x140/0x140 [ 355.032075][ C1] ? shrink_slab+0x61e/0x720 [ 355.036661][ C1] ? preempt_count_add+0x8d/0x190 [ 355.041775][ C1] ? __up_read+0x27c/0x660 [ 355.046195][ C1] ? mem_cgroup_shrink_node+0x710/0x710 [ 355.051751][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 355.056783][ C1] ? mem_cgroup_calculate_protection+0x4c/0x3f0 [ 355.063634][ C1] ? mem_cgroup_iter+0x37/0x4a0 [ 355.068509][ C1] ? shrink_node+0x680/0x28d0 [ 355.073210][ C1] ? do_try_to_free_pages+0x64b/0x19c0 [ 355.078703][ C1] ? try_to_free_pages+0xeb0/0xeb0 [ 355.083816][ C1] ? try_to_free_pages+0x8e4/0xeb0 [ 355.088935][ C1] ? lru_gen_exit_memcg+0x2a0/0x2a0 [ 355.094143][ C1] ? __cpuset_memory_pressure_bump+0x4cf/0x610 [ 355.100302][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 355.105434][ C1] ? __alloc_pages_slowpath+0xc9d/0x21e0 [ 355.111124][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 355.116852][ C1] ? __alloc_pages+0x33c/0x4e0 [ 355.121621][ C1] ? zone_statistics+0x170/0x170 [ 355.126573][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 355.131605][ C1] ? __rwlock_init+0x140/0x140 [ 355.136379][ C1] ? percpu_ref_put+0x1e/0x230 [ 355.141147][ C1] ? __folio_alloc+0xe/0x30 [ 355.145651][ C1] ? vma_alloc_folio+0x4a3/0x900 [ 355.150596][ C1] ? __swp_swapcount+0xf5/0x120 [ 355.155496][ C1] ? __read_swap_cache_async+0x196/0x960 [ 355.161272][ C1] ? swap_cluster_readahead+0x53d/0x670 [ 355.166961][ C1] ? read_swap_cache_async+0xa0/0xa0 [ 355.172269][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 355.177309][ C1] ? xas_descend+0x3a4/0x490 [ 355.181904][ C1] ? swapin_readahead+0xff/0x930 [ 355.186840][ C1] ? put_swap_device+0x1e/0x230 [ 355.191703][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 355.196763][ C1] ? exit_swap_address_space+0x280/0x280 [ 355.202395][ C1] ? put_swap_device+0x1e/0x230 [ 355.207237][ C1] ? put_swap_device+0x1e/0x230 [ 355.212195][ C1] ? put_swap_device+0x17e/0x230 [ 355.217133][ C1] ? swap_cache_get_folio+0x137/0x5b0 [ 355.222505][ C1] ? do_swap_page+0x321/0x3ab0 [ 355.227406][ C1] ? count_memcg_event_mm+0x8f/0x3b0 [ 355.233087][ C1] ? count_memcg_event_mm+0x358/0x3b0 [ 355.238585][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 355.243633][ C1] ? count_memcg_event_mm+0x8f/0x3b0 [ 355.249019][ C1] ? put_page+0x270/0x270 [ 355.253350][ C1] ? handle_mm_fault+0x1904/0x3e60 [ 355.258500][ C1] ? mt_find+0x145/0x810 [ 355.262741][ C1] ? numa_migrate_prep+0x250/0x250 [ 355.267862][ C1] ? lock_chain_count+0x20/0x20 [ 355.272707][ C1] ? lock_mm_and_find_vma+0xae/0x2f0 [ 355.277986][ C1] ? do_user_addr_fault+0x51f/0xb10 [ 355.283273][ C1] ? exc_page_fault+0x60/0x100 [ 355.288162][ C1] ? asm_exc_page_fault+0x22/0x30 [ 355.293200][ C1] ? _copy_from_user+0x161/0x170 [ 355.298144][ C1] ? copy_user_short_string+0xd/0x40 [ 355.303427][ C1] ? _copy_to_user+0xea/0x130 [ 355.308118][ C1] ? msr_read+0x124/0x1b0 [ 355.312444][ C1] ? msr_device_destroy+0x20/0x20 [ 355.317464][ C1] ? common_file_perm+0x171/0x1c0 [ 355.322489][ C1] ? fsnotify_perm+0x39b/0x550 [ 355.327246][ C1] ? msr_device_destroy+0x20/0x20 [ 355.332270][ C1] ? vfs_read+0x2c0/0x920 [ 355.336601][ C1] ? kernel_read+0x1e0/0x1e0 [ 355.341188][ C1] ? __fget_files+0x28/0x4d0 [ 355.345771][ C1] ? __fget_files+0x44a/0x4d0 [ 355.350474][ C1] ? __fdget_pos+0x1d4/0x360 [ 355.355182][ C1] ? ksys_read+0x71/0x240 [ 355.359513][ C1] ? ksys_read+0x143/0x240 [ 355.363930][ C1] ? vfs_write+0x960/0x960 [ 355.368347][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 355.373545][ C1] ? do_syscall_64+0x4c/0xa0 [ 355.378128][ C1] ? clear_bhb_loop+0x60/0xb0 [ 355.382809][ C1] ? clear_bhb_loop+0x60/0xb0 [ 355.387501][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.393569][ C1] [ 355.396760][ C1] Mem-Info: [ 355.399868][ C1] active_anon:0 inactive_anon:0 isolated_anon:0 [ 355.399868][ C1] active_file:29 inactive_file:48 isolated_file:0 [ 355.399868][ C1] unevictable:768 dirty:48 writeback:0 [ 355.399868][ C1] slab_reclaimable:20845 slab_unreclaimable:91283 [ 355.399868][ C1] mapped:25649 shmem:768 pagetables:632 [ 355.399868][ C1] sec_pagetables:0 bounce:0 [ 355.399868][ C1] kernel_misc_reclaimable:0 [ 355.399868][ C1] free:8599 free_pcp:3824 free_cma:0 [ 355.444056][ C1] Node 0 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12048kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 355.475866][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:44kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 355.506385][ C1] Node 0 DMA free:10192kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.533757][ C1] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 355.539493][ C1] Node 0 DMA32 free:3604kB boost:32768kB min:67460kB low:76132kB high:84804kB reserved_highatomic:28672KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:132kB unevictable:1536kB writepending:192kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:14744kB local_pcp:9112kB free_cma:0kB [ 355.569502][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 355.574251][ C1] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.601044][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 355.605827][ C1] Node 1 Normal free:20600kB boost:2048kB min:57240kB low:71036kB high:84832kB reserved_highatomic:20480KB active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:44kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:552kB local_pcp:312kB free_cma:0kB [ 355.635512][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 355.640236][ C1] Node 0 DMA: 0*4kB 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10192kB [ 355.656004][ C1] Node 0 DMA32: 19*4kB (UME) 71*8kB (UME) 25*16kB (ME) 62*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3604kB [ 355.670561][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 355.682045][ C1] Node 1 Normal: 30*4kB (UM) 46*8kB (UM) 13*16kB (UME) 142*32kB (UME) 6*64kB (ME) 5*128kB (UME) 8*256kB (UM) 8*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 20600kB [ 355.698409][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.707989][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.717320][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.727033][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.736336][ C1] 895 total pagecache pages [ 355.740822][ C1] 0 pages in swap cache [ 355.745038][ C1] Free swap = 100040kB [ 355.749178][ C1] Total swap = 124996kB [ 355.753340][ C1] 2097051 pages RAM [ 355.757127][ C1] 0 pages HighMem/MovableOnly [ 355.761864][ C1] 415114 pages reserved [ 355.766027][ C1] 0 pages cma reserved [ 357.298167][ T4580] slab_out_of_memory: 146 callbacks suppressed [ 357.298187][ T4580] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 357.311882][ T9] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 357.314232][ T4580] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 357.322000][ T9] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 357.332098][ T4580] node 0: slabs: 677, objs: 10692, free: 0 [ 357.342653][ T9] node 0: slabs: 2486, objs: 29832, free: 0 [ 357.348633][ T4580] node 1: slabs: 191, objs: 2552, free: 50 [ 357.354737][ T9] node 1: slabs: 298, objs: 3576, free: 53 [ 357.881782][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 357.889831][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 357.899876][ C1] node 0: slabs: 242, objs: 7744, free: 0 [ 357.905832][ C1] node 1: slabs: 55, objs: 1760, free: 16 [ 357.911800][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 357.920831][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 357.930922][ C1] node 0: slabs: 677, objs: 10692, free: 0 [ 357.936945][ C1] node 1: slabs: 191, objs: 2552, free: 50 [ 357.943116][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 357.951188][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 357.961034][ C1] node 0: slabs: 242, objs: 7744, free: 0 [ 357.966989][ C1] node 1: slabs: 55, objs: 1760, free: 16 [ 357.973057][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 357.982013][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 357.992124][ C1] node 0: slabs: 677, objs: 10692, free: 0 [ 357.998101][ C1] node 1: slabs: 191, objs: 2552, free: 50 [ 358.118787][ T4354] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 358.127493][ T4354] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 358.132972][ T4617] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 358.138230][ T4354] node 0: slabs: 2493, objs: 29916, free: 0 [ 358.146436][ T4617] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 358.152576][ T4354] node 1: slabs: 298, objs: 3576, free: 53 [ 358.163093][ T4617] node 0: slabs: 2493, objs: 29916, free: 0 [ 358.176139][ T4617] node 1: slabs: 298, objs: 3576, free: 53 [ 358.430721][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 358.438923][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 358.449557][ C1] node 0: slabs: 2495, objs: 29940, free: 0 [ 358.455846][ C1] node 1: slabs: 298, objs: 3576, free: 53 [ 359.717903][ T4417] Node 1 Normal: 30*4kB (UM) 46*8kB (UM) 13*16kB (UME) 142*32kB (UME) 6*64kB (ME) 5*128kB (UME) 8*256kB (UM) 8*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 20600kB [ 360.273346][ T6234] rpc_buffers 31KB 31KB [ 360.273934][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 360.287801][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 360.299301][ C1] node 0: slabs: 2510, objs: 30120, free: 0 [ 360.305382][ C1] node 1: slabs: 298, objs: 3576, free: 53 [ 360.347879][ T6234] rpc_tasks 3KB 3KB [ 361.441828][ T6234] UNIX-STREAM 160KB 160KB [ 362.431921][ T4416] slab_out_of_memory: 320 callbacks suppressed [ 362.431939][ T4416] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 362.446255][ T4416] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 362.456913][ T4416] node 0: slabs: 2533, objs: 30396, free: 0 [ 362.463128][ T4416] node 1: slabs: 298, objs: 3576, free: 53 [ 362.469284][ T4416] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 362.477346][ T4416] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 362.487910][ T4416] node 0: slabs: 2533, objs: 30396, free: 0 [ 362.494045][ T4416] node 1: slabs: 298, objs: 3576, free: 53 [ 362.500061][ T4416] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 362.508137][ T4416] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 362.518708][ T4416] node 0: slabs: 2533, objs: 30396, free: 0 [ 362.524845][ T4416] node 1: slabs: 298, objs: 3576, free: 53 [ 362.526723][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 362.538965][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 362.549575][ C1] node 0: slabs: 2533, objs: 30396, free: 0 [ 362.555665][ C1] node 1: slabs: 298, objs: 3576, free: 53 [ 362.660540][ T4354] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 362.669599][ T4354] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 362.679733][ T4354] node 0: slabs: 677, objs: 10692, free: 0 [ 362.685770][ T4354] node 1: slabs: 191, objs: 2552, free: 50 [ 362.732291][ T4602] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 362.741294][ T4602] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 362.751432][ T4602] node 0: slabs: 677, objs: 10692, free: 0 [ 362.757471][ T4602] node 1: slabs: 191, objs: 2552, free: 50 [ 362.925252][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 362.934304][ T4564] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 362.944433][ T4564] node 0: slabs: 677, objs: 10692, free: 0 [ 362.950429][ T4564] node 1: slabs: 191, objs: 2552, free: 50 [ 363.001700][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 363.009717][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 363.020384][ C1] node 0: slabs: 2537, objs: 30444, free: 0 [ 363.026479][ C1] node 1: slabs: 298, objs: 3576, free: 53 [ 363.033040][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 363.041041][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 363.051575][ C1] node 0: slabs: 2537, objs: 30444, free: 0 [ 363.057687][ C1] node 1: slabs: 298, objs: 3576, free: 53 [ 363.063717][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 363.071723][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 363.082235][ C1] node 0: slabs: 2537, objs: 30444, free: 0 [ 363.088318][ C1] node 1: slabs: 298, objs: 3576, free: 53 [ 363.628254][ T4417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.404531][ T9] warn_alloc: 600 callbacks suppressed [ 365.404550][ T9] kworker/u4:0: page allocation failure: order:0, mode:0x40a20(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 365.425713][ T4417] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.435278][ T6234] UNIX 202KB 288KB [ 365.441381][ T6234] MPTCP 29KB 29KB [ 366.421675][ T4417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.431288][ T4417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 367.552024][ T4347] slab_out_of_memory: 726 callbacks suppressed [ 367.552042][ T4347] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 367.567267][ T4347] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 367.577387][ T4347] node 0: slabs: 678, objs: 10708, free: 0 [ 367.583414][ T4347] node 1: slabs: 191, objs: 2552, free: 50 [ 367.630872][ T4580] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 367.639924][ T4580] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 367.650058][ T4580] node 0: slabs: 678, objs: 10708, free: 0 [ 367.656090][ T4580] node 1: slabs: 191, objs: 2552, free: 50 [ 368.121755][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 368.129774][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 368.139596][ C1] node 0: slabs: 242, objs: 7744, free: 0 [ 368.145497][ C1] node 1: slabs: 55, objs: 1760, free: 16 [ 368.249254][ T4354] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 368.249487][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 368.258267][ T4354] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 368.266272][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 368.276350][ T4354] node 0: slabs: 678, objs: 10708, free: 0 [ 368.286914][ C1] node 0: slabs: 2598, objs: 31176, free: 0 [ 368.292901][ T4354] node 1: slabs: 191, objs: 2552, free: 50 [ 368.298955][ C1] node 1: slabs: 298, objs: 3576, free: 53 [ 368.305008][ T4602] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 368.319968][ T4602] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 368.330089][ T4602] node 0: slabs: 678, objs: 10708, free: 0 [ 368.336217][ T4602] node 1: slabs: 191, objs: 2552, free: 50 [ 368.422316][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 368.431316][ T4564] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 368.441450][ T4564] node 0: slabs: 678, objs: 10708, free: 0 [ 368.447480][ T4564] node 1: slabs: 191, objs: 2552, free: 50 [ 368.447597][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 368.460755][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.470858][ T9] Workqueue: phy11 ieee80211_iface_work [ 368.476410][ T9] Call Trace: [ 368.479688][ T9] [ 368.482610][ T9] dump_stack_lvl+0x168/0x22e [ 368.487288][ T9] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 368.493704][ T9] ? show_regs_print_info+0x12/0x12 [ 368.498924][ T9] ? load_image+0x3b0/0x3b0 [ 368.503444][ T9] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 368.509870][ T9] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 368.516376][ T9] warn_alloc+0x20c/0x300 [ 368.520731][ T9] ? zone_watermark_ok_safe+0x270/0x270 [ 368.526307][ T9] ? wakeup_kcompactd+0x8d/0x590 [ 368.531257][ T9] __alloc_pages_slowpath+0x2162/0x21e0 [ 368.536820][ T9] ? zone_watermark_fast+0x168/0x240 [ 368.542115][ T9] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 368.547835][ T9] ? __next_zones_zonelist+0x99/0x120 [ 368.553221][ T9] __alloc_pages+0x33c/0x4e0 [ 368.557896][ T9] ? zone_statistics+0x170/0x170 [ 368.562835][ T9] ? alloc_pages+0x4d8/0x740 [ 368.567429][ T9] ? lock_chain_count+0x20/0x20 [ 368.572284][ T9] alloc_slab_page+0x5d/0x160 [ 368.576970][ T9] new_slab+0x1bd/0x2c0 [ 368.581118][ T9] ___slab_alloc+0xbc6/0x1230 [ 368.585792][ T9] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 368.591771][ T9] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 368.597751][ T9] __kmem_cache_alloc_node+0x1a0/0x260 [ 368.603254][ T9] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 368.609229][ T9] __kmalloc+0xa0/0x240 [ 368.613384][ T9] ieee802_11_parse_elems_full+0xb2/0x1230 [ 368.619222][ T9] ? trace_raw_output_contention_end+0xd0/0xd0 [ 368.625386][ T9] ? mark_lock+0x94/0x320 [ 368.631125][ T9] ? trace_contention_end+0x5f/0x170 [ 368.636475][ T9] ? __mutex_lock+0x19e/0xaf0 [ 368.641187][ T9] ? __lock_acquire+0x13c0/0x7c50 [ 368.646323][ T9] ? ieee80211_ibss_rx_queued_mgmt+0x11b/0x2b10 [ 368.652594][ T9] ? mutex_lock_nested+0x10/0x10 [ 368.657550][ T9] ? ieee80211_queue_delayed_work+0x150/0x150 [ 368.663610][ T9] ? verify_lock_unused+0x140/0x140 [ 368.668827][ T9] ieee80211_ibss_rx_queued_mgmt+0x3c4/0x2b10 [ 368.675009][ T9] ? verify_lock_unused+0x140/0x140 [ 368.680317][ T9] ? rcu_is_watching+0x11/0xa0 [ 368.685114][ T9] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 368.690933][ T9] ? mark_lock+0x94/0x320 [ 368.695265][ T9] ? mark_lock+0x94/0x320 [ 368.699588][ T9] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 368.705561][ T9] ? lock_chain_count+0x20/0x20 [ 368.710411][ T9] ? __rwlock_init+0x140/0x140 [ 368.715177][ T9] ? lockdep_hardirqs_on+0x94/0x140 [ 368.720379][ T9] ? skb_dequeue+0x10a/0x140 [ 368.724971][ T9] ieee80211_iface_work+0x726/0xc80 [ 368.730200][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 368.735412][ T9] ? process_one_work+0x7a1/0x1160 [ 368.740527][ T9] process_one_work+0x898/0x1160 [ 368.745472][ T9] ? worker_detach_from_pool+0x240/0x240 [ 368.751104][ T9] ? _raw_spin_lock_irq+0xab/0xe0 [ 368.756132][ T9] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 368.761511][ T9] ? kthread_data+0x4b/0xc0 [ 368.766021][ T9] worker_thread+0xaa2/0x1250 [ 368.770716][ T9] kthread+0x29d/0x330 [ 368.774784][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 368.780070][ T9] ? kthread_blkcg+0xd0/0xd0 [ 368.784754][ T9] ret_from_fork+0x1f/0x30 [ 368.789188][ T9] [ 368.924967][ T4418] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 368.933068][ T4418] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 368.943715][ T4418] node 0: slabs: 2599, objs: 31188, free: 0 [ 368.948216][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 368.949783][ T4418] node 1: slabs: 302, objs: 3624, free: 53 [ 368.957802][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 368.963861][ T4418] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 368.974360][ T4495] node 0: slabs: 2599, objs: 31188, free: 0 [ 368.982353][ T4418] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 368.988415][ T4495] node 1: slabs: 302, objs: 3624, free: 53 [ 368.998967][ T4418] node 0: slabs: 2599, objs: 31188, free: 0 [ 369.011208][ T4418] node 1: slabs: 302, objs: 3624, free: 53 [ 369.037084][ T6234] tcp_bind2_bucket 8KB 8KB [ 369.311744][ T6234] tcp_bind_bucket 8KB 8KB [ 372.421796][ T4417] 895 total pagecache pages [ 372.426367][ T4417] 0 pages in swap cache [ 372.430614][ T4417] Free swap = 100040kB [ 372.434910][ T4417] Total swap = 124996kB [ 372.439168][ T4417] 2097051 pages RAM [ 372.664344][ C0] slab_out_of_memory: 402 callbacks suppressed [ 372.664364][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 372.679055][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 372.689666][ C0] node 0: slabs: 2652, objs: 31824, free: 0 [ 372.695816][ C0] node 1: slabs: 302, objs: 3624, free: 53 [ 373.176625][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 373.184686][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 373.195354][ C0] node 0: slabs: 2659, objs: 31908, free: 0 [ 373.201454][ C0] node 1: slabs: 302, objs: 3624, free: 53 [ 373.207529][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 373.215647][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 373.226197][ C1] node 0: slabs: 2659, objs: 31908, free: 0 [ 373.232339][ C1] node 1: slabs: 302, objs: 3624, free: 53 [ 373.293726][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 373.301803][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 373.312353][ C0] node 0: slabs: 2661, objs: 31932, free: 0 [ 373.318451][ C0] node 1: slabs: 302, objs: 3624, free: 53 [ 373.324555][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 373.332677][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 373.343431][ C0] node 0: slabs: 2661, objs: 31932, free: 0 [ 373.349518][ C0] node 1: slabs: 302, objs: 3624, free: 53 [ 373.355614][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 373.363646][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 373.374248][ C0] node 0: slabs: 2661, objs: 31932, free: 0 [ 373.380357][ C0] node 1: slabs: 302, objs: 3624, free: 53 [ 373.386477][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 373.394686][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 373.405293][ C0] node 0: slabs: 2661, objs: 31932, free: 0 [ 373.411400][ C0] node 1: slabs: 302, objs: 3624, free: 53 [ 373.417604][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 373.425684][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 373.436259][ C0] node 0: slabs: 2661, objs: 31932, free: 0 [ 373.442391][ C0] node 1: slabs: 302, objs: 3624, free: 53 [ 374.411724][ T4417] 0 pages HighMem/MovableOnly [ 374.416471][ T4417] 415114 pages reserved [ 374.420641][ T4417] 0 pages cma reserved [ 375.224477][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 375.232541][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 375.243057][ C1] node 0: slabs: 2677, objs: 32124, free: 0 [ 375.249120][ C1] node 1: slabs: 302, objs: 3624, free: 53 [ 375.441130][ T4416] warn_alloc: 923 callbacks suppressed [ 375.441151][ T4416] kworker/u4:9: page allocation failure: order:0, mode:0x40a20(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 375.628463][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 375.648567][ T4564] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 375.658696][ T4564] node 0: slabs: 680, objs: 10740, free: 0 [ 375.664737][ T4564] node 1: slabs: 191, objs: 2552, free: 50 [ 375.898048][ T4416] ,cpuset=/,mems_allowed=0-1 [ 377.157583][ T4416] CPU: 0 PID: 4416 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 377.165193][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.175273][ T4416] Workqueue: phy7 ieee80211_iface_work [ 377.180760][ T4416] Call Trace: [ 377.184057][ T4416] [ 377.186999][ T4416] dump_stack_lvl+0x168/0x22e [ 377.191701][ T4416] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 377.198149][ T4416] ? show_regs_print_info+0x12/0x12 [ 377.203366][ T4416] ? load_image+0x3b0/0x3b0 [ 377.207892][ T4416] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 377.214333][ T4416] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 377.220858][ T4416] warn_alloc+0x20c/0x300 [ 377.225220][ T4416] ? zone_watermark_ok_safe+0x270/0x270 [ 377.230794][ T4416] ? wakeup_kcompactd+0x8d/0x590 [ 377.235769][ T4416] __alloc_pages_slowpath+0x2162/0x21e0 [ 377.241350][ T4416] ? zone_watermark_fast+0x168/0x240 [ 377.246676][ T4416] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 377.252430][ T4416] ? __next_zones_zonelist+0x99/0x120 [ 377.257845][ T4416] __alloc_pages+0x33c/0x4e0 [ 377.262462][ T4416] ? zone_statistics+0x170/0x170 [ 377.267427][ T4416] ? alloc_pages+0x4d8/0x740 [ 377.272039][ T4416] ? lock_chain_count+0x20/0x20 [ 377.276919][ T4416] alloc_slab_page+0x5d/0x160 [ 377.281622][ T4416] new_slab+0x1bd/0x2c0 [ 377.285794][ T4416] ___slab_alloc+0xbc6/0x1230 [ 377.290491][ T4416] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 377.296509][ T4416] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 377.302513][ T4416] __kmem_cache_alloc_node+0x1a0/0x260 [ 377.307994][ T4416] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 377.313996][ T4416] __kmalloc+0xa0/0x240 [ 377.318174][ T4416] ieee802_11_parse_elems_full+0xb2/0x1230 [ 377.324001][ T4416] ? trace_raw_output_contention_end+0xd0/0xd0 [ 377.330182][ T4416] ? mark_lock+0x94/0x320 [ 377.334628][ T4416] ? trace_contention_end+0x5f/0x170 [ 377.339943][ T4416] ? __mutex_lock+0x19e/0xaf0 [ 377.344644][ T4416] ? __lock_acquire+0x13c0/0x7c50 [ 377.349692][ T4416] ? ieee80211_ibss_rx_queued_mgmt+0x11b/0x2b10 [ 377.355962][ T4416] ? mutex_lock_nested+0x10/0x10 [ 377.360927][ T4416] ? ieee80211_queue_delayed_work+0x150/0x150 [ 377.367021][ T4416] ? verify_lock_unused+0x140/0x140 [ 377.372256][ T4416] ieee80211_ibss_rx_queued_mgmt+0x3c4/0x2b10 [ 377.378542][ T4416] ? verify_lock_unused+0x140/0x140 [ 377.383772][ T4416] ? rcu_is_watching+0x11/0xa0 [ 377.388578][ T4416] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 377.394319][ T4416] ? mark_lock+0x94/0x320 [ 377.398677][ T4416] ? mark_lock+0x94/0x320 [ 377.403040][ T4416] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 377.409058][ T4416] ? lock_chain_count+0x20/0x20 [ 377.413934][ T4416] ? __rwlock_init+0x140/0x140 [ 377.418731][ T4416] ? lockdep_hardirqs_on+0x94/0x140 [ 377.424047][ T4416] ? skb_dequeue+0x10a/0x140 [ 377.428663][ T4416] ieee80211_iface_work+0x726/0xc80 [ 377.433887][ T4416] ? _raw_spin_unlock_irq+0x1f/0x40 [ 377.439117][ T4416] ? process_one_work+0x7a1/0x1160 [ 377.444258][ T4416] process_one_work+0x898/0x1160 [ 377.449231][ T4416] ? worker_detach_from_pool+0x240/0x240 [ 377.454894][ T4416] ? _raw_spin_lock_irq+0xab/0xe0 [ 377.459950][ T4416] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 377.465350][ T4416] ? kthread_data+0x4b/0xc0 [ 377.469884][ T4416] worker_thread+0xaa2/0x1250 [ 377.474617][ T4416] kthread+0x29d/0x330 [ 377.478715][ T4416] ? worker_clr_flags+0x1a0/0x1a0 [ 377.483764][ T4416] ? kthread_blkcg+0xd0/0xd0 [ 377.488379][ T4416] ret_from_fork+0x1f/0x30 [ 377.492840][ T4416] [ 377.516657][ T6234] xfrm_dst_cache 55KB 94KB [ 377.551674][ T6234] xfrm_state 32KB 32KB [ 378.081695][ T4417] slab_out_of_memory: 394 callbacks suppressed [ 378.081713][ T4417] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 378.097107][ T4417] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 378.107323][ T4417] node 0: slabs: 680, objs: 10740, free: 0 [ 378.113361][ T4417] node 1: slabs: 203, objs: 2576, free: 50 [ 378.361763][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 378.369873][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 378.379716][ C1] node 0: slabs: 242, objs: 7744, free: 0 [ 378.385743][ C1] node 1: slabs: 56, objs: 1792, free: 16 [ 378.391842][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 378.399859][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 378.409696][ C1] node 0: slabs: 242, objs: 7744, free: 0 [ 378.415650][ C1] node 1: slabs: 56, objs: 1792, free: 16 [ 378.505380][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 378.513466][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 378.524025][ C1] node 0: slabs: 2702, objs: 32424, free: 0 [ 378.530110][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 378.531680][ T6234] ip_fib_trie 28KB 28KB [ 378.657331][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 378.666394][ T4564] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 378.675346][ T4418] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 378.676493][ T4564] node 0: slabs: 680, objs: 10740, free: 0 [ 378.685598][ T4418] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 378.691563][ T4564] node 1: slabs: 203, objs: 2576, free: 50 [ 378.701822][ T4418] node 0: slabs: 680, objs: 10740, free: 0 [ 378.712279][ T4602] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 378.713804][ T4418] node 1: slabs: 203, objs: 2576, free: 50 [ 378.722716][ T4602] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 378.738890][ T4602] node 0: slabs: 680, objs: 10740, free: 0 [ 378.744951][ T4602] node 1: slabs: 203, objs: 2576, free: 50 [ 378.779597][ T6234] ip_fib_alias 80KB 90KB [ 378.921737][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 378.929860][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 378.940893][ C1] node 0: slabs: 2705, objs: 32460, free: 0 [ 378.947180][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 379.092313][ T6234] ip_dst_cache 67KB 104KB [ 379.098571][ T6234] PING 30KB 30KB [ 379.111275][ T4417] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 379.111279][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 379.111320][ T4417] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 379.120648][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 379.128661][ T4417] node 0: slabs: 680, objs: 10740, free: 0 [ 379.138895][ T4495] node 0: slabs: 2706, objs: 32472, free: 0 [ 379.149509][ T4417] node 1: slabs: 203, objs: 2576, free: 50 [ 379.155443][ T4495] node 1: slabs: 306, objs: 3672, free: 53 [ 379.171728][ T6234] RAW 61KB 61KB [ 379.311695][ T6234] UDP 123KB 123KB [ 380.081435][ T6234] request_sock_TCP 15KB 15KB [ 380.091670][ T6234] TCP 61KB 61KB [ 380.431681][ T6234] hugetlbfs_inode_cache 61KB 61KB [ 380.438172][ T6234] bio-264 23KB 23KB [ 380.440378][ T56] Mem-Info: [ 380.477849][ T6234] ep_head 16KB 16KB [ 380.504848][ T6234] eventpoll_pwq 39KB 39KB [ 380.510999][ T6234] eventpoll_epi 66KB 66KB [ 380.522607][ T56] active_anon:0 inactive_anon:0 isolated_anon:0 [ 380.522607][ T56] active_file:64 inactive_file:63 isolated_file:0 [ 380.522607][ T56] unevictable:768 dirty:48 writeback:0 [ 380.522607][ T56] slab_reclaimable:20845 slab_unreclaimable:92239 [ 380.522607][ T56] mapped:25649 shmem:768 pagetables:632 [ 380.522607][ T56] sec_pagetables:0 bounce:0 [ 380.522607][ T56] kernel_misc_reclaimable:0 [ 380.522607][ T56] free:7665 free_pcp:3791 free_cma:0 [ 380.531689][ T6234] inotify_inode_mark 46KB 46KB [ 382.087972][ T9] Mem-Info: [ 382.091152][ T9] active_anon:0 inactive_anon:0 isolated_anon:0 [ 382.091152][ T9] active_file:0 inactive_file:49 isolated_file:0 [ 382.091152][ T9] unevictable:768 dirty:48 writeback:0 [ 382.091152][ T9] slab_reclaimable:20845 slab_unreclaimable:92330 [ 382.091152][ T9] mapped:25649 shmem:768 pagetables:632 [ 382.091152][ T9] sec_pagetables:0 bounce:0 [ 382.091152][ T9] kernel_misc_reclaimable:0 [ 382.091152][ T9] free:7625 free_pcp:3767 free_cma:0 [ 383.265448][ T4495] slab_out_of_memory: 601 callbacks suppressed [ 383.265468][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 383.280655][ T4495] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 383.287800][ T4580] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 383.290772][ T4495] node 0: slabs: 680, objs: 10740, free: 0 [ 383.299686][ T4580] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 383.305690][ T4495] node 1: slabs: 203, objs: 2576, free: 50 [ 383.315767][ T4580] node 0: slabs: 680, objs: 10740, free: 0 [ 383.327794][ T4580] node 1: slabs: 203, objs: 2576, free: 50 [ 383.333901][ T4418] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 383.342885][ T4418] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 383.353022][ T4418] node 0: slabs: 680, objs: 10740, free: 0 [ 383.359541][ T4418] node 1: slabs: 203, objs: 2576, free: 50 [ 383.481779][ C0] aoe: skb alloc failure [ 