last executing test programs: 19m0.50101621s ago: executing program 3 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fac27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000001c0)={0x3, {"3ada7c5c68c529135960daeb7925ff28", "6ed067463537f9ea0b798faf3a83a56e", "2c5a3e26b8daf9c50906bbb2f61fd172"}, 0x5ed, 0x7}) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x17f) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) 18m55.792383018s ago: executing program 3 (id=190): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e01"], 0x11) 18m54.921464424s ago: executing program 3 (id=192): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xa58, 0x0, '\x00', {0x0, @bt={0x7, 0x80000000, 0x1, 0x2, 0x2, 0x4, 0x1ff, 0x1, 0x4, 0x2, 0xf, 0x0, 0x6, 0x5, 0x1b, 0x23, {0x6, 0xfffffff1}, 0x2, 0xc0}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73b22000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) 18m42.958556378s ago: executing program 3 (id=208): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x133}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x100, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x700, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) unshare(0x8040480) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 18m35.511075394s ago: executing program 3 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x55e1a51c, 0x7d051718, 0x2, @discrete={0x2}}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x208) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) read$snapshot(r3, 0x0, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x4000, 0x0}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8002}]}) close_range(r7, 0xffffffffffffffff, 0x0) 18m32.448450427s ago: executing program 3 (id=218): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xa58, 0x0, '\x00', {0x0, @bt={0x7, 0x80000000, 0x1, 0x2, 0x2, 0x4, 0x1ff, 0x1, 0x4, 0x2, 0xf, 0x0, 0x6, 0x5, 0x1b, 0x23, {0x6, 0xfffffff1}, 0x2, 0xc0}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73b22000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) 18m13.807594613s ago: executing program 32 (id=218): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xa58, 0x0, '\x00', {0x0, @bt={0x7, 0x80000000, 0x1, 0x2, 0x2, 0x4, 0x1ff, 0x1, 0x4, 0x2, 0xf, 0x0, 0x6, 0x5, 0x1b, 0x23, {0x6, 0xfffffff1}, 0x2, 0xc0}}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73b22000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) 17m1.769436299s ago: executing program 4 (id=331): socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mount$bpf(0x200000000000, &(0x7f00000003c0)='./file0\x00', 0x0, 0x28a5079, 0x0) 16m53.953587759s ago: executing program 4 (id=335): ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'bond0\x00', @ifru_map={0x4, 0x7, 0xa3cd, 0x2, 0x9, 0xa}}) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x200}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0xffffffff, @private0}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0xffffffff, 0x0, 0xfffffffa, 0x0, 0x800, 0x6]}}, 0x5c) 16m48.034575448s ago: executing program 4 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x3f9, 0x800, 0x70bd28, 0x5dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 16m46.576736921s ago: executing program 4 (id=345): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x44}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x2, @random="d727f7229216", 'veth0_to_batadv\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) pwritev(r6, &(0x7f0000002840)=[{&(0x7f00000003c0)="e65b", 0x2}], 0x1, 0x1, 0x6) 16m43.429653869s ago: executing program 1 (id=348): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xa58, 0x0, '\x00', {0x0, @bt={0x7, 0x80000000, 0x1, 0x2, 0x2, 0x4, 0x1ff, 0x1, 0x4, 0x2, 0xf, 0x0, 0x6, 0x5, 0x1b, 0x23, {0x6, 0xfffffff1}, 0x2, 0xc0}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73b22000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) socket$netlink(0x10, 0x3, 0xc) kexec_load(0x8, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c20000000180c200000008004510005c00000000002f90780000000000000000248065580000000010"], 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000040)={{0x0, @addr=0xfff}, 0x8, 0x0, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) 16m39.16851268s ago: executing program 4 (id=352): ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'bond0\x00', @ifru_map={0x4, 0x7, 0xa3cd, 0x2, 0x9, 0xa}}) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x200}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0xffffffff, @private0}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0xffffffff, 0x0, 0xfffffffa, 0x0, 0x800, 0x6]}}, 0x5c) 16m39.027539218s ago: executing program 1 (id=353): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0xa}, {}, {}, {0x62, 0x9}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0], 0x0, 0xbf, &(0x7f0000001c00), 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa, 0x2, 0x2}) 16m37.970260629s ago: executing program 4 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x3f9, 0x800, 0x70bd28, 0x5dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 16m36.162521194s ago: executing program 1 (id=357): socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mount$bpf(0x200000000000, &(0x7f00000003c0)='./file0\x00', 0x0, 0x28a5079, 0x0) 16m35.504999431s ago: executing program 1 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x17f) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) 16m31.72171365s ago: executing program 1 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000001c0)={0x3, {"3ada7c5c68c529135960daeb7925ff28", "6ed067463537f9ea0b798faf3a83a56e", "2c5a3e26b8daf9c50906bbb2f61fd172"}, 0x5ed, 0x7}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() timer_settime(0x0, 0x1, &(0x7f0000000300), 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xffffffff8) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x17f) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f00000000c0)='./file2\x00', 0x109242, 0x9c) fallocate(r5, 0x65, 0xb, 0x2) 16m28.702708211s ago: executing program 1 (id=365): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000004b00000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000ca3526a400f8ffffffb702000008800000b703000001000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000002d0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='ipvlan1\x00') sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, 0x0, 0x0) listen(r3, 0xda8d) accept$inet(r3, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r7}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f00000001c0)=[{0x8, 0x5}]}) 16m21.59866487s ago: executing program 33 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x40, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r3, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x18, 0x3f9, 0x800, 0x70bd28, 0x5dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 16m11.738165944s ago: executing program 34 (id=365): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000004b00000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000ca3526a400f8ffffffb702000008800000b703000001000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000002d0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='ipvlan1\x00') sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, 0x0, 0x0) listen(r3, 0xda8d) accept$inet(r3, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000040)={r7}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f00000001c0)=[{0x8, 0x5}]}) 12.577139403s ago: executing program 2 (id=1239): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f0000000340)=r1}, 0x20) (fail_nth: 2) 12.368079768s ago: executing program 2 (id=1240): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_lsm={0x1d, 0x15, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xcc1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x81}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}]}, &(0x7f0000000880)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000008c0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001900)={0x4, 0x10, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001940)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001a40)=r1, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7801, 0x80, 0x9, 0x2, {{0x8, 0x4, 0x3, 0x1, 0x20, 0x64, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @local, {[@lsrr={0x83, 0xb, 0x74, [@empty, @empty]}]}}}}}) syz_usb_control_io$uac1(r2, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x0, 0x24, 0xac, {0xac, 0x23, "f6aa820d1954632a5f6cc2c9249460a8244aa53e0b418c0b09b12c3184aaee3a0d8533236011e00fcd95ece37459806e4c101e591a69953be4f9f5eba95e820f69c54578670f2e5e1f9eed08261a44350b35bbed86f7b8974ff677017e9bf629f112f9cc6122cd370d9206c9ff231b9dd7d22157819017cdbd90bf3338bc3ad15e76c293d4124c5de65d13b2964efa2860fe6baba8d47b056cce3982a6d35d9dd4bbc86b78ee8e111a83"}}, &(0x7f00000003c0)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "ef666993747739441fbf4b4954aca6eeb4f8cbc0488d6b375261fc2d61c3b014b6d83feaaf7d02e4337324bc06a11f7d3718250936e91e782fc5f6a49521ea43f1bc56cd4ab1894d0d2b1e04b3a8aa209fadda088e27705e5dddebc2926dc2cdc7429c36ceb45476a129f9a92c4e5829f385ad4d1c432e3b1161119b314dd2365d3058a943ecd57dc36fd12b6c2e4a5e36b0a33fea98f331c2597874641cd75043516ed3b88111c7f9079f1230544f"}}}, &(0x7f0000000740)={0x44, &(0x7f00000004c0)={0x20, 0x19, 0x95, "e5ed341cda84e45cd2192d409cf8bd7a44093cbc2d759d1d71e56171379f59715b70e15f85eab3c409186b913fd08b85ffddf5c4482def6861c38b0fc61a16e9e188b51455c9b2989fab7033bd20b34ea1dcfdf188723aa5096ad68b0bed4fb275864d3f8a8571a2322adcafdf07cb6d6dd8da47193a678e7d0bb96bd10c1cc7ed7298ab6c8e9e9a22d604e4e1e3f3099a62a1317b"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x81, 0x3, '9<7'}, &(0x7f0000000640)={0x20, 0x82, 0x2, "f756"}, &(0x7f0000000680)={0x20, 0x83, 0x1, '.'}, &(0x7f00000006c0)={0x20, 0x84, 0x1, "ec"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "1cd76d"}}) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@volatile={0x2, 0x0, 0x0, 0x9, 0x1}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x30, 0x7f, 0x0, 0x30, 0x30, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000180)=""/142, 0x57, 0x8e, 0x1, 0x5, 0x10000}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@ipv6_deladdr={0x18, 0x15, 0x515, 0x70bd26, 0x25dfdbfd, {0xa, 0x40, 0x76, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xd, 0x0, r3, 0x2, '\x00', r4, r5, 0x4, 0x3, 0x1}, 0x50) syz_usb_control_io$hid(r2, 0x0, 0x0) 9.188137997s ago: executing program 2 (id=1243): creat(&(0x7f0000000280)='./file0\x00', 0xa8) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f00000001c0)='./file0\x00', 0x7) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="0e975cb0000094cc540002000000aa210500bf588dc4fe0593ef000000000000988101000000000000000000000000008a0000000000000000000000000a1bb53dc221e1fb9bd0262c6cdb92cfd7ea9e3231c6be939de07580c103000000ed81ad489f1214bbf1e0cc730d805026021a7a311bf950251230c15cda5c529f56a8b5788d3cf60ce17675748be7a185f3c592fe6bf422d06643e19fb13d627d6d7d0eec96d70842cfa50e432d777b7f02bdac3237a35401040282095681254e71e416402087e8c2713a811a74f5153134a68ee7dd310e5fa4"], 0x28}, 0x1, 0x0, 0x0, 0x20000085}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fanotify_init(0x200, 0x2) fanotify_mark(r8, 0x1, 0x1012, r5, 0x0) write(r7, &(0x7f00000004c0)='g', 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1, 0x10000008, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x500000, 0x85) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000000), &(0x7f0000000140)=r11}, 0x20) r12 = socket$key(0xf, 0x3, 0x2) r13 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYRES16=r7], 0x30}, 0x40488d1) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r6], 0x40}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x2000000000000232, &(0x7f0000000200)=ANY=[@ANYRESHEX=r12, @ANYRES32=r10, @ANYRES8=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000003d40)={'ipvlan1\x00', &(0x7f0000003cc0)=@ethtool_dump={0x1, 0x10, 0x1}}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 8.48013971s ago: executing program 0 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@mpls_newroute={0x1c, 0x18, 0x40d, 0x70bd27, 0x25dfdbfe, {0x1c, 0x34, 0x0, 0x8, 0xfe, 0x1, 0xfd, 0x4, 0x1300}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r4 = timerfd_create(0x0, 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32=r9, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="c2cd99285aa7d2b3db7a17e5ffd2520600"/28], 0x50) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r7], 0x48}, 0x1, 0x0, 0x0, 0x4004815}, 0x8000) read(r4, &(0x7f00000002c0)=""/160, 0xa0) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000040)=0x8004) fcntl$dupfd(r0, 0x406, r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x40000000) 8.004036292s ago: executing program 2 (id=1247): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc8e", 0x8}], 0x1}}], 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)={0x5, {{0xa, 0xa35c, 0x200, @mcast1, 0x4}}, 0x1, 0x3, [{{0xa, 0x4e20, 0x9, @local, 0x7}}, {{0xa, 0x4e23, 0x1, @remote, 0x7f}}, {{0xa, 0x4e20, 0x7, @mcast1, 0x10000}}]}, 0x210) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x15a95}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000050000050900010073797a300000000014000000020a030000000000000000000000000714000000020a010200000000000000000500000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040004) close(0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, 0x0, 0x2a442, 0x1) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) ioctl$XFS_IOC_FSGEOMETRY_V4(r5, 0x8070587c, &(0x7f0000000280)) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r6, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x98) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 3.991204592s ago: executing program 2 (id=1248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000060000000800000002"], 0x50) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000780), &(0x7f0000000740)=r1}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r3, &(0x7f0000000540), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000340)={0x4, 0x0, '\x00', 