383.481783][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 383.486085][ C0] aoe: skb alloc failure [ 383.494068][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 383.498332][ C0] aoe: skb alloc failure [ 383.508099][ C1] node 0: slabs: 242, objs: 7744, free: 0 [ 383.512373][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 383.518239][ C1] node 1: slabs: 56, objs: 1792, free: 16 [ 383.526325][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 383.532473][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 383.543263][ C0] node 0: slabs: 2746, objs: 32952, free: 0 [ 383.551232][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 383.557316][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 383.567141][ C1] node 0: slabs: 242, objs: 7744, free: 0 [ 383.573127][ C0] aoe: skb alloc failure [ 383.573159][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 383.579014][ C1] node 1: slabs: 56, objs: 1792, free: 16 [ 383.583261][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 383.607862][ C0] node 0: slabs: 2746, objs: 32952, free: 0 [ 383.614069][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 383.620063][ C0] aoe: skb alloc failure [ 383.624632][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 383.632658][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 383.643203][ C0] node 0: slabs: 2746, objs: 32952, free: 0 [ 383.649294][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 383.655329][ C0] aoe: skb alloc failure [ 383.659598][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 383.667621][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 383.678172][ C0] node 0: slabs: 2746, objs: 32952, free: 0 [ 383.684311][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 383.690373][ C0] aoe: skb alloc failure [ 383.694683][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 383.702712][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 383.713293][ C0] node 0: slabs: 2746, objs: 32952, free: 0 [ 383.719388][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 383.725413][ C0] aoe: skb alloc failure [ 383.729679][ C0] aoe: skb alloc failure [ 383.733998][ C0] aoe: skb alloc failure [ 383.738267][ C0] aoe: skb alloc failure [ 383.742559][ C0] aoe: skb alloc failure [ 383.746822][ C0] aoe: skb alloc failure [ 383.751084][ C0] aoe: skb alloc failure [ 383.755379][ C0] aoe: skb alloc failure [ 383.759641][ C0] aoe: skb alloc failure [ 383.763936][ C0] aoe: skb alloc failure [ 383.768198][ C0] aoe: skb alloc failure [ 383.772495][ C0] aoe: skb alloc failure [ 383.776756][ C0] aoe: skb alloc failure [ 383.781010][ C0] aoe: skb alloc failure [ 383.785309][ C0] aoe: skb alloc failure [ 383.789570][ C0] aoe: skb alloc failure [ 383.793879][ C0] aoe: skb alloc failure [ 383.798138][ C0] aoe: skb alloc failure [ 383.802440][ C0] aoe: skb alloc failure [ 383.806702][ C0] aoe: skb alloc failure [ 383.810965][ C0] aoe: skb alloc failure [ 383.815266][ C0] aoe: skb alloc failure [ 383.819550][ C0] aoe: skb alloc failure [ 383.823845][ C0] aoe: skb alloc failure [ 383.828117][ C0] aoe: skb alloc failure [ 383.832408][ C0] aoe: skb alloc failure [ 383.836669][ C0] aoe: skb alloc failure [ 383.840930][ C0] aoe: skb alloc failure [ 383.845231][ C0] aoe: skb alloc failure [ 383.849499][ C0] aoe: skb alloc failure [ 383.853789][ C0] aoe: skb alloc failure [ 383.858071][ C0] aoe: skb alloc failure [ 383.862353][ C0] aoe: skb alloc failure [ 383.866641][ C0] aoe: skb alloc failure [ 383.871116][ C0] aoe: skb alloc failure [ 383.875419][ C0] aoe: skb alloc failure [ 383.879679][ C0] aoe: skb alloc failure [ 383.883967][ C0] aoe: skb alloc failure [ 383.888227][ C0] aoe: skb alloc failure [ 383.892515][ C0] aoe: skb alloc failure [ 383.896807][ C0] aoe: skb alloc failure [ 383.901076][ C0] aoe: skb alloc failure [ 383.905368][ C0] aoe: skb alloc failure [ 383.909631][ C0] aoe: skb alloc failure [ 383.913930][ C0] aoe: skb alloc failure [ 383.918194][ C0] aoe: skb alloc failure [ 383.922497][ C0] aoe: skb alloc failure [ 383.926839][ C0] aoe: skb alloc failure [ 383.931104][ C0] aoe: skb alloc failure [ 383.935402][ C0] aoe: skb alloc failure [ 383.939671][ C0] aoe: skb alloc failure [ 383.944012][ C0] aoe: skb alloc failure [ 383.948278][ C0] aoe: skb alloc failure [ 383.952568][ C0] aoe: skb alloc failure [ 383.956860][ C0] aoe: skb alloc failure [ 383.961124][ C0] aoe: skb alloc failure [ 383.965415][ C0] aoe: skb alloc failure [ 383.969686][ C0] aoe: skb alloc failure [ 383.973983][ C0] aoe: skb alloc failure [ 383.978257][ C0] aoe: skb alloc failure [ 383.982557][ C0] aoe: skb alloc failure [ 383.986826][ C0] aoe: skb alloc failure [ 383.991086][ C0] aoe: skb alloc failure [ 383.995387][ C0] aoe: skb alloc failure [ 383.999738][ C0] aoe: skb alloc failure [ 384.004025][ C0] aoe: skb alloc failure [ 384.008293][ C0] aoe: skb alloc failure [ 384.012584][ C0] aoe: skb alloc failure [ 384.016850][ C0] aoe: skb alloc failure [ 384.021120][ C0] aoe: skb alloc failure [ 384.025423][ C0] aoe: skb alloc failure [ 384.029688][ C0] aoe: skb alloc failure [ 384.033994][ C0] aoe: skb alloc failure [ 384.038272][ C0] aoe: skb alloc failure [ 384.042558][ C0] aoe: skb alloc failure [ 384.046815][ C0] aoe: skb alloc failure [ 384.051085][ C0] aoe: skb alloc failure [ 384.055378][ C0] aoe: skb alloc failure [ 384.059725][ C0] aoe: skb alloc failure [ 384.064019][ C0] aoe: skb alloc failure [ 384.068287][ C0] aoe: skb alloc failure [ 384.072724][ C0] aoe: skb alloc failure [ 384.076991][ C0] aoe: skb alloc failure [ 384.081260][ C0] aoe: skb alloc failure [ 384.085561][ C0] aoe: skb alloc failure [ 384.089825][ C0] aoe: skb alloc failure [ 384.094322][ C0] aoe: skb alloc failure [ 384.098629][ C0] aoe: skb alloc failure [ 384.102933][ C0] aoe: skb alloc failure [ 384.107204][ C0] aoe: skb alloc failure [ 384.111465][ C0] aoe: skb alloc failure [ 384.115766][ C0] aoe: skb alloc failure [ 384.120159][ C0] aoe: skb alloc failure [ 384.124468][ C0] aoe: skb alloc failure [ 384.128752][ C0] aoe: skb alloc failure [ 384.133060][ C0] aoe: skb alloc failure [ 384.137333][ C0] aoe: skb alloc failure [ 384.141595][ C0] aoe: skb alloc failure [ 384.145963][ C0] aoe: skb alloc failure [ 384.150231][ C0] aoe: skb alloc failure [ 384.154531][ C0] aoe: skb alloc failure [ 384.158806][ C0] aoe: skb alloc failure [ 384.163093][ C0] aoe: skb alloc failure [ 384.167360][ C0] aoe: skb alloc failure [ 385.669244][ C1] warn_alloc: 1321 callbacks suppressed [ 385.669260][ C1] syz.5.440: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 385.687280][ C1] CPU: 1 PID: 6235 Comm: syz.5.440 Not tainted syzkaller #0 [ 385.694643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.704693][ C1] Call Trace: [ 385.707963][ C1] [ 385.710836][ C1] dump_stack_lvl+0x168/0x22e [ 385.715514][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 385.721928][ C1] ? show_regs_print_info+0x12/0x12 [ 385.727122][ C1] ? load_image+0x3b0/0x3b0 [ 385.731687][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 385.738114][ C1] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 385.744622][ C1] warn_alloc+0x20c/0x300 [ 385.748954][ C1] ? zone_watermark_ok_safe+0x270/0x270 [ 385.754589][ C1] ? wakeup_kcompactd+0x8d/0x590 [ 385.759549][ C1] __alloc_pages_slowpath+0x2162/0x21e0 [ 385.765107][ C1] ? zone_watermark_fast+0x168/0x240 [ 385.770509][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 385.776325][ C1] __alloc_pages+0x33c/0x4e0 [ 385.780928][ C1] ? zone_statistics+0x170/0x170 [ 385.785889][ C1] ? alloc_pages+0x4d8/0x740 [ 385.790475][ C1] ? lock_chain_count+0x20/0x20 [ 385.795373][ C1] alloc_slab_page+0x5d/0x160 [ 385.800135][ C1] ? mempolicy_slab_node+0x3e/0x390 [ 385.805329][ C1] new_slab+0x1bd/0x2c0 [ 385.809486][ C1] ___slab_alloc+0xbc6/0x1230 [ 385.814171][ C1] ? __alloc_skb+0xfc/0x7e0 [ 385.818675][ C1] kmem_cache_alloc_node+0x1e5/0x320 [ 385.824498][ C1] ? __alloc_skb+0xfc/0x7e0 [ 385.829026][ C1] __alloc_skb+0xfc/0x7e0 [ 385.834187][ C1] skb_copy+0x139/0x790 [ 385.838490][ C1] ? __rwlock_init+0x140/0x140 [ 385.843264][ C1] mac80211_hwsim_tx_frame_no_nl+0xd6e/0x1330 [ 385.849340][ C1] ? lock_chain_count+0x20/0x20 [ 385.854196][ C1] ? mac80211_hwsim_tx_frame_nl+0xc80/0xc80 [ 385.860132][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 385.866408][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 385.871879][ C1] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 385.877990][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 385.883465][ C1] mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 385.889145][ C1] __iterate_interfaces+0x243/0x500 [ 385.894429][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 385.900783][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 385.908079][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 385.914349][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 385.921416][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 385.926629][ C1] __hrtimer_run_queues+0x554/0xd60 [ 385.931841][ C1] ? hw_scan_work+0xf30/0xf30 [ 385.936520][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 385.941673][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 385.947864][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 385.953178][ C1] handle_softirqs+0x2a1/0x920 [ 385.957958][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 385.962986][ C1] ? do_softirq+0x200/0x200 [ 385.967755][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 385.972966][ C1] __irq_exit_rcu+0x12f/0x220 [ 385.977656][ C1] ? irq_exit_rcu+0x20/0x20 [ 385.982174][ C1] irq_exit_rcu+0x5/0x20 [ 385.986446][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 385.992176][ C1] [ 385.995127][ C1] [ 385.998075][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 386.004099][ C1] RIP: 0010:lock_acquire+0x20f/0x490 [ 386.009406][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 386.029035][ C1] RSP: 0000:ffffc900032265e0 EFLAGS: 00000206 [ 386.035105][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8c1f8f5be1def200 [ 386.043078][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c1700 RDI: ffffffff8adef760 [ 386.051143][ C1] RBP: ffffc900032266f0 R08: dffffc0000000000 R09: fffffbfff215c451 [ 386.059206][ C1] R10: fffffbfff215c451 R11: 1ffffffff215c450 R12: 0000000000000001 [ 386.067434][ C1] R13: 1ffff92000644cc8 R14: 0000000000000246 R15: dffffc0000000000 [ 386.075426][ C1] ? read_lock_is_recursive+0x10/0x10 [ 386.080919][ C1] ? __lock_acquire+0x12e5/0x7c50 [ 386.085960][ C1] ? mlock_page_drain_local+0x75/0x490 [ 386.091596][ C1] mlock_page_drain_local+0x8d/0x490 [ 386.097258][ C1] ? mlock_page_drain_local+0x75/0x490 [ 386.103526][ C1] shrink_lruvec+0x1bf/0x3c60 [ 386.108213][ C1] ? verify_lock_unused+0x140/0x140 [ 386.113419][ C1] ? verify_lock_unused+0x140/0x140 [ 386.118629][ C1] ? shrink_slab+0x61e/0x720 [ 386.123311][ C1] ? preempt_count_add+0x8d/0x190 [ 386.128336][ C1] ? __up_read+0x27c/0x660 [ 386.132747][ C1] ? mem_cgroup_shrink_node+0x710/0x710 [ 386.138326][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 386.143374][ C1] ? mem_cgroup_calculate_protection+0x4c/0x3f0 [ 386.149626][ C1] ? mem_cgroup_iter+0x37/0x4a0 [ 386.154499][ C1] ? shrink_node+0x680/0x28d0 [ 386.159202][ C1] ? do_try_to_free_pages+0x64b/0x19c0 [ 386.164685][ C1] ? try_to_free_pages+0xeb0/0xeb0 [ 386.169848][ C1] ? try_to_free_pages+0x8e4/0xeb0 [ 386.174969][ C1] ? lru_gen_exit_memcg+0x2a0/0x2a0 [ 386.180401][ C1] ? __cpuset_memory_pressure_bump+0x4cf/0x610 [ 386.186580][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 386.191713][ C1] ? __alloc_pages_slowpath+0xc9d/0x21e0 [ 386.197374][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 386.203297][ C1] ? __alloc_pages+0x33c/0x4e0 [ 386.208091][ C1] ? zone_statistics+0x170/0x170 [ 386.213148][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 386.218497][ C1] ? __rwlock_init+0x140/0x140 [ 386.223370][ C1] ? percpu_ref_put+0x1e/0x230 [ 386.228495][ C1] ? __folio_alloc+0xe/0x30 [ 386.233053][ C1] ? vma_alloc_folio+0x4a3/0x900 [ 386.238529][ C1] ? __swp_swapcount+0xf5/0x120 [ 386.243401][ C1] ? __read_swap_cache_async+0x196/0x960 [ 386.249235][ C1] ? swap_cluster_readahead+0x53d/0x670 [ 386.254903][ C1] ? read_swap_cache_async+0xa0/0xa0 [ 386.260281][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 386.265304][ C1] ? xas_descend+0x3a4/0x490 [ 386.269902][ C1] ? swapin_readahead+0xff/0x930 [ 386.275103][ C1] ? put_swap_device+0x1e/0x230 [ 386.279964][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 386.285010][ C1] ? exit_swap_address_space+0x280/0x280 [ 386.290725][ C1] ? put_swap_device+0x1e/0x230 [ 386.295579][ C1] ? put_swap_device+0x1e/0x230 [ 386.300426][ C1] ? put_swap_device+0x17e/0x230 [ 386.305368][ C1] ? swap_cache_get_folio+0x137/0x5b0 [ 386.310944][ C1] ? do_swap_page+0x321/0x3ab0 [ 386.315764][ C1] ? count_memcg_event_mm+0x8f/0x3b0 [ 386.321089][ C1] ? count_memcg_event_mm+0x358/0x3b0 [ 386.326493][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 386.331539][ C1] ? count_memcg_event_mm+0x8f/0x3b0 [ 386.336895][ C1] ? put_page+0x270/0x270 [ 386.341239][ C1] ? handle_mm_fault+0x1904/0x3e60 [ 386.346368][ C1] ? mt_find+0x145/0x810 [ 386.350742][ C1] ? numa_migrate_prep+0x250/0x250 [ 386.356208][ C1] ? lock_chain_count+0x20/0x20 [ 386.361159][ C1] ? lock_mm_and_find_vma+0xae/0x2f0 [ 386.366649][ C1] ? do_user_addr_fault+0x51f/0xb10 [ 386.371982][ C1] ? exc_page_fault+0x60/0x100 [ 386.377013][ C1] ? asm_exc_page_fault+0x22/0x30 [ 386.382584][ C1] ? _copy_from_user+0x161/0x170 [ 386.387776][ C1] ? copy_user_short_string+0xd/0x40 [ 386.393269][ C1] ? _copy_to_user+0xea/0x130 [ 386.398158][ C1] ? msr_read+0x124/0x1b0 [ 386.402582][ C1] ? msr_device_destroy+0x20/0x20 [ 386.407684][ C1] ? common_file_perm+0x171/0x1c0 [ 386.412704][ C1] ? fsnotify_perm+0x39b/0x550 [ 386.417485][ C1] ? msr_device_destroy+0x20/0x20 [ 386.422629][ C1] ? vfs_read+0x2c0/0x920 [ 386.427102][ C1] ? kernel_read+0x1e0/0x1e0 [ 386.431758][ C1] ? __fget_files+0x28/0x4d0 [ 386.436397][ C1] ? __fget_files+0x44a/0x4d0 [ 386.441127][ C1] ? __fdget_pos+0x1d4/0x360 [ 386.445811][ C1] ? ksys_read+0x71/0x240 [ 386.450150][ C1] ? ksys_read+0x143/0x240 [ 386.454585][ C1] ? vfs_write+0x960/0x960 [ 386.458993][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 386.464199][ C1] ? do_syscall_64+0x4c/0xa0 [ 386.468972][ C1] ? clear_bhb_loop+0x60/0xb0 [ 386.473641][ C1] ? clear_bhb_loop+0x60/0xb0 [ 386.478319][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.484551][ C1] [ 386.487605][ C1] Mem-Info: [ 386.490701][ C1] active_anon:0 inactive_anon:0 isolated_anon:0 [ 386.490701][ C1] active_file:11 inactive_file:55 isolated_file:0 [ 386.490701][ C1] unevictable:768 dirty:48 writeback:0 [ 386.490701][ C1] slab_reclaimable:20845 slab_unreclaimable:92441 [ 386.490701][ C1] mapped:25649 shmem:768 pagetables:632 [ 386.490701][ C1] sec_pagetables:0 bounce:0 [ 386.490701][ C1] kernel_misc_reclaimable:0 [ 386.490701][ C1] free:7541 free_pcp:3742 free_cma:0 [ 386.534932][ C1] Node 0 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11888kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 386.568421][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 386.599274][ C1] Node 0 DMA free:9504kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.626350][ C1] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 386.632279][ C1] Node 0 DMA32 free:36kB boost:78052kB min:112744kB low:121416kB high:130088kB reserved_highatomic:28672KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:112kB unevictable:1536kB writepending:192kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:14524kB local_pcp:8932kB free_cma:0kB [ 386.662345][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 386.667072][ C1] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.694153][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 386.698933][ C1] Node 1 Normal free:20624kB boost:2048kB min:57240kB low:71036kB high:84832kB reserved_highatomic:20480KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:444kB local_pcp:280kB free_cma:0kB [ 386.728552][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 386.733297][ C1] Node 0 DMA: 0*4kB 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 9504kB [ 386.749226][ C1] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 386.760626][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 386.772172][ C1] Node 1 Normal: 30*4kB (UM) 45*8kB (M) 13*16kB (UME) 141*32kB (ME) 7*64kB (UME) 5*128kB (UME) 8*256kB (UM) 8*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 20624kB [ 386.788453][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.798967][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.808301][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 386.817896][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 386.827420][ C1] 895 total pagecache pages [ 386.831938][ C1] 0 pages in swap cache [ 386.836088][ C1] Free swap = 100040kB [ 386.840251][ C1] Total swap = 124996kB [ 386.844472][ C1] 2097051 pages RAM [ 386.848420][ C1] 0 pages HighMem/MovableOnly [ 386.853247][ C1] 415114 pages reserved [ 386.857387][ C1] 0 pages cma reserved [ 388.383932][ T4564] slab_out_of_memory: 403 callbacks suppressed [ 388.383958][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.398230][ T4564] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.408806][ T4564] node 0: slabs: 2781, objs: 33372, free: 0 [ 388.414947][ T4564] node 1: slabs: 306, objs: 3672, free: 53 [ 388.420996][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.429055][ T4564] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.439642][ T4564] node 0: slabs: 2782, objs: 33384, free: 0 [ 388.445782][ T4564] node 1: slabs: 306, objs: 3672, free: 53 [ 388.451842][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.459936][ T4564] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.470512][ T4564] node 0: slabs: 2782, objs: 33384, free: 0 [ 388.476732][ T4564] node 1: slabs: 306, objs: 3672, free: 53 [ 388.601704][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.609746][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.620328][ C1] node 0: slabs: 2782, objs: 33384, free: 0 [ 388.626506][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 388.632580][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.640544][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.651135][ C1] node 0: slabs: 2782, objs: 33384, free: 0 [ 388.657339][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 388.663407][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.671410][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.682033][ C1] node 0: slabs: 2782, objs: 33384, free: 0 [ 388.688117][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 388.789353][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.792380][ T4354] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.797437][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.805443][ T4354] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.816026][ C0] node 0: slabs: 2783, objs: 33396, free: 0 [ 388.816047][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 388.816130][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.826610][ T4354] node 0: slabs: 2783, objs: 33396, free: 0 [ 388.832756][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.832774][ C0] node 0: slabs: 2783, objs: 33396, free: 0 [ 388.832788][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 388.838847][ T4354] node 1: slabs: 306, objs: 3672, free: 53 [ 388.847978][ T4602] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 388.891091][ T4602] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 388.901769][ T4602] node 0: slabs: 2785, objs: 33420, free: 0 [ 388.907944][ T4602] node 1: slabs: 306, objs: 3672, free: 53 [ 389.001772][ T6234] sgpool-128 29KB 29KB [ 389.007951][ T6234] sgpool-64 63KB 63KB [ 391.611722][ T6234] sgpool-32 63KB 63KB [ 391.617881][ T6234] sgpool-16 15KB 15KB [ 391.833801][ T9] Node 0 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11888kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 393.721823][ C1] slab_out_of_memory: 146 callbacks suppressed [ 393.721844][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 393.736248][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 393.746320][ C1] node 0: slabs: 242, objs: 7744, free: 0 [ 393.752243][ C1] node 1: slabs: 58, objs: 1856, free: 16 [ 393.896245][ T4417] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 393.905314][ T4417] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 393.915450][ T4417] node 0: slabs: 680, objs: 10740, free: 0 [ 393.921474][ T4417] node 1: slabs: 243, objs: 2656, free: 50 [ 393.963544][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 393.971748][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 393.982560][ C1] node 0: slabs: 2819, objs: 33828, free: 0 [ 393.988636][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 395.421685][ T56] Node 0 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11888kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 395.434836][ T4418] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 395.461574][ T4418] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 395.472221][ T4418] node 0: slabs: 2832, objs: 33984, free: 0 [ 395.478399][ T4418] node 1: slabs: 306, objs: 3672, free: 53 [ 395.484451][ T4418] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 395.492473][ T4418] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 395.503027][ T4418] node 0: slabs: 2832, objs: 33984, free: 0 [ 395.509111][ T4418] node 1: slabs: 306, objs: 3672, free: 53 [ 395.515167][ T4418] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 395.523291][ T4418] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 395.533854][ T4418] node 0: slabs: 2832, objs: 33984, free: 0 [ 395.540034][ T4418] node 1: slabs: 306, objs: 3672, free: 53 [ 396.043684][ T4580] warn_alloc: 258 callbacks suppressed [ 396.043714][ T4580] kworker/u4:17: page allocation failure: order:0, mode:0x40a20(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 396.114120][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 396.133490][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 396.144410][ C1] node 0: slabs: 2837, objs: 34044, free: 0 [ 396.150587][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 397.425033][ T6234] sgpool-8 18KB 18KB [ 397.431175][ T6234] bio_crypt_ctx 7KB 7KB [ 397.437443][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 397.447095][ T4495] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 397.457354][ T4495] node 0: slabs: 680, objs: 10740, free: 0 [ 397.463472][ T4495] node 1: slabs: 243, objs: 2656, free: 50 [ 397.526873][ T4580] ,cpuset=/,mems_allowed=0-1 [ 398.162239][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 398.170433][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 398.181001][ C1] node 0: slabs: 2854, objs: 34248, free: 0 [ 398.187125][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 399.441673][ T9] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 399.451685][ T4580] CPU: 0 PID: 4580 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 399.480077][ T4580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.490246][ T4580] Workqueue: phy14 ieee80211_iface_work [ 399.495823][ T4580] Call Trace: [ 399.499120][ T4580] [ 399.502197][ T4580] dump_stack_lvl+0x168/0x22e [ 399.507264][ T4580] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 399.513739][ T4580] ? show_regs_print_info+0x12/0x12 [ 399.518956][ T4580] ? load_image+0x3b0/0x3b0 [ 399.523486][ T4580] ? __rcu_read_unlock+0x78/0xd0 [ 399.528695][ T4580] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 399.535223][ T4580] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 399.541933][ T4580] warn_alloc+0x20c/0x300 [ 399.546289][ T4580] ? zone_watermark_ok_safe+0x270/0x270 [ 399.551868][ T4580] ? wakeup_kcompactd+0x8d/0x590 [ 399.556848][ T4580] __alloc_pages_slowpath+0x2162/0x21e0 [ 399.562532][ T4580] ? zone_watermark_fast+0x168/0x240 [ 399.567868][ T4580] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 399.573796][ T4580] ? __next_zones_zonelist+0x99/0x120 [ 399.579217][ T4580] __alloc_pages+0x33c/0x4e0 [ 399.583860][ T4580] ? zone_statistics+0x170/0x170 [ 399.588840][ T4580] ? alloc_pages+0x4d8/0x740 [ 399.593540][ T4580] ? lock_chain_count+0x20/0x20 [ 399.598431][ T4580] alloc_slab_page+0x5d/0x160 [ 399.603139][ T4580] new_slab+0x1bd/0x2c0 [ 399.607324][ T4580] ___slab_alloc+0xbc6/0x1230 [ 399.612026][ T4580] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 399.618031][ T4580] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 399.624034][ T4580] __kmem_cache_alloc_node+0x1a0/0x260 [ 399.629613][ T4580] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 399.635872][ T4580] __kmalloc+0xa0/0x240 [ 399.640054][ T4580] ieee802_11_parse_elems_full+0xb2/0x1230 [ 399.645885][ T4580] ? trace_raw_output_contention_end+0xd0/0xd0 [ 399.652055][ T4580] ? mark_lock+0x94/0x320 [ 399.656405][ T4580] ? trace_contention_end+0x5f/0x170 [ 399.661705][ T4580] ? __mutex_lock+0x19e/0xaf0 [ 399.666416][ T4580] ? __lock_acquire+0x13c0/0x7c50 [ 399.671479][ T4580] ? ieee80211_ibss_rx_queued_mgmt+0x11b/0x2b10 [ 399.677751][ T4580] ? mutex_lock_nested+0x10/0x10 [ 399.682718][ T4580] ? ieee80211_queue_delayed_work+0x150/0x150 [ 399.688821][ T4580] ? verify_lock_unused+0x140/0x140 [ 399.694059][ T4580] ieee80211_ibss_rx_queued_mgmt+0x3c4/0x2b10 [ 399.700157][ T4580] ? verify_lock_unused+0x140/0x140 [ 399.705558][ T4580] ? ret_from_fork+0x1f/0x30 [ 399.710267][ T4580] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 399.716006][ T4580] ? mark_lock+0x94/0x320 [ 399.720360][ T4580] ? mark_lock+0x94/0x320 [ 399.724706][ T4580] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 399.730722][ T4580] ? lock_chain_count+0x20/0x20 [ 399.735774][ T4580] ? __rwlock_init+0x140/0x140 [ 399.740563][ T4580] ? lockdep_hardirqs_on+0x94/0x140 [ 399.745795][ T4580] ? skb_dequeue+0x10a/0x140 [ 399.750417][ T4580] ieee80211_iface_work+0x726/0xc80 [ 399.755642][ T4580] ? _raw_spin_unlock_irq+0x1f/0x40 [ 399.760868][ T4580] ? process_one_work+0x7a1/0x1160 [ 399.765999][ T4580] process_one_work+0x898/0x1160 [ 399.770972][ T4580] ? worker_detach_from_pool+0x240/0x240 [ 399.776634][ T4580] ? _raw_spin_lock_irq+0xab/0xe0 [ 399.781700][ T4580] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 399.787119][ T4580] ? kthread_data+0x4b/0xc0 [ 399.791702][ T4580] worker_thread+0xaa2/0x1250 [ 399.796472][ T4580] ? __kthread_parkme+0x162/0x1c0 [ 399.801551][ T4580] kthread+0x29d/0x330 [ 399.805652][ T4580] ? worker_clr_flags+0x1a0/0x1a0 [ 399.810751][ T4580] ? kthread_blkcg+0xd0/0xd0 [ 399.815376][ T4580] ret_from_fork+0x1f/0x30 [ 399.819878][ T4580] [ 400.312327][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 400.320364][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 400.330935][ C1] node 0: slabs: 2871, objs: 34452, free: 0 [ 400.337305][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 401.080072][ T4354] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 401.089535][ T4354] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 401.091869][ T4417] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 401.100636][ T4354] node 0: slabs: 2878, objs: 34536, free: 0 [ 401.110160][ T4417] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 401.116711][ T4354] node 1: slabs: 306, objs: 3672, free: 53 [ 401.128043][ T4417] node 0: slabs: 680, objs: 10740, free: 0 [ 401.141196][ T4417] node 1: slabs: 243, objs: 2656, free: 50 [ 401.265518][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 401.274015][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 401.284983][ C1] node 0: slabs: 2880, objs: 34560, free: 0 [ 401.291091][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 401.297666][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 401.306697][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 401.316883][ C0] node 0: slabs: 680, objs: 10740, free: 0 [ 401.322976][ C0] node 1: slabs: 243, objs: 2656, free: 50 [ 401.449741][ T4617] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 401.457966][ T4617] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 401.468567][ T4617] node 0: slabs: 2883, objs: 34596, free: 0 [ 401.474695][ T4617] node 1: slabs: 306, objs: 3672, free: 53 [ 401.480827][ T4617] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 401.489066][ T4617] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 401.499668][ T4617] node 0: slabs: 2883, objs: 34596, free: 0 [ 401.505838][ T4617] node 1: slabs: 306, objs: 3672, free: 53 [ 401.511997][ T4617] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 401.520225][ T4617] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 401.531011][ T4617] node 0: slabs: 2883, objs: 34596, free: 0 [ 401.537325][ T4617] node 1: slabs: 306, objs: 3672, free: 53 [ 401.647883][ T6234] request_queue_srcu 62KB 62KB [ 401.652085][ T4347] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 401.654523][ T4705] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 401.662224][ T4347] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 401.662248][ T4347] node 0: slabs: 2883, objs: 34596, free: 0 [ 401.662260][ T4347] node 1: slabs: 306, objs: 3672, free: 53 [ 401.670653][ T4705] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 401.670677][ T4705] node 0: slabs: 2883, objs: 34596, free: 0 [ 401.670691][ T4705] node 1: slabs: 306, objs: 3672, free: 53 [ 403.441866][ T6234] request_queue 277KB 403KB [ 403.738976][ T56] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 404.121677][ T6234] blkdev_ioc 3KB 3KB [ 405.411673][ T6234] bio-200 25KB 37KB [ 405.417823][ T6234] biovec-max 786KB 833KB [ 405.421754][ T4492] slab_out_of_memory: 228 callbacks suppressed [ 405.421769][ T4492] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 405.424029][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 405.430038][ T4492] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 405.430060][ T4492] node 0: slabs: 680, objs: 10740, free: 0 [ 405.430073][ T4492] node 1: slabs: 243, objs: 2656, free: 50 [ 405.470199][ T4495] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 405.480338][ T4495] node 0: slabs: 680, objs: 10740, free: 0 [ 405.486382][ T4495] node 1: slabs: 243, objs: 2656, free: 50 [ 405.496172][ T9] Node 0 DMA free:7180kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.061682][ T6234] biovec-64 110KB 173KB [ 406.073215][ T6234] biovec-16 15KB 15KB [ 406.080055][ T6234] bio_integrity_payload 3KB 3KB [ 406.088169][ T56] Node 0 DMA free:7092kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.135942][ T4417] warn_alloc: 243 callbacks suppressed [ 406.135963][ T4417] kworker/u4:10: page allocation failure: order:0, mode:0x40a20(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 406.558724][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 406.578271][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 406.588900][ C1] node 0: slabs: 2925, objs: 35100, free: 0 [ 406.595362][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 