0x1, &(0x7f00000002c0)}) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000080008000e00000000ff", 0x24) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x48880000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000226bd7000fbdbdf250a0000000800030096b44be6d01df58da3015c58089d5e28fd4eda2c6bc2b71c1952bce0d9ffe5bf2c424c184f911cd343ca88a6573f653385d38c7d372456f9eb757869ff3753c81836bbfcb15145b5137d66cb57f99a593154984c9f648b89bd8837d716637b0d83662844f2138f151de92d6fae96b0f60bf978f868af906097dff120e729839663398bc018e0c3cf5758a47f6d6d2203d2ede0daa36ec335592809", @ANYRES32=r9, @ANYBLOB="050008000400000009000700761305bfb8000000090007004f0dc7ec40000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0xc880) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='ext2\x00', 0xa08010, 0x0) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x3ff, 0x5b, 0x0, 0x400}, {0x2, 0x3, 0x7, 0x3}, {0xa8e, 0xf7, 0xb, 0x7}]}) writev(r6, &(0x7f0000000200)=[{&(0x7f0000000140)="1a5a84648bc61793438471d9944ff308c10dcf4e661c88eb7c3989451fb8861c9798bfdd75fade3231ac60fb37e994737a4f7980dcec822874079b6d3f1a0097f7a32d070328e4f1b8919e56a1a202737298e1d67edb3f00"/102, 0x66}], 0x2b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000090) 2.417700481s ago: executing program 0 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x7, r3, 0x0, 0x0}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x257f, 0x5}, 'syz0\x00', 0x38}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r4, 0x5501) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x2, 0xa, 0x2) write$input_event(r4, &(0x7f00000002c0)={{0x77359400}, 0x12, 0xf0, 0x9}, 0x18) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="000100001800010000000000010000000aa0"], 0x100}}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000005c0)) 1.668180309s ago: executing program 0 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x26) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl(r1, 0x3b8e, &(0x7f0000000580)="10") 1.341148285s ago: executing program 2 (id=1251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2179, 0x77, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000"], 0x0}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fanotify_init(0x40, 0x80000) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r5, 0x1, 0x40001019, r6, 0x0) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) sched_setattr(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 1.295935305s ago: executing program 0 (id=1252): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000003000000010000000800000000400100", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000200"/24, @ANYRES32, @ANYBLOB], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r0, &(0x7f0000000400)=""/215, 0xd7, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000009c0)='./config\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x1, 0x4) sendmsg$802154_raw(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)="5699d5226047c41f509e8628b12adda6a9c85efb286a1a7a93346d51098c2640298a5966a83ec114488e515cc35a90a67bc980cbf897180f87ccd9e61d7473bf6050511d802426e93900475bba05e0de03a7d012fd9d64381913", 0x5a}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x4400000d, 0x200) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x40000, 0x1b) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r5 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x2480) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0xa, 0x0, 0x6, 0x14, 0xd, "fee8a2ab78fc17c2d1f8a0e91dda0ab7bd64c6a4b4e00d8683dda1af1ea89de2b7fb0a0100000000000300", "2809e8dbe108598964224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000001a00", "90be8b1c551265416c7f30680300", [0xfffffffffffffffd]}}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000500)="800df51f30d3f666a8d2ebd6d199593a491333ae42fcdd5046f763a479d6110edb8fcba3a368a7e88954b0e67c086dd8925d3fffda45f69d9e6df828ad69e78a15098a43fe3bc759520bc5801e", 0x4d, 0x64cc, &(0x7f0000000580)={0x0, 0x3938700}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES64=r1, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 422.404927ms ago: executing program 0 (id=1253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) 0s ago: executing program 0 (id=1254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x20901, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xff7b, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff2086dd000011110aac14140ce000006a49e832f0", 0x0, 0x2000028e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.299820][T12557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.299841][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.300077][T12557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.442982][T12557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.443008][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.443040][T12557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.020193][T12557] hsr_slave_0: entered promiscuous mode [ 1246.021858][T12557] hsr_slave_1: entered promiscuous mode [ 1246.023012][T12557] debugfs: 'hsr0' already exists in 'hsr' [ 1246.023039][T12557] Cannot create hsr debugfs directory [ 1247.005711][ T5587] Bluetooth: hci2: command tx timeout [ 1247.086074][ T5587] Bluetooth: hci1: command tx timeout [ 1247.234786][T12712] FAULT_INJECTION: forcing a failure. [ 1247.234786][T12712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1247.234822][T12712] CPU: 1 UID: 0 PID: 12712 Comm: syz.2.1127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1247.234844][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1247.234857][T12712] Call Trace: [ 1247.234865][T12712] [ 1247.234873][T12712] dump_stack_lvl+0xe8/0x150 [ 1247.234908][T12712] should_fail_ex+0x46b/0x600 [ 1247.234939][T12712] _copy_from_iter+0x1d3/0x1660 [ 1247.234968][T12712] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1247.234996][T12712] ? __pfx__copy_from_iter+0x10/0x10 [ 1247.235021][T12712] ? __alloc_skb+0x27a/0x7a0 [ 1247.235038][T12712] ? __alloc_skb+0x27a/0x7a0 [ 1247.235061][T12712] ? netlink_sendmsg+0x650/0xb40 [ 1247.235197][T12712] ? skb_put+0x112/0x210 [ 1247.235220][T12712] netlink_sendmsg+0x6c0/0xb40 [ 1247.235255][T12712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.235285][T12712] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1247.235319][T12712] ? __kernel_text_address+0xd/0x30 [ 1247.235341][T12712] ? unwind_get_return_address+0x4d/0x90 [ 1247.235368][T12712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.235391][T12712] sock_sendmsg_nosec+0x13a/0x180 [ 1247.235421][T12712] ____sys_sendmsg+0x565/0x870 [ 1247.235451][T12712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.235486][T12712] ? import_iovec+0x73/0xa0 [ 1247.235519][T12712] ___sys_sendmsg+0x2a5/0x360 [ 1247.235542][T12712] ? __lock_acquire+0x747/0x2de0 [ 1247.235574][T12712] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.235630][T12712] ? __fget_files+0x2a/0x420 [ 1247.235654][T12712] ? __fget_files+0x3a8/0x420 [ 1247.235691][T12712] __x64_sys_sendmsg+0x1b7/0x290 [ 1247.235717][T12712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1247.235755][T12712] do_syscall_64+0x166/0x520 [ 1247.235775][T12712] ? trace_irq_disable+0x3b/0x140 [ 1247.235799][T12712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.235817][T12712] ? clear_bhb_loop+0x70/0xc0 [ 1247.235839][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.235856][T12712] RIP: 0033:0x7f3bbcd4e159 [ 1247.235875][T12712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.235890][T12712] RSP: 002b:00007f3bbafa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.235917][T12712] RAX: ffffffffffffffda RBX: 00007f3bbcfd5fa0 RCX: 00007f3bbcd4e159 [ 1247.235931][T12712] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1247.235942][T12712] RBP: 00007f3bbafa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.235954][T12712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.235966][T12712] R13: 00007f3bbcfd6038 R14: 00007f3bbcfd5fa0 R15: 00007fffe3b8def8 [ 1247.235995][T12712] [ 1247.882317][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 1247.882361][T12720] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1131'. [ 1248.940553][ T5245] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1249.087484][ T5587] Bluetooth: hci2: command tx timeout [ 1249.938815][T12618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.938930][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.939255][T12618] bridge_slave_0: entered allmulticast mode [ 1249.942314][T12618] bridge_slave_0: entered promiscuous mode [ 1250.046602][T12618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.046749][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.047051][T12618] bridge_slave_1: entered allmulticast mode [ 1250.064334][T12618] bridge_slave_1: entered promiscuous mode [ 1250.589917][T12618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.856420][T12618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.909284][T12634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.909536][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.909675][T12634] bridge_slave_0: entered allmulticast mode [ 1250.911811][T12634] bridge_slave_0: entered promiscuous mode [ 1251.075055][T12634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.075254][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.075444][T12634] bridge_slave_1: entered allmulticast mode [ 1251.100228][T12634] bridge_slave_1: entered promiscuous mode [ 1251.142892][ T5587] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1251.449441][T12618] team0: Port device team_slave_0 added [ 1251.684730][T12618] team0: Port device team_slave_1 added [ 1252.006569][T12634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.067979][T12634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.069153][T12618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.069172][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.069204][T12618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.155030][T12618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.155052][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1252.155085][T12618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.042637][T12634] team0: Port device team_slave_0 added [ 1253.130813][T12634] team0: Port device team_slave_1 added [ 1253.505280][T12634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.505296][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.505317][T12634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.558874][T12618] hsr_slave_0: entered promiscuous mode [ 1253.564730][T12618] hsr_slave_1: entered promiscuous mode [ 1253.566346][T12618] debugfs: 'hsr0' already exists in 'hsr' [ 1253.566422][T12618] Cannot create hsr debugfs directory [ 1253.569640][T12634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.569682][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.569763][T12634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.211676][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 1254.211716][T12766] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1140'. [ 1254.369694][T12634] hsr_slave_0: entered promiscuous mode [ 1254.371018][T12634] hsr_slave_1: entered promiscuous mode [ 1254.371978][T12634] debugfs: 'hsr0' already exists in 'hsr' [ 1254.372005][T12634] Cannot create hsr debugfs directory [ 1255.063801][T12557] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1255.128036][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1256.788280][T12780] sctp: [Deprecated]: syz.2.1144 (pid 12780) Use of int in maxseg socket option. [ 1256.788280][T12780] Use struct sctp_assoc_value instead [ 1256.844151][T12557] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1256.879598][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1256.977825][T12557] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1257.011512][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1257.045416][T12557] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1257.082895][T12557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1257.930866][T12805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 1257.930907][T12805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1147'. [ 1260.396975][ T5245] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1262.331074][T12557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.476529][T12557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.507366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.507668][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.595724][T12191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.595947][T12191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.958730][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 1262.958773][T12828] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1150'. [ 1263.629244][ T5245] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1264.115529][T12848] overlayfs: failed to clone upperpath [ 1265.175777][ T5884] bridge_slave_1: left allmulticast mode [ 1265.175819][ T5884] bridge_slave_1: left promiscuous mode [ 1265.176114][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.357055][ T5884] bridge_slave_0: left allmulticast mode [ 1265.357100][ T5884] bridge_slave_0: left promiscuous mode [ 1265.358684][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.585861][ T5884] bridge_slave_1: left allmulticast mode [ 1265.585903][ T5884] bridge_slave_1: left promiscuous mode [ 1265.586244][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.727804][ T5884] bridge_slave_0: left allmulticast mode [ 1265.727841][ T5884] bridge_slave_0: left promiscuous mode [ 1265.728060][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.446573][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.556594][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.599819][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 1268.599853][T12874] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1159'. [ 1268.626632][ T5884] bond0 (unregistering): Released all slaves [ 1269.379279][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.476384][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.539072][ T5884] bond0 (unregistering): Released