408.412212][ T11] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 408.421182][ T11] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 408.431760][ T11] node 0: slabs: 2941, objs: 35292, free: 0 [ 408.437864][ T11] node 1: slabs: 306, objs: 3672, free: 53 [ 408.606727][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 408.614819][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 408.626009][ C1] node 0: slabs: 2942, objs: 35304, free: 0 [ 408.632390][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 409.081761][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 409.091728][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 409.103061][ C1] node 0: slabs: 2946, objs: 35352, free: 0 [ 409.109195][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 409.115767][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 409.123816][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 409.134671][ C1] node 0: slabs: 2946, objs: 35352, free: 0 [ 409.140764][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 409.319052][ T9] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 409.429426][ T6234] khugepaged_mm_slot 7KB 7KB [ 409.441674][ T4417] ,cpuset=/,mems_allowed=0-1 [ 409.610491][ T4417] CPU: 0 PID: 4417 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 409.618539][ T4417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.629308][ T4417] Workqueue: phy9 ieee80211_iface_work [ 409.634820][ T4417] Call Trace: [ 409.638121][ T4417] [ 409.641070][ T4417] dump_stack_lvl+0x168/0x22e [ 409.645779][ T4417] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 409.653393][ T4417] ? show_regs_print_info+0x12/0x12 [ 409.658716][ T4417] ? load_image+0x3b0/0x3b0 [ 409.663265][ T4417] ? __rcu_read_unlock+0x78/0xd0 [ 409.668248][ T4417] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 409.674727][ T4417] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 409.681546][ T4417] warn_alloc+0x20c/0x300 [ 409.686289][ T4417] ? zone_watermark_ok_safe+0x270/0x270 [ 409.692049][ T4417] ? wakeup_kcompactd+0x8d/0x590 [ 409.697029][ T4417] __alloc_pages_slowpath+0x2162/0x21e0 [ 409.702825][ T4417] ? zone_watermark_fast+0x168/0x240 [ 409.708419][ T4417] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 409.714529][ T4417] ? __next_zones_zonelist+0x99/0x120 [ 409.720093][ T4417] __alloc_pages+0x33c/0x4e0 [ 409.724836][ T4417] ? zone_statistics+0x170/0x170 [ 409.729816][ T4417] ? alloc_pages+0x4d8/0x740 [ 409.734460][ T4417] ? lock_chain_count+0x20/0x20 [ 409.739665][ T4417] alloc_slab_page+0x5d/0x160 [ 409.744617][ T4417] new_slab+0x1bd/0x2c0 [ 409.748826][ T4417] ___slab_alloc+0xbc6/0x1230 [ 409.753638][ T4417] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 409.759716][ T4417] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 409.765848][ T4417] __kmem_cache_alloc_node+0x1a0/0x260 [ 409.771347][ T4417] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 409.777619][ T4417] __kmalloc+0xa0/0x240 [ 409.781809][ T4417] ieee802_11_parse_elems_full+0xb2/0x1230 [ 409.787647][ T4417] ? trace_raw_output_contention_end+0xd0/0xd0 [ 409.793863][ T4417] ? mark_lock+0x94/0x320 [ 409.798228][ T4417] ? trace_contention_end+0x5f/0x170 [ 409.803814][ T4417] ? __mutex_lock+0x19e/0xaf0 [ 409.808634][ T4417] ? __lock_acquire+0x13c0/0x7c50 [ 409.813702][ T4417] ? ieee80211_ibss_rx_queued_mgmt+0x11b/0x2b10 [ 409.820280][ T4417] ? mutex_lock_nested+0x10/0x10 [ 409.825297][ T4417] ? ieee80211_queue_delayed_work+0x150/0x150 [ 409.831849][ T4417] ? verify_lock_unused+0x140/0x140 [ 409.837283][ T4417] ieee80211_ibss_rx_queued_mgmt+0x3c4/0x2b10 [ 409.843425][ T4417] ? verify_lock_unused+0x140/0x140 [ 409.848656][ T4417] ? ret_from_fork+0x1f/0x30 [ 409.853303][ T4417] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 409.859138][ T4417] ? mark_lock+0x94/0x320 [ 409.863552][ T4417] ? mark_lock+0x94/0x320 [ 409.867932][ T4417] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 409.874033][ T4417] ? lock_chain_count+0x20/0x20 [ 409.878940][ T4417] ? __rwlock_init+0x140/0x140 [ 409.883938][ T4417] ? lockdep_hardirqs_on+0x94/0x140 [ 409.889447][ T4417] ? skb_dequeue+0x10a/0x140 [ 409.894078][ T4417] ieee80211_iface_work+0x726/0xc80 [ 409.899743][ T4417] ? _raw_spin_unlock_irq+0x1f/0x40 [ 409.905064][ T4417] ? process_one_work+0x7a1/0x1160 [ 409.910194][ T4417] process_one_work+0x898/0x1160 [ 409.915621][ T4417] ? worker_detach_from_pool+0x240/0x240 [ 409.921646][ T4417] ? _raw_spin_lock_irq+0xab/0xe0 [ 409.926885][ T4417] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 409.932367][ T4417] ? kthread_data+0x4b/0xc0 [ 409.937004][ T4417] worker_thread+0xaa2/0x1250 [ 409.941727][ T4417] ? __kthread_parkme+0x162/0x1c0 [ 409.946913][ T4417] kthread+0x29d/0x330 [ 409.951129][ T4417] ? worker_clr_flags+0x1a0/0x1a0 [ 409.956190][ T4417] ? kthread_blkcg+0xd0/0xd0 [ 409.960834][ T4417] ret_from_fork+0x1f/0x30 [ 409.965304][ T4417] [ 410.431739][ T9] Node 0 DMA32 free:0kB boost:78052kB min:112744kB low:121416kB high:130088kB reserved_highatomic:28672KB active_anon:0kB inactive_anon:0kB active_file:300kB inactive_file:92kB unevictable:1536kB writepending:192kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:8332kB free_cma:0kB [ 410.437514][ T4347] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 410.464150][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 410.472064][ T4347] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 410.480025][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 410.490647][ T4347] node 0: slabs: 2959, objs: 35508, free: 0 [ 410.501266][ C0] node 0: slabs: 2959, objs: 35508, free: 0 [ 410.508152][ T4347] node 1: slabs: 306, objs: 3672, free: 53 [ 410.514366][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 412.702720][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 412.710838][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 412.721558][ C1] node 0: slabs: 2977, objs: 35724, free: 0 [ 412.727724][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 413.446257][ T4492] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 413.454533][ T4492] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 413.465225][ T4492] node 0: slabs: 2984, objs: 35808, free: 0 [ 413.471520][ T4492] node 1: slabs: 306, objs: 3672, free: 53 [ 413.477603][ T4492] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 413.485678][ T4492] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 413.496344][ T4492] node 0: slabs: 2984, objs: 35808, free: 0 [ 413.502502][ T4492] node 1: slabs: 306, objs: 3672, free: 53 [ 413.508530][ T4492] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 413.516660][ T4492] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 413.519383][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 413.527197][ T4492] node 0: slabs: 2984, objs: 35808, free: 0 [ 413.527213][ T4492] node 1: slabs: 306, objs: 3672, free: 53 [ 413.527245][ T4492] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 413.527258][ T4492] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 413.527272][ T4492] node 0: slabs: 2984, objs: 35808, free: 0 [ 413.527284][ T4492] node 1: slabs: 306, objs: 3672, free: 53 [ 413.527421][ T4469] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 413.527435][ T4469] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 413.527452][ T4469] node 0: slabs: 680, objs: 10740, free: 0 [ 413.527465][ T4469] node 1: slabs: 243, objs: 2656, free: 50 [ 413.527556][ T4469] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 413.527571][ T4469] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 413.527587][ T4469] node 0: slabs: 680, objs: 10740, free: 0 [ 413.527600][ T4469] node 1: slabs: 243, objs: 2656, free: 50 [ 413.561223][ T6234] uid_cache 7KB 7KB [ 413.567615][ T4564] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 413.575808][ T56] lowmem_reserve[]: [ 413.579670][ T4564] node 0: slabs: 2985, objs: 35820, free: 0 [ 413.611773][ T6234] dmaengine-unmap-256 30KB 30KB [ 413.620440][ T4564] node 1: slabs: 306, objs: 3672, free: 53 [ 413.630577][ T56] 0 [ 413.701664][ T9] lowmem_reserve[]: 0 0 1 1 1 [ 413.969146][ T9] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.231678][ T6234] dmaengine-unmap-128 15KB 15KB [ 414.851686][ T6234] dmaengine-unmap-16 4KB 4KB [ 414.864323][ T6234] dmaengine-unmap-2 4KB 4KB [ 414.870584][ T6234] QIPCRTR 31KB 31KB [ 415.570237][ C1] slab_out_of_memory: 122 callbacks suppressed [ 415.570252][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 415.590021][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 415.601987][ C1] node 0: slabs: 3004, objs: 36048, free: 0 [ 415.608095][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 415.681772][ T4617] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 415.689842][ T4617] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 415.701284][ T4617] node 0: slabs: 3005, objs: 36060, free: 0 [ 415.707763][ T4617] node 1: slabs: 306, objs: 3672, free: 53 [ 416.901454][ C1] warn_alloc: 139 callbacks suppressed [ 416.901469][ C1] syz.5.440: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 416.919725][ C1] CPU: 1 PID: 6235 Comm: syz.5.440 Not tainted syzkaller #0 [ 416.927482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.938020][ C1] Call Trace: [ 416.941538][ C1] [ 416.944575][ C1] dump_stack_lvl+0x168/0x22e [ 416.949253][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 416.955926][ C1] ? show_regs_print_info+0x12/0x12 [ 416.961117][ C1] ? load_image+0x3b0/0x3b0 [ 416.965674][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 416.972725][ C1] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 416.979406][ C1] warn_alloc+0x20c/0x300 [ 416.983991][ C1] ? zone_watermark_ok_safe+0x270/0x270 [ 416.989905][ C1] ? wakeup_kcompactd+0x8d/0x590 [ 416.994924][ C1] __alloc_pages_slowpath+0x2162/0x21e0 [ 417.000578][ C1] ? zone_watermark_fast+0x168/0x240 [ 417.006086][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 417.012094][ C1] __alloc_pages+0x33c/0x4e0 [ 417.017195][ C1] ? zone_statistics+0x170/0x170 [ 417.022235][ C1] ? alloc_pages+0x4d8/0x740 [ 417.026860][ C1] ? lock_chain_count+0x20/0x20 [ 417.031733][ C1] alloc_slab_page+0x5d/0x160 [ 417.036501][ C1] ? mempolicy_slab_node+0x3e/0x390 [ 417.042076][ C1] new_slab+0x1bd/0x2c0 [ 417.046265][ C1] ___slab_alloc+0xbc6/0x1230 [ 417.051556][ C1] ? __alloc_skb+0xfc/0x7e0 [ 417.056240][ C1] kmem_cache_alloc_node+0x1e5/0x320 [ 417.061713][ C1] ? __alloc_skb+0xfc/0x7e0 [ 417.066540][ C1] __alloc_skb+0xfc/0x7e0 [ 417.071170][ C1] skb_copy+0x139/0x790 [ 417.075563][ C1] ? __rwlock_init+0x140/0x140 [ 417.080369][ C1] mac80211_hwsim_tx_frame_no_nl+0xd6e/0x1330 [ 417.086492][ C1] ? lock_chain_count+0x20/0x20 [ 417.091499][ C1] ? mac80211_hwsim_tx_frame_nl+0xc80/0xc80 [ 417.097402][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 417.104446][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 417.109849][ C1] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 417.116024][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 417.121773][ C1] mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 417.128099][ C1] __iterate_interfaces+0x243/0x500 [ 417.134504][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 417.141738][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 417.149430][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 417.156249][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 417.163380][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 417.168783][ C1] __hrtimer_run_queues+0x554/0xd60 [ 417.174053][ C1] ? hw_scan_work+0xf30/0xf30 [ 417.178763][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 417.184002][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 417.190345][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 417.195503][ C1] handle_softirqs+0x2a1/0x920 [ 417.200325][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 417.205505][ C1] ? do_softirq+0x200/0x200 [ 417.210062][ C1] __irq_exit_rcu+0x12f/0x220 [ 417.214884][ C1] ? irq_exit_rcu+0x20/0x20 [ 417.219580][ C1] irq_exit_rcu+0x5/0x20 [ 417.224358][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 417.230716][ C1] [ 417.233890][ C1] [ 417.237346][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 417.244451][ C1] RIP: 0010:memset_erms+0xb/0x10 [ 417.249732][ C1] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 417.272974][ C1] RSP: 0000:ffffc90003226938 EFLAGS: 00000202 [ 417.280210][ C1] RAX: 0000000000000000 RBX: ffffc90003226a00 RCX: 0000000000000000 [ 417.290070][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90003226a18 [ 417.298943][ C1] RBP: ffffc90003226a98 R08: dffffc0000000000 R09: ffffc90003226a08 [ 417.308073][ C1] R10: fffff52000644d43 R11: 1ffff92000644d41 R12: ffffffff8cdae860 [ 417.316258][ C1] R13: 0000000000000000 R14: ffffc90003226a08 R15: ffffffff8cdae880 [ 417.324772][ C1] shrink_slab+0x195/0x720 [ 417.329662][ C1] ? trace_raw_output_mm_vmscan_throttled+0x1f0/0x1f0 [ 417.336927][ C1] ? mem_cgroup_iter+0x36c/0x4a0 [ 417.342360][ C1] ? mem_cgroup_iter+0x37/0x4a0 [ 417.347618][ C1] shrink_node+0x6e4/0x28d0 [ 417.354169][ C1] do_try_to_free_pages+0x64b/0x19c0 [ 417.360229][ C1] ? try_to_free_pages+0xeb0/0xeb0 [ 417.366299][ C1] try_to_free_pages+0x8e4/0xeb0 [ 417.371741][ C1] ? lru_gen_exit_memcg+0x2a0/0x2a0 [ 417.377449][ C1] ? __cpuset_memory_pressure_bump+0x4cf/0x610 [ 417.384598][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 417.390031][ C1] __alloc_pages_slowpath+0xc9d/0x21e0 [ 417.395969][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 417.401802][ C1] __alloc_pages+0x33c/0x4e0 [ 417.406431][ C1] ? zone_statistics+0x170/0x170 [ 417.411496][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 417.416542][ C1] ? __rwlock_init+0x140/0x140 [ 417.421433][ C1] ? percpu_ref_put+0x1e/0x230 [ 417.426206][ C1] __folio_alloc+0xe/0x30 [ 417.430535][ C1] vma_alloc_folio+0x4a3/0x900 [ 417.435306][ C1] ? __swp_swapcount+0xf5/0x120 [ 417.440278][ C1] __read_swap_cache_async+0x196/0x960 [ 417.445751][ C1] swap_cluster_readahead+0x53d/0x670 [ 417.451138][ C1] ? read_swap_cache_async+0xa0/0xa0 [ 417.456430][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 417.461447][ C1] ? xas_descend+0x3a4/0x490 [ 417.466037][ C1] swapin_readahead+0xff/0x930 [ 417.470932][ C1] ? put_swap_device+0x1e/0x230 [ 417.475846][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 417.480897][ C1] ? exit_swap_address_space+0x280/0x280 [ 417.486577][ C1] ? put_swap_device+0x1e/0x230 [ 417.491428][ C1] ? put_swap_device+0x1e/0x230 [ 417.496378][ C1] ? put_swap_device+0x17e/0x230 [ 417.501321][ C1] ? swap_cache_get_folio+0x137/0x5b0 [ 417.506731][ C1] do_swap_page+0x321/0x3ab0 [ 417.511328][ C1] ? count_memcg_event_mm+0x8f/0x3b0 [ 417.516669][ C1] ? count_memcg_event_mm+0x358/0x3b0 [ 417.522683][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 417.528254][ C1] ? count_memcg_event_mm+0x8f/0x3b0 [ 417.533673][ C1] ? put_page+0x270/0x270 [ 417.538324][ C1] handle_mm_fault+0x1904/0x3e60 [ 417.543692][ C1] ? mt_find+0x145/0x810 [ 417.548465][ C1] ? numa_migrate_prep+0x250/0x250 [ 417.553607][ C1] ? lock_chain_count+0x20/0x20 [ 417.559343][ C1] ? lock_mm_and_find_vma+0xae/0x2f0 [ 417.565121][ C1] do_user_addr_fault+0x51f/0xb10 [ 417.570324][ C1] exc_page_fault+0x60/0x100 [ 417.574984][ C1] asm_exc_page_fault+0x22/0x30 [ 417.579938][ C1] RIP: 0010:copy_user_short_string+0xd/0x40 [ 417.585845][ C1] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 417.605622][ C1] RSP: 0000:ffffc90003227c08 EFLAGS: 00050202 [ 417.611686][ C1] RAX: ffffffff84072a01 RBX: 0000000000000008 RCX: 0000000000000001 [ 417.619751][ C1] RDX: 0000000000000000 RSI: ffffc90003227c80 RDI: 00002000000217d8 [ 417.627899][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000644f91 [ 417.635869][ C1] R10: fffff52000644f91 R11: 1ffff92000644f90 R12: 00007fffffffeff8 [ 417.644017][ C1] R13: ffffc90003227c80 R14: 00002000000217d8 R15: ffffc90003227c80 [ 417.652254][ C1] ? _copy_from_user+0x161/0x170 [ 417.657226][ C1] _copy_to_user+0xea/0x130 [ 417.661736][ C1] msr_read+0x124/0x1b0 [ 417.665895][ C1] ? msr_device_destroy+0x20/0x20 [ 417.670943][ C1] ? common_file_perm+0x171/0x1c0 [ 417.676009][ C1] ? fsnotify_perm+0x39b/0x550 [ 417.680799][ C1] ? msr_device_destroy+0x20/0x20 [ 417.685880][ C1] vfs_read+0x2c0/0x920 [ 417.690093][ C1] ? kernel_read+0x1e0/0x1e0 [ 417.694694][ C1] ? __fget_files+0x28/0x4d0 [ 417.699371][ C1] ? __fget_files+0x44a/0x4d0 [ 417.704200][ C1] ? __fdget_pos+0x1d4/0x360 [ 417.708791][ C1] ? ksys_read+0x71/0x240 [ 417.713128][ C1] ksys_read+0x143/0x240 [ 417.717371][ C1] ? vfs_write+0x960/0x960 [ 417.721784][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 417.727168][ C1] do_syscall_64+0x4c/0xa0 [ 417.731578][ C1] ? clear_bhb_loop+0x60/0xb0 [ 417.736280][ C1] ? clear_bhb_loop+0x60/0xb0 [ 417.741341][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.747280][ C1] RIP: 0033:0x7fe95e18f749 [ 417.752017][ C1] Code: Unable to access opcode bytes at 0x7fe95e18f71f. [ 417.759178][ C1] RSP: 002b:00007fe95f0bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.767690][ C1] RAX: ffffffffffffffda RBX: 00007fe95e3e5fa0 RCX: 00007fe95e18f749 [ 417.775660][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000005 [ 417.783743][ C1] RBP: 00007fe95e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.791936][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.800122][ C1] R13: 00007fe95e3e6038 R14: 00007fe95e3e5fa0 R15: 00007ffe9cbb9728 [ 417.808301][ C1] [ 417.811500][ C1] Mem-Info: [ 417.815232][ C1] active_anon:0 inactive_anon:0 isolated_anon:0 [ 417.815232][ C1] active_file:78 inactive_file:24 isolated_file:0 [ 417.815232][ C1] unevictable:768 dirty:48 writeback:0 [ 417.815232][ C1] slab_reclaimable:20845 slab_unreclaimable:92771 [ 417.815232][ C1] mapped:25649 shmem:768 pagetables:632 [ 417.815232][ C1] sec_pagetables:0 bounce:0 [ 417.815232][ C1] kernel_misc_reclaimable:0 [ 417.815232][ C1] free:6590 free_pcp:4363 free_cma:0 [ 417.862890][ C1] Node 0 active_anon:0kB inactive_anon:0kB active_file:312kB inactive_file:60kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11856kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 417.897143][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 417.931842][ C1] Node 0 DMA free:5708kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.959822][ C1] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 417.965845][ C1] Node 0 DMA32 free:0kB boost:78052kB min:112744kB low:121416kB high:130088kB reserved_highatomic:28672KB active_anon:0kB inactive_anon:0kB active_file:312kB inactive_file:52kB unevictable:1536kB writepending:192kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:17204kB local_pcp:8916kB free_cma:0kB [ 417.998753][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 418.003884][ C1] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.033376][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 418.039413][ C1] Node 1 Normal free:20652kB boost:2048kB min:57240kB low:71036kB high:84832kB reserved_highatomic:20480KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:36kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 418.075431][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 418.080252][ C1] Node 0 DMA: 0*4kB 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 5704kB [ 418.096487][ C1] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.109928][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.122106][ C1] Node 1 Normal: 29*4kB (UM) 45*8kB (UM) 13*16kB (UME) 142*32kB (UME) 7*64kB (UME) 5*128kB (UME) 8*256kB (UM) 8*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 20652kB [ 418.139521][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.149387][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.159354][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.170474][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.180375][ C1] 895 total pagecache pages [ 418.184994][ C1] 0 pages in swap cache [ 418.189592][ C1] Free swap = 100040kB [ 418.193808][ C1] Total swap = 124996kB [ 418.198060][ C1] 2097051 pages RAM [ 418.202025][ C1] 0 pages HighMem/MovableOnly [ 418.206830][ C1] 415114 pages reserved [ 418.211012][ C1] 0 pages cma reserved [ 418.215868][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 418.224872][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 418.236898][ C1] node 0: slabs: 3015, objs: 36180, free: 0 [ 418.243579][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 418.585230][ T4580] Mem-Info: [ 418.588425][ T4580] active_anon:0 inactive_anon:0 isolated_anon:0 [ 418.588425][ T4580] active_file:58 inactive_file:40 isolated_file:0 [ 418.588425][ T4580] unevictable:768 dirty:48 writeback:0 [ 418.588425][ T4580] slab_reclaimable:20845 slab_unreclaimable:92804 [ 418.588425][ T4580] mapped:25649 shmem:768 pagetables:632 [ 418.588425][ T4580] sec_pagetables:0 bounce:0 [ 418.588425][ T4580] kernel_misc_reclaimable:0 [ 418.588425][ T4580] free:6573 free_pcp:4363 free_cma:0 [ 418.591776][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 418.641491][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 418.652518][ T4495] node 0: slabs: 3019, objs: 36228, free: 0 [ 418.659071][ T4495] node 1: slabs: 306, objs: 3672, free: 53 [ 418.665227][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 418.673322][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 418.683939][ T4495] node 0: slabs: 3019, objs: 36228, free: 0 [ 418.690248][ T4495] node 1: slabs: 306, objs: 3672, free: 53 [ 418.696528][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 418.704825][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 418.715390][ T4495] node 0: slabs: 3019, objs: 36228, free: 0 [ 418.721552][ T4495] node 1: slabs: 306, objs: 3672, free: 53 [ 418.727737][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 418.735902][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 418.747093][ T4495] node 0: slabs: 3020, objs: 36240, free: 0 [ 418.753272][ T4495] node 1: slabs: 306, objs: 3672, free: 53 [ 418.812368][ T4602] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 418.820530][ T4602] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 418.820816][ T11] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 418.831794][ T4602] node 0: slabs: 3020, objs: 36240, free: 0 [ 418.840881][ T11] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 418.848116][ T4602] node 1: slabs: 306, objs: 3672, free: 53 [ 418.857875][ T11] node 0: slabs: 680, objs: 10740, free: 0 [ 418.857898][ T11] node 1: slabs: 243, objs: 2656, free: 50 [ 418.858002][ T4425] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 418.858021][ T4425] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 418.858037][ T4425] node 0: slabs: 680, objs: 10740, free: 0 [ 418.866398][ T6234] audit_buffer 7KB 7KB [ 418.870321][ T4425] node 1: slabs: 243, objs: 2656, free: 50 [ 419.250863][ T4580] Node 0 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11856kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 420.441319][ T9] lowmem_reserve[]: 0 0 0 0 0 [ 421.099555][ C1] slab_out_of_memory: 42 callbacks suppressed [ 421.099589][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 421.114297][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 421.125325][ C1] node 0: slabs: 3041, objs: 36492, free: 0 [ 421.131679][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 422.533105][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 422.541317][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 422.552268][ C0] node 0: slabs: 3054, objs: 36648, free: 0 [ 422.558583][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 422.593071][ T4617] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 422.602283][ T4617] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 422.607856][ T4354] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 422.612534][ T4617] node 0: slabs: 680, objs: 10740, free: 0 [ 422.620832][ T4354] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 422.626872][ T4617] node 1: slabs: 243, objs: 2656, free: 50 [ 422.637905][ T4354] node 0: slabs: 3055, objs: 36660, free: 0 [ 422.637923][ T4354] node 1: slabs: 306, objs: 3672, free: 53 [ 422.641122][ T9] Node 1 [ 423.147712][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 423.159052][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 423.169640][ C1] node 0: slabs: 3063, objs: 36756, free: 0 [ 423.175782][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 423.250245][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 423.258456][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 423.269193][ C0] node 0: slabs: 3065, objs: 36780, free: 0 [ 423.275364][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 423.967035][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 423.975302][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 423.985845][ C0] node 0: slabs: 3074, objs: 36888, free: 0 [ 423.991931][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 424.451728][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 424.460352][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 424.471028][ C0] node 0: slabs: 3080, objs: 36960, free: 0 [ 424.477170][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 425.195704][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 425.203868][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 425.214781][ C1] node 0: slabs: 3087, objs: 37044, free: 0 [ 425.220867][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 425.438427][ T4347] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 425.446670][ T4347] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 425.457333][ T4347] node 0: slabs: 3090, objs: 37080, free: 0 [ 425.457912][ T56] 2527 [ 425.464348][ T4347] node 1: slabs: 306, objs: 3672, free: 53 [ 426.219556][ C0] slab_out_of_memory: 1 callbacks suppressed [ 426.219576][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 426.234520][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 426.246123][ C0] node 0: slabs: 3101, objs: 37212, free: 0 [ 426.252226][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 426.559812][ T6234] skbuff_ext_cache 48KB 48KB [ 426.731865][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 426.740031][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 426.751237][ C0] node 0: slabs: 3108, objs: 37296, free: 0 [ 426.758104][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 427.243933][ C1] warn_alloc: 62 callbacks suppressed [ 427.243951][ C1] syz.1.438: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 427.261787][ C1] CPU: 1 PID: 6231 Comm: syz.1.438 Not tainted syzkaller #0 [ 427.269119][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.279359][ C1] Call Trace: [ 427.282736][ C1] [ 427.285600][ C1] dump_stack_lvl+0x168/0x22e [ 427.290291][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 427.296709][ C1] ? show_regs_print_info+0x12/0x12 [ 427.301910][ C1] ? load_image+0x3b0/0x3b0 [ 427.306485][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 427.312997][ C1] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 427.319521][ C1] warn_alloc+0x20c/0x300 [ 427.323882][ C1] ? zone_watermark_ok_safe+0x270/0x270 [ 427.329809][ C1] ? wakeup_kcompactd+0x8d/0x590 [ 427.334749][ C1] __alloc_pages_slowpath+0x2162/0x21e0 [ 427.340570][ C1] ? zone_watermark_fast+0x168/0x240 [ 427.346067][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 427.351992][ C1] __alloc_pages+0x33c/0x4e0 [ 427.356837][ C1] ? zone_statistics+0x170/0x170 [ 427.361990][ C1] ? alloc_pages+0x4d8/0x740 [ 427.366625][ C1] alloc_slab_page+0x5d/0x160 [ 427.371427][ C1] ? ___slab_alloc+0xec/0x1230 [ 427.376365][ C1] new_slab+0x1bd/0x2c0 [ 427.380600][ C1] ___slab_alloc+0xbc6/0x1230 [ 427.385314][ C1] ? __alloc_skb+0xfc/0x7e0 [ 427.389905][ C1] kmem_cache_alloc_node+0x1e5/0x320 [ 427.395212][ C1] ? __alloc_skb+0xfc/0x7e0 [ 427.399754][ C1] __alloc_skb+0xfc/0x7e0 [ 427.404175][ C1] skb_copy+0x139/0x790 [ 427.408361][ C1] ? __rwlock_init+0x140/0x140 [ 427.413139][ C1] mac80211_hwsim_tx_frame_no_nl+0xd6e/0x1330 [ 427.419385][ C1] ? lock_chain_count+0x20/0x20 [ 427.424250][ C1] ? mac80211_hwsim_tx_frame_nl+0xc80/0xc80 [ 427.430130][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 427.436396][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 427.441963][ C1] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 427.448184][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 427.454393][ C1] mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 427.459964][ C1] __iterate_interfaces+0x243/0x500 [ 427.465268][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 427.471597][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 427.483770][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 427.490196][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 427.497437][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 427.502737][ C1] __hrtimer_run_queues+0x554/0xd60 [ 427.507969][ C1] ? hw_scan_work+0xf30/0xf30 [ 427.512841][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 427.518143][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 427.524358][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 427.529482][ C1] handle_softirqs+0x2a1/0x920 [ 427.534368][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 427.539593][ C1] ? do_softirq+0x200/0x200 [ 427.544276][ C1] __irq_exit_rcu+0x12f/0x220 [ 427.549381][ C1] ? irq_exit_rcu+0x20/0x20 [ 427.554388][ C1] irq_exit_rcu+0x5/0x20 [ 427.558912][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 427.564658][ C1] [ 427.567947][ C1] [ 427.570873][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 427.576984][ C1] RIP: 0010:lock_acquire+0x20f/0x490 [ 427.582292][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 427.603307][ C1] RSP: 0000:ffffc90003446f40 EFLAGS: 00000206 [ 427.609919][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 5089d5996473bd00 [ 427.618125][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c1700 RDI: ffffffff8adef760 [ 427.626184][ C1] RBP: ffffc90003447060 R08: dffffc0000000000 R09: fffffbfff215c449 [ 427.634408][ C1] R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: 0000000000000001 [ 427.642496][ C1] R13: 1ffff92000688df4 R14: 0000000000000246 R15: dffffc0000000000 [ 427.650510][ C1] ? read_lock_is_recursive+0x10/0x10 [ 427.655938][ C1] ? list_lru_count_one+0x23/0x2c0 [ 427.661050][ C1] list_lru_count_one+0x3f/0x2c0 [ 427.666009][ C1] ? list_lru_count_one+0x23/0x2c0 [ 427.671180][ C1] count_shadow_nodes+0x68/0x7d0 [ 427.676120][ C1] do_shrink_slab+0x83/0xdb0 [ 427.680713][ C1] ? mem_cgroup_shrink_node+0x710/0x710 [ 427.686287][ C1] ? __init_rwsem+0x160/0x160 [ 427.690953][ C1] ? _find_next_bit+0x87/0x130 [ 427.695723][ C1] ? radix_tree_lookup+0x235/0x280 [ 427.700822][ C1] shrink_slab+0x44d/0x720 [ 427.705236][ C1] ? trace_raw_output_mm_vmscan_throttled+0x1f0/0x1f0 [ 427.711988][ C1] ? percpu_ref_tryget+0x15/0x180 [ 427.717093][ C1] ? mem_cgroup_calculate_protection+0x4c/0x3f0 [ 427.723551][ C1] ? mem_cgroup_iter+0x37/0x4a0 [ 