all slaves [ 1269.921119][T12883] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1160'. [ 1270.420130][T12887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1162'. [ 1270.680593][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 1271.386030][ T5884] hsr_slave_0: left promiscuous mode [ 1271.945755][ T5884] hsr_slave_1: left promiscuous mode [ 1271.946863][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.972957][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.146569][T12914] overlayfs: failed to clone upperpath [ 1273.225841][ T5884] hsr_slave_0: left promiscuous mode [ 1273.232646][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 1273.232674][T12921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1167'. [ 1273.287162][ T5884] hsr_slave_1: left promiscuous mode [ 1273.288651][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.337131][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.507206][ T5884] team0 (unregistering): Port device team_slave_1 removed [ 1274.557893][ T5884] team0 (unregistering): Port device team_slave_0 removed [ 1275.129681][ T5884] team0 (unregistering): Port device team_slave_1 removed [ 1275.186313][ T5884] team0 (unregistering): Port device team_slave_0 removed [ 1275.528773][ T5245] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1275.560175][T12557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.972498][T12963] overlayfs: failed to clone upperpath [ 1277.901906][T12557] veth0_vlan: entered promiscuous mode [ 1277.921897][T12557] veth1_vlan: entered promiscuous mode [ 1278.053128][T12557] veth0_macvtap: entered promiscuous mode [ 1278.150188][T12557] veth1_macvtap: entered promiscuous mode [ 1278.200003][T12557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.204572][T12557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.381539][T12191] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.382824][T12191] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.850693][ T38] audit: type=1800 audit(1790940891.864:8): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1177" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1279.476040][T12214] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.626294][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 1279.626335][T12986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1178'. [ 1281.291252][T13004] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1281.528957][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1181'. [ 1282.044526][ T5587] Bluetooth: hci4: unknown advertising packet type: 0xf3 [ 1282.143955][T13020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1282.203024][T13020] bond1: (slave macvlan2): making interface the new active one [ 1282.289085][T13020] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1282.325598][ T8849] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1282.462916][T11880] bond_slave_0: entered promiscuous mode [ 1282.463005][T11880] bond_slave_1: entered promiscuous mode [ 1282.506626][ T8849] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 1282.508226][ T8849] usb 3-1: config index 0 descriptor too short (expected 74, got 72) [ 1282.508257][ T8849] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1282.508329][ T8849] usb 3-1: config 1 interface 0 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 1282.512500][ T8849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.512530][ T8849] usb 3-1: Product: syz [ 1282.512548][ T8849] usb 3-1: Manufacturer: syz [ 1282.512566][ T8849] usb 3-1: SerialNumber: syz [ 1282.673705][T12221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.673728][T12221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.763473][ T8849] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1283.953984][T12191] usb 3-1: Failed to submit usb control message: -110 [ 1283.954029][T12191] usb 3-1: unable to send the bmi data to the device: -110 [ 1283.954051][T12191] usb 3-1: unable to get target info from device [ 1283.954088][T12191] usb 3-1: could not get target info (-110) [ 1283.954581][T12191] usb 3-1: could not probe fw (-110) [ 1284.080741][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'. [ 1284.080784][T13056] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1186'. [ 1284.172151][T10005] usb 3-1: USB disconnect, device number 88 [ 1285.175752][T12213] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.121419][ T9962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1290.164655][ T9962] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1290.200501][ T9962] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1290.211474][ T9962] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1290.216400][ T9962] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1291.548594][T13105] Unknown vers= option specified: 3.0/ [ 1291.548594][T13105] [ 1291.548623][T13105] CIFS: VFS: Unknown vers= option specified: 3.0/ [ 1291.565620][T10005] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1291.715624][T10005] usb 3-1: Using ep0 maxpacket: 16 [ 1291.719526][T10005] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1291.720795][T10005] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.720827][T10005] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1291.720856][T10005] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1291.720893][T10005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.804148][T10005] usb 3-1: config 0 descriptor?? [ 1292.519475][ T5587] Bluetooth: hci5: command tx timeout [ 1292.661278][T10005] uclogic 0003:2179:0077.0023: interface is invalid, ignoring [ 1293.521227][T12221] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.426600][T13127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.427025][T13127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.226980][T10005] usb 3-1: USB disconnect, device number 89 [ 1295.284575][ T5587] Bluetooth: hci5: command tx timeout [ 1295.428310][T12618] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1295.472986][T12618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1295.483359][T12618] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1295.529787][T12618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1295.532774][T12618] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1295.652952][T12618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1298.056507][ T5587] Bluetooth: hci5: command tx timeout [ 1299.609701][T12221] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.775425][T12618] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1299.820146][T12618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1300.129780][ T5587] Bluetooth: hci5: command tx timeout [ 1301.060930][ T9962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1301.114559][ T9962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1301.125974][ T9962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1301.159440][ T9962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1301.161911][ T9962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1303.114562][ T9962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1303.183173][ T9962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1303.214170][ T9962] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1303.215151][ T9962] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1303.248362][ T9962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1303.339703][T10761] Bluetooth: hci0: command tx timeout [ 1303.652977][T13154] smpboot: CPU 1 is now offline [ 1303.864624][T12221] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.084661][T12221] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.408748][ T5587] Bluetooth: hci1: command tx timeout [ 1305.409026][ T5587] Bluetooth: hci0: command tx timeout [ 1305.413279][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.413334][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.002972][T13186] Unknown vers= option specified: 3.0/ [ 1306.002972][T13186] [ 1306.002991][T13186] CIFS: VFS: Unknown vers= option specified: 3.0/ [ 1307.500047][ T5587] Bluetooth: hci1: command tx timeout [ 1307.501769][ T9962] Bluetooth: hci0: command tx timeout [ 1307.956860][ T1247] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1312.608270][T13202] overlayfs: failed to clone upperpath [ 1312.635022][ T9962] Bluetooth: hci0: command tx timeout [ 1312.635050][ T9962] Bluetooth: hci1: command tx timeout [ 1312.951417][ T1247] usb 3-1: device descriptor read/all, error -71 [ 1313.301390][T12221] bridge_slave_1: left allmulticast mode [ 1313.301423][T12221] bridge_slave_1: left promiscuous mode [ 1313.301650][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.316275][T12221] bridge_slave_0: left allmulticast mode [ 1313.316305][T12221] bridge_slave_0: left promiscuous mode [ 1313.327172][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.161457][T12221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.205814][T12221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.253943][T12221] bond0 (unregistering): Released all slaves [ 1314.278501][T13080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.278602][T13080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.278769][T13080] bridge_slave_0: entered allmulticast mode [ 1314.284744][T13080] bridge_slave_0: entered promiscuous mode [ 1314.611874][T13080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.611995][T13080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.612160][T13080] bridge_slave_1: entered allmulticast mode [ 1314.614548][T13080] bridge_slave_1: entered promiscuous mode [ 1314.691414][ T5587] Bluetooth: hci1: command tx timeout [ 1316.620107][T13080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.683103][T13080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1316.949271][T13080] team0: Port device team_slave_0 added [ 1317.006776][T12221] hsr_slave_0: left promiscuous mode [ 1317.007427][T12221] hsr_slave_1: left promiscuous mode [ 1317.011281][T12221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.011304][T12221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.012192][T12221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.012210][T12221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.275183][T12221] veth1_macvtap: left promiscuous mode [ 1317.275271][T12221] veth0_macvtap: left promiscuous mode [ 1317.305011][T12221] veth1_vlan: left promiscuous mode [ 1317.305165][T12221] veth0_vlan: left promiscuous mode [ 1318.446117][T13210] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 1318.601755][T13210] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1318.601801][T13210] usb 3-1: New USB device found, idVendor=07d1, idProduct=3c0f, bcdDevice=f6.b7 [ 1318.604987][T13210] usb 3-1: config 247 has an invalid interface number: 212 but max is 0 [ 1318.605009][T13210] usb 3-1: config 247 contains an unexpected descriptor of type 0x1, skipping [ 1318.605024][T13210] usb 3-1: config 247 contains an unexpected descriptor of type 0x1, skipping [ 1318.605039][T13210] usb 3-1: config 247 has no interface number 0 [ 1318.605073][T13210] usb 3-1: config 247 interface 212 altsetting 127 endpoint 0x9 has an invalid bInterval 168, changing to 4 [ 1318.605094][T13210] usb 3-1: config 247 interface 212 altsetting 127 endpoint 0x9 has invalid maxpacket 64, setting to 0 [ 1318.605115][T13210] usb 3-1: config 247 interface 212 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1318.605133][T13210] usb 3-1: config 247 interface 212 altsetting 127 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 1318.605153][T13210] usb 3-1: config 247 interface 212 altsetting 127 endpoint 0xB has invalid maxpacket 1040, setting to 8 [ 1318.605174][T13210] usb 3-1: config 247 interface 212 altsetting 127 endpoint 0x8 has invalid maxpacket 16, setting to 8 [ 1318.605194][T13210] usb 3-1: config 247 interface 212 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1318.605211][T13210] usb 3-1: config 247 interface 212 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1318.605236][T13210] usb 3-1: config 247 interface 212 altsetting 127 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 1318.605256][T13210] usb 3-1: config 247 interface 212 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 1318.605274][T13210] usb 3-1: config 247 interface 212 altsetting 127 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 1318.605296][T13210] usb 3-1: config 247 interface 212 has no altsetting 0 [ 1318.643338][T12221] team0 (unregistering): Port device team_slave_1 removed [ 1318.692353][T12221] team0 (unregistering): Port device team_slave_0 removed [ 1319.559396][T13080] team0: Port device team_slave_1 added [ 1319.944883][T13138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.945022][T13138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.945195][T13138] bridge_slave_0: entered allmulticast mode [ 1319.950079][T13138] bridge_slave_0: entered promiscuous mode [ 1320.064451][T13138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.064627][T13138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.064903][T13138] bridge_slave_1: entered allmulticast mode [ 1320.070234][T13138] bridge_slave_1: entered promiscuous mode [ 1320.453035][T13080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.453052][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.453081][T13080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.691196][T13080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.691212][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.691233][T13080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.854991][T13138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.193209][T13138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.214944][T13210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.259874][T13210] usb 3-1: can't set config #247, error -71 [ 1321.308004][T13210] usb 3-1: USB disconnect, device number 92 [ 1321.874404][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.874497][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.874640][T13157] bridge_slave_0: entered allmulticast mode [ 1321.876729][T13157] bridge_slave_0: entered promiscuous