427.728430][ C1] shrink_node+0x6e4/0x28d0 [ 427.732952][ C1] do_try_to_free_pages+0x64b/0x19c0 [ 427.738324][ C1] ? try_to_free_pages+0xeb0/0xeb0 [ 427.743552][ C1] try_to_free_pages+0x8e4/0xeb0 [ 427.748532][ C1] ? lru_gen_exit_memcg+0x2a0/0x2a0 [ 427.753770][ C1] ? __cpuset_memory_pressure_bump+0x4cf/0x610 [ 427.759967][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 427.765113][ C1] __alloc_pages_slowpath+0xc9d/0x21e0 [ 427.770849][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 427.776689][ C1] __alloc_pages+0x33c/0x4e0 [ 427.781488][ C1] ? zone_statistics+0x170/0x170 [ 427.786532][ C1] system_heap_allocate+0x387/0x1360 [ 427.791828][ C1] ? system_heap_create+0xe0/0xe0 [ 427.796889][ C1] ? __might_fault+0xa6/0x120 [ 427.801585][ C1] ? __might_fault+0xa6/0x120 [ 427.806275][ C1] dma_heap_ioctl+0x445/0x540 [ 427.811104][ C1] ? dma_heap_init+0xb0/0xb0 [ 427.815808][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 427.821037][ C1] ? security_file_ioctl+0x7c/0xa0 [ 427.826249][ C1] ? dma_heap_init+0xb0/0xb0 [ 427.830949][ C1] __se_sys_ioctl+0xfa/0x170 [ 427.835595][ C1] do_syscall_64+0x4c/0xa0 [ 427.840027][ C1] ? clear_bhb_loop+0x60/0xb0 [ 427.844971][ C1] ? clear_bhb_loop+0x60/0xb0 [ 427.850111][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.856896][ C1] RIP: 0033:0x7f51a9b8f749 [ 427.861771][ C1] Code: Unable to access opcode bytes at 0x7f51a9b8f71f. [ 427.869856][ C1] RSP: 002b:00007f51aaa72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.879420][ C1] RAX: ffffffffffffffda RBX: 00007f51a9de5fa0 RCX: 00007f51a9b8f749 [ 427.890521][ C1] RDX: 0000200000000140 RSI: 00000000c0184800 RDI: 000000000000000b [ 427.899672][ C1] RBP: 00007f51a9c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 427.908784][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.917586][ C1] R13: 00007f51a9de6038 R14: 00007f51a9de5fa0 R15: 00007fff668eb2c8 [ 427.927029][ C1] [ 427.930536][ C1] Mem-Info: [ 427.935035][ C1] active_anon:0 inactive_anon:0 isolated_anon:0 [ 427.935035][ C1] active_file:52 inactive_file:41 isolated_file:0 [ 427.935035][ C1] unevictable:768 dirty:48 writeback:0 [ 427.935035][ C1] slab_reclaimable:20845 slab_unreclaimable:93168 [ 427.935035][ C1] mapped:25649 shmem:768 pagetables:632 [ 427.935035][ C1] sec_pagetables:0 bounce:0 [ 427.935035][ C1] kernel_misc_reclaimable:0 [ 427.935035][ C1] free:6233 free_pcp:4327 free_cma:0 [ 427.982958][ C1] Node 0 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 428.016546][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 428.050345][ C1] Node 0 DMA free:4280kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.078015][ C1] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 428.083905][ C1] Node 0 DMA32 free:0kB boost:78052kB min:112744kB low:121416kB high:130088kB reserved_highatomic:28672KB active_anon:0kB inactive_anon:0kB active_file:216kB inactive_file:148kB unevictable:1536kB writepending:192kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:17060kB local_pcp:8920kB free_cma:0kB [ 428.113993][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 428.118681][ C1] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 428.145673][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 428.150393][ C1] Node 1 Normal free:20652kB boost:2048kB min:57240kB low:71036kB high:84832kB reserved_highatomic:20480KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 428.181507][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 428.186254][ C1] Node 0 DMA: 0*4kB 1*8kB (M) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 1*2048kB (U) 0*4096kB = 4280kB [ 428.201232][ C1] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.212626][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 428.224089][ C1] Node 1 Normal: 29*4kB (UM) 45*8kB (UM) 13*16kB (UME) 142*32kB (UME) 7*64kB (UME) 5*128kB (UME) 8*256kB (UM) 8*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 20652kB [ 428.240559][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.250157][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.259580][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 428.269140][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 428.278436][ C1] 895 total pagecache pages [ 428.283076][ C1] 0 pages in swap cache [ 428.287294][ C1] Free swap = 100040kB [ 428.291433][ C1] Total swap = 124996kB [ 428.295615][ C1] 2097051 pages RAM [ 428.299452][ C1] 0 pages HighMem/MovableOnly [ 428.304151][ C1] 415114 pages reserved [ 428.308311][ C1] 0 pages cma reserved [ 428.313025][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 428.321005][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 428.331654][ C1] node 0: slabs: 3115, objs: 37380, free: 0 [ 428.337914][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 428.435776][ T4469] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 428.443861][ T4469] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 428.454425][ T4469] node 0: slabs: 3118, objs: 37416, free: 0 [ 428.460507][ T4469] node 1: slabs: 306, objs: 3672, free: 53 [ 428.466574][ T4469] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 428.474607][ T4469] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 428.485163][ T4469] node 0: slabs: 3118, objs: 37416, free: 0 [ 428.491258][ T4469] node 1: slabs: 306, objs: 3672, free: 53 [ 428.670161][ T4580] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 428.691706][ T4416] Mem-Info: [ 428.792072][ T4417] Mem-Info: [ 428.795551][ T4417] active_anon:0 inactive_anon:0 isolated_anon:0 [ 428.795551][ T4417] active_file:67 inactive_file:60 isolated_file:0 [ 428.795551][ T4417] unevictable:768 dirty:48 writeback:0 [ 428.795551][ T4417] slab_reclaimable:20841 slab_unreclaimable:90981 [ 428.795551][ T4417] mapped:25649 shmem:768 pagetables:632 [ 428.795551][ T4417] sec_pagetables:0 bounce:0 [ 428.795551][ T4417] kernel_misc_reclaimable:0 [ 428.795551][ T4417] free:6227 free_pcp:6574 free_cma:0 [ 428.801737][ T4580] Node 0 [ 429.874736][ T4417] Node 0 active_anon:0kB inactive_anon:0kB active_file:268kB inactive_file:104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11792kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 430.431312][ T9] Normal free:20652kB boost:2048kB min:57240kB low:71036kB high:84832kB reserved_highatomic:20480KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:36kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 430.454552][ T6234] skbuff_fclone_cache 120KB 120KB [ 430.466485][ T9] lowmem_reserve[]: 0 0 0 0 0 [ 430.473383][ T4416] active_anon:0 inactive_anon:0 isolated_anon:0 [ 430.473383][ T4416] active_file:17 inactive_file:110 isolated_file:0 [ 430.473383][ T4416] unevictable:768 dirty:48 writeback:0 [ 430.473383][ T4416] slab_reclaimable:20841 slab_unreclaimable:90961 [ 430.473383][ T4416] mapped:25649 shmem:768 pagetables:632 [ 430.473383][ T4416] sec_pagetables:0 bounce:0 [ 430.473383][ T4416] kernel_misc_reclaimable:0 [ 430.473383][ T4416] free:6215 free_pcp:6574 free_cma:0 [ 430.979621][ T56] 2528 2528 2528 [ 430.981873][ T9] Node 0 DMA: 0*4kB 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 1*2048kB [ 431.310420][ T4469] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 431.317778][ T4417] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 431.328017][ T4469] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 431.389283][ T4469] node 0: slabs: 680, objs: 10740, free: 0 [ 431.397213][ T4469] node 1: slabs: 243, objs: 2656, free: 50 [ 431.510640][ T6234] skbuff_head_cache 12569KB 12641KB [ 431.517620][ T6234] configfs_dir_cache 8KB 8KB [ 431.519573][ T4354] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 431.536819][ T4354] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 431.552880][ T4354] node 0: slabs: 680, objs: 10740, free: 0 [ 431.560093][ T4354] node 1: slabs: 243, objs: 2656, free: 50 [ 431.918800][ T56] Node 0 DMA32 free:0kB boost:78052kB min:112744kB low:121416kB high:130088kB reserved_highatomic:28672KB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:152kB unevictable:1536kB writepending:192kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:26956kB local_pcp:12144kB free_cma:0kB [ 432.432707][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 432.440861][ T4564] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 432.452410][ T4564] node 0: slabs: 3070, objs: 36840, free: 0 [ 432.458863][ T4564] node 1: slabs: 306, objs: 3672, free: 53 [ 432.465124][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 432.475733][ T4564] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 432.487595][ T4564] node 0: slabs: 3072, objs: 36864, free: 0 [ 432.494036][ T4564] node 1: slabs: 306, objs: 3672, free: 53 [ 433.420179][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 433.420319][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 433.428359][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 433.436531][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 433.436551][ C0] node 0: slabs: 3080, objs: 36960, free: 0 [ 433.436566][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 433.437101][ T6237] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 433.447444][ T4495] node 0: slabs: 3081, objs: 36972, free: 0 [ 433.447468][ T4495] node 1: slabs: 306, objs: 3672, free: 53 [ 433.447510][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 433.447525][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 433.447539][ T4495] node 0: slabs: 3081, objs: 36972, free: 0 [ 433.447551][ T4495] node 1: slabs: 306, objs: 3672, free: 53 [ 433.447575][ T4495] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 433.447587][ T4495] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 433.458186][ T6237] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 433.458205][ T6237] node 0: slabs: 3081, objs: 36972, free: 0 [ 433.458218][ T6237] node 1: slabs: 306, objs: 3672, free: 53 [ 433.458395][ T28] INFO: task kworker/0:4:4332 blocked for more than 149 seconds. [ 433.464562][ T4495] node 0: slabs: 3081, objs: 36972, free: 0 [ 433.471345][ T11] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 433.479798][ T4495] node 1: slabs: 306, objs: 3672, free: 53 [ 433.485987][ T11] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 433.486016][ T11] node 0: slabs: 3081, objs: 36972, free: 0 [ 433.486038][ T11] node 1: slabs: 306, objs: 3672, free: 53 [ 433.486130][ T4417] Node 0 DMA free:3792kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.486176][ T4417] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 433.486211][ T4417] Node 0 DMA32 free:0kB boost:78052kB min:112744kB low:121416kB high:130088kB reserved_highatomic:28672KB active_anon:0kB inactive_anon:0kB active_file:224kB inactive_file:140kB unevictable:1536kB writepending:192kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:26892kB local_pcp:12128kB free_cma:0kB [ 433.893623][ T9] (U) 0*4096kB = 4112kB [ 435.440921][ T9] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 436.398705][ T28] Not tainted syzkaller #0 [ 436.403952][ T6234] file_lock_cache 51KB 51KB [ 436.410586][ T6234] file_lock_ctx 15KB 15KB [ 436.431724][ T11] slab_out_of_memory: 4 callbacks suppressed [ 436.431742][ T11] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 436.446728][ T11] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 436.459074][ T11] node 0: slabs: 3106, objs: 37272, free: 0 [ 436.470410][ T11] node 1: slabs: 306, objs: 3672, free: 53 [ 436.478869][ T11] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 436.489167][ T11] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 436.501252][ T11] node 0: slabs: 3107, objs: 37284, free: 0 [ 436.508200][ T11] node 1: slabs: 306, objs: 3672, free: 53 [ 436.514391][ T11] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 436.518775][ T4347] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 436.524497][ T11] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 436.524526][ T11] node 0: slabs: 3107, objs: 37284, free: 0 [ 436.524540][ T11] node 1: slabs: 306, objs: 3672, free: 53 [ 436.524580][ T11] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 436.524595][ T11] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 436.524611][ T11] node 0: slabs: 3107, objs: 37284, free: 0 [ 436.533636][ T4347] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 436.547046][ T11] node 1: slabs: 306, objs: 3672, free: 53 [ 436.554804][ T4347] node 0: slabs: 3107, objs: 37284, free: 0 [ 436.561937][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.561953][ T28] task:kworker/0:4 state:D stack:23592 pid:4332 ppid:2 flags:0x00004000 [ 436.561994][ T28] Workqueue: ipv6_addrconf addrconf_verify_work [ 436.562023][ T28] Call Trace: [ 436.562029][ T28] [ 436.562042][ T28] __schedule+0x10ec/0x40b0 [ 436.562062][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 436.562107][ T28] ? __sched_text_start+0x8/0x8 [ 436.562131][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 436.562158][ T28] schedule+0xb9/0x180 [ 436.562177][ T28] schedule_preempt_disabled+0xf/0x20 [ 436.562194][ T28] __mutex_lock+0x555/0xaf0 [ 436.562215][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 436.562238][ T28] ? addrconf_verify_work+0x15/0x30 [ 436.562261][ T28] ? mutex_lock_nested+0x10/0x10 [ 436.562280][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 436.562302][ T28] ? read_lock_is_recursive+0x10/0x10 [ 436.562321][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 436.562344][ T28] ? _raw_spin_unlock+0x40/0x40 [ 436.562367][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 436.562391][ T28] ? process_one_work+0x7a1/0x1160 [ 436.562410][ T28] addrconf_verify_work+0x15/0x30 [ 436.562432][ T28] process_one_work+0x898/0x1160 [ 436.562458][ T28] ? worker_detach_from_pool+0x240/0x240 [ 436.571221][ T4347] node 1: slabs: 306, objs: 3672, free: 53 [ 436.586197][ C0] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 436.591767][ T4347] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 436.602247][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 436.608328][ T4347] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 436.614481][ C0] node 0: slabs: 3108, objs: 37296, free: 0 [ 436.614510][ C0] node 1: slabs: 306, objs: 3672, free: 53 [ 436.623658][ T4347] node 0: slabs: 3108, objs: 37296, free: 0 [ 436.691858][ T9] Node 0 [ 436.692733][ T4347] node 1: slabs: 306, objs: 3672, free: 53 [ 436.697714][ T9] Normal: [ 436.857518][ T6234] fsnotify_mark_connector 32KB 32KB [ 436.889749][ T4602] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 436.897868][ T4602] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 436.908633][ T4602] node 0: slabs: 3111, objs: 37332, free: 0 [ 436.914981][ T4602] node 1: slabs: 306, objs: 3672, free: 53 [ 437.221412][ T4617] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 437.230914][ T4617] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 437.241417][ T4617] node 0: slabs: 680, objs: 10740, free: 0 [ 437.247484][ T4617] node 1: slabs: 243, objs: 2656, free: 50 [ 437.893351][ C1] warn_alloc: 25 callbacks suppressed [ 437.893365][ C1] syz.5.440: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 437.912692][ C1] CPU: 1 PID: 6235 Comm: syz.5.440 Not tainted syzkaller #0 [ 437.920712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.931652][ C1] Call Trace: [ 437.935198][ C1] [ 437.938509][ C1] dump_stack_lvl+0x168/0x22e [ 437.943524][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 437.950700][ C1] ? show_regs_print_info+0x12/0x12 [ 437.956807][ C1] ? load_image+0x3b0/0x3b0 [ 437.962665][ C1] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 437.969736][ C1] ? cpuset_print_current_mems_allowed+0x2df/0x360 [ 437.976544][ C1] warn_alloc+0x20c/0x300 [ 437.981145][ C1] ? zone_watermark_ok_safe+0x270/0x270 [ 437.986822][ C1] ? wakeup_kcompactd+0x8d/0x590 [ 437.992368][ C1] __alloc_pages_slowpath+0x2162/0x21e0 [ 437.999138][ C1] ? zone_watermark_fast+0x168/0x240 [ 438.005022][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 438.013028][ C1] __alloc_pages+0x33c/0x4e0 [ 438.017743][ C1] ? zone_statistics+0x170/0x170 [ 438.023333][ C1] ? alloc_pages+0x4d8/0x740 [ 438.028906][ C1] ? lock_chain_count+0x20/0x20 [ 438.034240][ C1] alloc_slab_page+0x5d/0x160 [ 438.039138][ C1] ? mempolicy_slab_node+0x3e/0x390 [ 438.044406][ C1] new_slab+0x1bd/0x2c0 [ 438.048768][ C1] ___slab_alloc+0xbc6/0x1230 [ 438.053639][ C1] ? __alloc_skb+0xfc/0x7e0 [ 438.058268][ C1] kmem_cache_alloc_node+0x1e5/0x320 [ 438.063737][ C1] ? __alloc_skb+0xfc/0x7e0 [ 438.068243][ C1] __alloc_skb+0xfc/0x7e0 [ 438.073934][ C1] skb_copy+0x139/0x790 [ 438.078172][ C1] ? __rwlock_init+0x140/0x140 [ 438.082967][ C1] mac80211_hwsim_tx_frame_no_nl+0xd6e/0x1330 [ 438.089066][ C1] ? lock_chain_count+0x20/0x20 [ 438.094014][ C1] ? mac80211_hwsim_tx_frame_nl+0xc80/0xc80 [ 438.099916][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 438.107060][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 438.112686][ C1] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 438.119362][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 438.125396][ C1] mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 438.131062][ C1] __iterate_interfaces+0x243/0x500 [ 438.136597][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 438.142987][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 438.150364][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 438.156599][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 438.163787][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 438.169016][ C1] __hrtimer_run_queues+0x554/0xd60 [ 438.174680][ C1] ? hw_scan_work+0xf30/0xf30 [ 438.182502][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 438.188054][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 438.194184][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 438.199359][ C1] handle_softirqs+0x2a1/0x920 [ 438.204580][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 438.212069][ C1] ? do_softirq+0x200/0x200 [ 438.217324][ C1] __irq_exit_rcu+0x12f/0x220 [ 438.222752][ C1] ? irq_exit_rcu+0x20/0x20 [ 438.227615][ C1] irq_exit_rcu+0x5/0x20 [ 438.231881][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 438.237867][ C1] [ 438.241055][ C1] [ 438.244740][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 438.251704][ C1] RIP: 0010:lock_acquire+0x20f/0x490 [ 438.257874][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 438.278549][ C1] RSP: 0000:ffffc900032266e0 EFLAGS: 00000206 [ 438.285876][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8c1f8f5be1def200 [ 438.294068][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c1700 RDI: ffffffff8adef760 [ 438.302611][ C1] RBP: ffffc900032267e8 R08: dffffc0000000000 R09: fffffbfff215c449 [ 438.310658][ C1] R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: 0000000000000001 [ 438.318671][ C1] R13: 1ffff92000644ce8 R14: 0000000000000246 R15: dffffc0000000000 [ 438.326791][ C1] ? read_lock_is_recursive+0x10/0x10 [ 438.332176][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 438.337651][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 438.343419][ C1] ? list_lru_count_one+0x23/0x2c0 [ 438.348890][ C1] ? list_lru_count_one+0x23/0x2c0 [ 438.354757][ C1] list_lru_count_one+0x3f/0x2c0 [ 438.360025][ C1] ? list_lru_count_one+0x23/0x2c0 [ 438.365942][ C1] super_cache_count+0x13a/0x290 [ 438.370895][ C1] do_shrink_slab+0x83/0xdb0 [ 438.375543][ C1] shrink_slab+0x1b1/0x720 [ 438.380776][ C1] ? trace_raw_output_mm_vmscan_throttled+0x1f0/0x1f0 [ 438.388565][ C1] ? mem_cgroup_iter+0x36c/0x4a0 [ 438.393562][ C1] ? mem_cgroup_iter+0x37/0x4a0 [ 438.399194][ C1] shrink_node+0x6e4/0x28d0 [ 438.404631][ C1] do_try_to_free_pages+0x64b/0x19c0 [ 438.411104][ C1] ? try_to_free_pages+0xeb0/0xeb0 [ 438.417141][ C1] try_to_free_pages+0x8e4/0xeb0 [ 438.423878][ C1] ? lru_gen_exit_memcg+0x2a0/0x2a0 [ 438.430306][ C1] ? __cpuset_memory_pressure_bump+0x4cf/0x610 [ 438.436678][ C1] ? fs_reclaim_acquire+0x78/0x100 [ 438.443058][ C1] __alloc_pages_slowpath+0xc9d/0x21e0 [ 438.448714][ C1] ? get_page_from_freelist+0x1ac0/0x1ac0 [ 438.454546][ C1] __alloc_pages+0x33c/0x4e0 [ 438.459243][ C1] ? zone_statistics+0x170/0x170 [ 438.464260][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 438.469704][ C1] ? __rwlock_init+0x140/0x140 [ 438.475552][ C1] ? percpu_ref_put+0x1e/0x230 [ 438.480819][ C1] __folio_alloc+0xe/0x30 [ 438.485298][ C1] vma_alloc_folio+0x4a3/0x900 [ 438.491469][ C1] ? __swp_swapcount+0xf5/0x120 [ 438.496619][ C1] __read_swap_cache_async+0x196/0x960 [ 438.502672][ C1] swap_cluster_readahead+0x53d/0x670 [ 438.509061][ C1] ? read_swap_cache_async+0xa0/0xa0 [ 438.520386][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 438.529190][ C1] ? xas_descend+0x3a4/0x490 [ 438.535026][ C1] swapin_readahead+0xff/0x930 [ 438.540290][ C1] ? put_swap_device+0x1e/0x230 [ 438.545659][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 438.550969][ C1] ? exit_swap_address_space+0x280/0x280 [ 438.557953][ C1] ? put_swap_device+0x1e/0x230 [ 438.564054][ C1] ? put_swap_device+0x1e/0x230 [ 438.570467][ C1] ? put_swap_device+0x17e/0x230 [ 438.575980][ C1] ? swap_cache_get_folio+0x137/0x5b0 [ 438.581930][ C1] do_swap_page+0x321/0x3ab0 [ 438.587848][ C1] ? count_memcg_event_mm+0x8f/0x3b0 [ 438.594066][ C1] ? count_memcg_event_mm+0x358/0x3b0 [ 438.599882][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 438.604948][ C1] ? count_memcg_event_mm+0x8f/0x3b0 [ 438.610950][ C1] ? put_page+0x270/0x270 [ 438.615635][ C1] handle_mm_fault+0x1904/0x3e60 [ 438.621016][ C1] ? mt_find+0x145/0x810 [ 438.625663][ C1] ? numa_migrate_prep+0x250/0x250 [ 438.631443][ C1] ? lock_chain_count+0x20/0x20 [ 438.636389][ C1] ? lock_mm_and_find_vma+0xae/0x2f0 [ 438.642272][ C1] do_user_addr_fault+0x51f/0xb10 [ 438.651367][ C1] exc_page_fault+0x60/0x100 [ 438.658633][ C1] asm_exc_page_fault+0x22/0x30 [ 438.663637][ C1] RIP: 0010:copy_user_short_string+0xd/0x40 [ 438.671426][ C1] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 438.694093][ C1] RSP: 0000:ffffc90003227c08 EFLAGS: 00050202 [ 438.701382][ C1] RAX: ffffffff84072a01 RBX: 0000000000000008 RCX: 0000000000000001 [ 438.710102][ C1] RDX: 0000000000000000 RSI: ffffc90003227c80 RDI: 00002000000217d8 [ 438.718115][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000644f91 [ 438.727255][ C1] R10: fffff52000644f91 R11: 1ffff92000644f90 R12: 00007fffffffeff8 [ 438.735609][ C1] R13: ffffc90003227c80 R14: 00002000000217d8 R15: ffffc90003227c80 [ 438.743908][ C1] ? _copy_from_user+0x161/0x170 [ 438.749377][ C1] _copy_to_user+0xea/0x130 [ 438.754003][ C1] msr_read+0x124/0x1b0 [ 438.758620][ C1] ? msr_device_destroy+0x20/0x20 [ 438.764012][ C1] ? common_file_perm+0x171/0x1c0 [ 438.769184][ C1] ? fsnotify_perm+0x39b/0x550 [ 438.774294][ C1] ? msr_device_destroy+0x20/0x20 [ 438.779438][ C1] vfs_read+0x2c0/0x920 [ 438.783602][ C1] ? kernel_read+0x1e0/0x1e0 [ 438.789273][ C1] ? __fget_files+0x28/0x4d0 [ 438.793958][ C1] ? __fget_files+0x44a/0x4d0 [ 438.798747][ C1] ? __fdget_pos+0x1d4/0x360 [ 438.803947][ C1] ? ksys_read+0x71/0x240 [ 438.808635][ C1] ksys_read+0x143/0x240 [ 438.813018][ C1] ? vfs_write+0x960/0x960 [ 438.817714][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 438.824615][ C1] do_syscall_64+0x4c/0xa0 [ 438.830743][ C1] ? clear_bhb_loop+0x60/0xb0 [ 438.835758][ C1] ? clear_bhb_loop+0x60/0xb0 [ 438.841723][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.848001][ C1] RIP: 0033:0x7fe95e18f749 [ 438.852899][ C1] Code: Unable to access opcode bytes at 0x7fe95e18f71f. [ 438.860548][ C1] RSP: 002b:00007fe95f0bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.870074][ C1] RAX: ffffffffffffffda RBX: 00007fe95e3e5fa0 RCX: 00007fe95e18f749 [ 438.880075][ C1] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000005 [ 438.888671][ C1] RBP: 00007fe95e213f91 R08: 0000000000000000 R09: 0000000000000000 [ 438.897646][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.907044][ C1] R13: 00007fe95e3e6038 R14: 00007fe95e3e5fa0 R15: 00007ffe9cbb9728 [ 438.915685][ C1] [ 438.919229][ C1] Mem-Info: [ 438.923273][ C1] active_anon:0 inactive_anon:0 isolated_anon:0 [ 438.923273][ C1] active_file:0 inactive_file:97 isolated_file:0 [ 438.923273][ C1] unevictable:768 dirty:48 writeback:0 [ 438.923273][ C1] slab_reclaimable:20841 slab_unreclaimable:90989 [ 438.923273][ C1] mapped:25649 shmem:768 pagetables:632 [ 438.923273][ C1] sec_pagetables:0 bounce:0 [ 438.923273][ C1] kernel_misc_reclaimable:0 [ 438.923273][ C1] free:5974 free_pcp:6796 free_cma:0 [ 438.973504][ C1] Node 0 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11792kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 439.007651][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? yes [ 439.042887][ C1] Node 0 DMA free:3244kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.072197][ C1] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 439.078138][ C1] Node 0 DMA32 free:0kB boost:78052kB min:112744kB low:121416kB high:130088kB reserved_highatomic:28672KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:184kB unevictable:1536kB writepending:192kB present:3129332kB managed:2593344kB mlocked:0kB bounce:0kB free_pcp:26936kB local_pcp:14716kB free_cma:0kB [ 439.109450][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 439.114277][ C1] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.142223][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 439.147038][ C1] Node 1 Normal free:20652kB boost:2048kB min:57240kB low:71036kB high:84832kB reserved_highatomic:20480KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:108kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 439.177195][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 439.182100][ C1] Node 0 DMA: 1*4kB (U) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 3228kB [ 439.197218][ C1] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 439.208800][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 439.220411][ C1] Node 1 Normal: 29*4kB (UM) 45*8kB (UM) 13*16kB (UME) 142*32kB (UME) 7*64kB (UME) 5*128kB (UME) 8*256kB (UM) 8*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 20652kB [ 439.238292][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.248880][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.259342][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.269809][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.281713][ C1] 895 total pagecache pages [ 439.286398][ C1] 0 pages in swap cache [ 439.291302][ C1] Free swap = 100040kB [ 439.295538][ C1] Total swap = 124996kB [ 439.299854][ C1] 2097051 pages RAM [ 439.303714][ C1] 0 pages HighMem/MovableOnly [ 439.308418][ C1] 415114 pages reserved [ 439.312646][ C1] 0 pages cma reserved [ 439.316892][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 439.324959][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 439.335567][ C1] node 0: slabs: 3119, objs: 37428, free: 0 [ 439.341757][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 440.037622][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 440.243480][ T56] lowmem_reserve[]: 0 0 1 1 1 [ 440.248267][ T56] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 440.281675][ T6234] taskstats 34KB 63KB [ 440.288732][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 440.301684][ T6234] proc_dir_entry 697KB 697KB [ 440.307983][ T28] ? kthread_data+0x4b/0xc0 [ 440.531691][ T6234] pde_opener 11KB 11KB [ 440.543535][ T28] worker_thread+0xaa2/0x1250 [ 440.548759][ T28] ? __kthread_parkme+0x162/0x1c0 [ 440.557356][ T4416] Node 0 active_anon:0kB inactive_anon:0kB active_file:224kB inactive_file:148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102596kB dirty:192kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11792kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? yes [ 440.595935][ T6234] seq_file 82KB 101KB [ 440.621678][ T28] kthread+0x29d/0x330 [ 440.628064][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 441.989154][ C1] slab_out_of_memory: 212 callbacks suppressed [ 441.989176][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 442.003415][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 442.014702][ C1] node 0: slabs: 3143, objs: 37716, free: 0 [ 442.020786][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 442.136914][ T4564] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 442.145969][ T4564] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 442.156370][ T4564] node 0: slabs: 680, objs: 10740, free: 0 [ 442.162670][ T4564] node 1: slabs: 243, objs: 2656, free: 50 [ 442.282044][ T4354] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 442.282113][ T6237] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 442.290079][ T4354] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 442.298714][ T6237] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 442.309341][ T4354] node 0: slabs: 3149, objs: 37788, free: 0 [ 442.309364][ T4354] node 1: slabs: 306, objs: 3672, free: 53 [ 442.319929][ T6237] node 0: slabs: 3149, objs: 37788, free: 0 [ 442.326255][ T4418] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 442.332043][ T6237] node 1: slabs: 306, objs: 3672, free: 53 [ 442.338095][ T4418] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 442.346299][ T6237] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 442.352275][ T4418] node 0: slabs: 3149, objs: 37788, free: 0 [ 442.362982][ T6237] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 442.371042][ T4418] node 1: slabs: 306, objs: 3672, free: 53 [ 442.377342][ T6237] node 0: slabs: 3149, objs: 37788, free: 0 [ 442.388116][ T4492] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 442.394039][ T6237] node 1: slabs: 306, objs: 3672, free: 53 [ 442.400108][ T4492] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 442.425703][ T4492] node 0: slabs: 680, objs: 10740, free: 0 [ 442.431789][ T4492] node 1: slabs: 243, objs: 2656, free: 50 [ 443.077805][ T6237] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 443.086189][ T6237] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 443.089633][ T4580] DMA free:2716kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 443.096920][ T6237] node 0: slabs: 3155, objs: 37860, free: 0 [ 443.130866][ T6237] node 1: slabs: 306, objs: 3672, free: 53 [ 443.199560][ T6234] sigqueue 31KB 31KB [ 443.217899][ C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC) [ 443.226114][ C1] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 443.236650][ C1] node 0: slabs: 3157, objs: 37884, free: 0 [ 443.242773][ C1] node 1: slabs: 306, objs: 3672, free: 53 [ 443.267939][ T9] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 443.271768][ T4617] SLUB: Unable to allocate memory on node -1, gfp=0xb20(GFP_ATOMIC|__GFP_ZERO) [ 443.287354][ T4617] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 443.297519][ T4617] node 0: slabs: 680, objs: 10740, free: 0 [ 443.303567][ T4617] node 1: slabs: 243, objs: 2656, free: 50 [ 443.341721][ T9] Node 1 Normal: 29*4kB (UM) 45*8kB (UM) 13*16kB (UME) 142*32kB (UME) 7*64kB (UME) 5*128kB (UME) 8*256kB (UM) 8*512kB (UM) 8*1024kB (M) 0*2048kB 0*4096kB = 20652kB