mode [ 1321.881502][T13138] team0: Port device team_slave_0 added [ 1322.232270][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.232362][T13157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.232579][T13157] bridge_slave_1: entered allmulticast mode [ 1322.239423][T13157] bridge_slave_1: entered promiscuous mode [ 1322.258583][T13138] team0: Port device team_slave_1 added [ 1322.870168][T13080] hsr_slave_0: entered promiscuous mode [ 1322.872824][T13080] hsr_slave_1: entered promiscuous mode [ 1322.873567][T13080] debugfs: 'hsr0' already exists in 'hsr' [ 1322.873587][T13080] Cannot create hsr debugfs directory [ 1322.948635][ T5245] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1323.705869][T13157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.709069][T13138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.709084][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.709105][T13138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.772741][T13157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.775061][T13138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.775075][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.775097][T13138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.353655][T13157] team0: Port device team_slave_0 added [ 1324.520517][T13157] team0: Port device team_slave_1 added [ 1324.758703][T13301] CIFS mount error: No usable UNC path provided in device string! [ 1324.758703][T13301] [ 1324.758907][T13301] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1324.759982][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 1324.912664][T13138] hsr_slave_0: entered promiscuous mode [ 1324.916894][T13138] hsr_slave_1: entered promiscuous mode [ 1324.920468][T13138] debugfs: 'hsr0' already exists in 'hsr' [ 1324.920490][T13138] Cannot create hsr debugfs directory [ 1325.509669][T13157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.509686][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.509708][T13157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.618174][T13157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.618192][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1325.618213][T13157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.351868][T13157] hsr_slave_0: entered promiscuous mode [ 1326.362953][T13157] hsr_slave_1: entered promiscuous mode [ 1326.368160][T13157] debugfs: 'hsr0' already exists in 'hsr' [ 1326.368184][T13157] Cannot create hsr debugfs directory [ 1326.441036][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 1326.510984][T13313] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1327.603437][T13326] FAULT_INJECTION: forcing a failure. [ 1327.603437][T13326] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.603468][T13326] CPU: 0 UID: 0 PID: 13326 Comm: syz.2.1230 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1327.603487][T13326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1327.603498][T13326] Call Trace: [ 1327.603505][T13326] [ 1327.603513][T13326] dump_stack_lvl+0xe8/0x150 [ 1327.603548][T13326] should_fail_ex+0x46b/0x600 [ 1327.603579][T13326] should_failslab+0xa8/0x100 [ 1327.603599][T13326] __kmalloc_noprof+0xfb/0x790 [ 1327.603623][T13326] ? tomoyo_realpath_from_path+0xef/0x640 [ 1327.603651][T13326] ? tomoyo_realpath_from_path+0xef/0x640 [ 1327.603682][T13326] tomoyo_realpath_from_path+0xef/0x640 [ 1327.603716][T13326] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1327.603738][T13326] tomoyo_path_number_perm+0x246/0x5f0 [ 1327.603763][T13326] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1327.603789][T13326] ? register_lock_class+0x31/0x2e0 [ 1327.603849][T13326] ? __pfx_from_kuid+0x10/0x10 [ 1327.603904][T13326] ? rwbase_write_lock+0x550/0x720 [ 1327.603934][T13326] tomoyo_path_chown+0x46/0xc0 [ 1327.603953][T13326] security_path_chown+0x139/0x340 [ 1327.603975][T13326] chown_common+0x3c0/0x640 [ 1327.604007][T13326] ? __pfx_chown_common+0x10/0x10 [ 1327.604040][T13326] ? mnt_get_write_access+0x26a/0x2d0 [ 1327.604071][T13326] do_fchownat+0x14c/0x250 [ 1327.604097][T13326] ? __pfx_do_fchownat+0x10/0x10 [ 1327.604122][T13326] ? __pfx_ksys_write+0x10/0x10 [ 1327.604149][T13326] __x64_sys_lchown+0x85/0xa0 [ 1327.604175][T13326] do_syscall_64+0x166/0x520 [ 1327.604192][T13326] ? trace_irq_disable+0x3b/0x140 [ 1327.604215][T13326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.604232][T13326] ? clear_bhb_loop+0x70/0xc0 [ 1327.604253][T13326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.604270][T13326] RIP: 0033:0x7f3bbcd4e159 [ 1327.604286][T13326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.604301][T13326] RSP: 002b:00007f3bbaf85028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1327.604319][T13326] RAX: ffffffffffffffda RBX: 00007f3bbcfd6090 RCX: 00007f3bbcd4e159 [ 1327.604333][T13326] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000200000000040 [ 1327.604344][T13326] RBP: 00007f3bbaf85090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.604355][T13326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.604365][T13326] R13: 00007f3bbcfd6128 R14: 00007f3bbcfd6090 R15: 00007fffe3b8def8 [ 1327.604392][T13326] [ 1327.614749][T13326] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1328.148615][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1232'. [ 1328.183612][T13341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1232'. [ 1328.334925][ T5245] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1328.988720][T13351] FAULT_INJECTION: forcing a failure. [ 1328.988720][T13351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.988750][T13351] CPU: 0 UID: 0 PID: 13351 Comm: syz.2.1235 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1328.988769][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1328.988779][T13351] Call Trace: [ 1328.988786][T13351] [ 1328.988801][T13351] dump_stack_lvl+0xe8/0x150 [ 1328.988831][T13351] should_fail_ex+0x46b/0x600 [ 1328.988860][T13351] _copy_to_user+0x31/0xb0 [ 1328.988887][T13351] simple_read_from_buffer+0xe1/0x170 [ 1328.988912][T13351] proc_fail_nth_read+0x1be/0x230 [ 1328.988936][T13351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1328.988961][T13351] ? rw_verify_area+0x250/0x4d0 [ 1328.988980][T13351] ? __local_bh_enable+0x1e3/0x2f0 [ 1328.989004][T13351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1328.989025][T13351] vfs_read+0x219/0xa90 [ 1328.989051][T13351] ? __pfx_vfs_read+0x10/0x10 [ 1328.989073][T13351] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1328.989093][T13351] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1328.989111][T13351] ? mutex_lock_nested+0x152/0x1d0 [ 1328.989133][T13351] ? fdget_pos+0x252/0x320 [ 1328.989158][T13351] ksys_read+0x156/0x270 [ 1328.989179][T13351] ? __pfx_ksys_read+0x10/0x10 [ 1328.989199][T13351] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 1328.989305][T13351] do_syscall_64+0x166/0x520 [ 1328.989322][T13351] ? trace_irq_disable+0x3b/0x140 [ 1328.989344][T13351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.989362][T13351] ? clear_bhb_loop+0x70/0xc0 [ 1328.989382][T13351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.989398][T13351] RIP: 0033:0x7f3bbcd0e98e [ 1328.989413][T13351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1328.989427][T13351] RSP: 002b:00007f3bbafa5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1328.989445][T13351] RAX: ffffffffffffffda RBX: 00007f3bbafa66c0 RCX: 00007f3bbcd0e98e [ 1328.989458][T13351] RDX: 000000000000000f RSI: 00007f3bbafa60a0 RDI: 0000000000000006 [ 1328.989468][T13351] RBP: 00007f3bbafa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.989479][T13351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.989492][T13351] R13: 00007f3bbcfd6038 R14: 00007f3bbcfd5fa0 R15: 00007fffe3b8def8 [ 1328.989522][T13351] [ 1329.406529][T13210] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1329.558314][T13210] usb 3-1: Using ep0 maxpacket: 16 [ 1329.559034][T13210] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1329.565247][T13210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.565293][T13210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1329.565314][T13210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1329.566475][T13210] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1329.566494][T13210] usb 3-1: Manufacturer: syz [ 1329.574115][T13210] usb 3-1: config 0 descriptor?? [ 1332.152509][T13210] usb 3-1: USB disconnect, device number 93 [ 1332.735641][T13210] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1332.865555][T13210] usb 3-1: device descriptor read/64, error -71 [ 1333.105849][T13210] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1333.235620][T13210] usb 3-1: device descriptor read/64, error -71 [ 1333.346006][T13210] usb usb3-port1: attempt power cycle [ 1333.685770][T13210] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1333.707518][T13210] usb 3-1: device descriptor read/8, error -71 [ 1333.883980][ T5245] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1333.955558][T13210] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1333.986507][T13210] usb 3-1: device descriptor read/8, error -71 [ 1334.101137][T13210] usb usb3-port1: unable to enumerate USB device [ 1334.461188][T12221] bridge_slave_1: left allmulticast mode [ 1334.461218][T12221] bridge_slave_1: left promiscuous mode [ 1334.461426][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.476773][T12221] bridge_slave_0: left allmulticast mode [ 1334.476802][T12221] bridge_slave_0: left promiscuous mode [ 1334.476980][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.556525][T12221] bridge_slave_1: left allmulticast mode [ 1334.556558][T12221] bridge_slave_1: left promiscuous mode [ 1334.556748][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.569154][T12221] bridge_slave_0: left allmulticast mode [ 1334.569183][T12221] bridge_slave_0: left promiscuous mode [ 1334.569365][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.053223][T12221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.061560][T12221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.069927][T12221] bond0 (unregistering): Released all slaves [ 1335.448353][T12221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1335.469160][T12221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1335.480897][T12221] bond0 (unregistering): Released all slaves [ 1336.456873][ T5245] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1336.472694][T12221] hsr_slave_0: left promiscuous mode [ 1336.474199][T12221] hsr_slave_1: left promiscuous mode [ 1336.475052][T12221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.692612][T12221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.732568][T12221] hsr_slave_0: left promiscuous mode [ 1339.733223][T12221] hsr_slave_1: left promiscuous mode [ 1339.734035][T12221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.734645][T12221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.195624][T13413] netlink: 'syz.0.1246': attribute type 83 has an invalid length. [ 1341.628548][T12221] team0 (unregistering): Port device team_slave_1 removed [ 1341.649978][T12221] team0 (unregistering): Port device team_slave_0 removed [ 1342.042674][T12221] team0 (unregistering): Port device team_slave_1 removed [ 1342.063275][T12221] team0 (unregistering): Port device team_slave_0 removed [ 1342.659157][T13424] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1249'. [ 1343.798725][T13437] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1252'. [ 1343.863908][ T1247] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1344.015670][ T1247] usb 3-1: Using ep0 maxpacket: 16 [ 1344.016366][ T1247] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1344.017728][ T1247] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.017750][ T1247] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1344.017773][ T1247] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1344.017800][ T1247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.047865][ T1247] usb 3-1: config 0 descriptor?? [ 1344.524940][ T1247] uclogic 0003:2179:0077.0024: interface is invalid, ignoring [ 1346.235574][T13450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.236029][T13450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.396636][ T5245] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1399.080237][T13452] syz.0.1254: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1399.080642][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1399.080672][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1399.080684][T13452] Call Trace: [ 1399.080691][T13452] [ 1399.080700][T13452] dump_stack_lvl+0xe8/0x150 [ 1399.080732][T13452] warn_alloc+0x24d/0x270 [ 1399.080762][T13452] ? __pfx_warn_alloc+0x10/0x10 [ 1399.080795][T13452] ? wake_all_kswapds+0x167/0x280 [ 1399.080830][T13452] __alloc_pages_slowpath+0xefe/0xf80 [ 1399.080873][T13452] __alloc_frozen_pages_noprof+0x421/0x5c0 [ 1399.080903][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1399.080933][T13452] ? __pfx_policy_nodemask+0x10/0x10 [ 1399.080960][T13452] alloc_pages_mpol+0xd4/0x280 [ 1399.080982][T13452] allocate_slab+0x135/0x620 [ 1399.081001][T13452] ? kfree+0x1c5/0x6d0 [ 1399.081024][T13452] ___slab_alloc+0x16e/0x920 [ 1399.081046][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1399.081072][T13452] ? skb_clone+0x212/0x3a0 [ 1399.081094][T13452] kmem_cache_alloc_noprof+0xec/0x690 [ 1399.081116][T13452] ? skb_clone+0x212/0x3a0 [ 1399.081135][T13452] ? skb_clone+0x212/0x3a0 [ 1399.081160][T13452] skb_clone+0x212/0x3a0 [ 1399.081183][T13452] bpf_clone_redirect+0x170/0x4b0 [ 1399.081306][T13452] ? bpf_test_run+0x1d1/0x830 [ 1399.081329][T13452] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1399.081360][T13452] ? irqentry_exit+0x218/0x910 [ 1399.081382][T13452] ? lock_acquire+0x115/0x350 [ 1399.081410][T13452] ? __local_bh_enable+0x1e3/0x2f0 [ 1399.081435][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1399.081459][T13452] ? rcu_is_watching+0x16/0xb0 [ 1399.081484][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1399.081507][T13452] ? bpf_test_timer_continue+0x10c/0x320 [ 1399.081533][T13452] bpf_test_run+0x354/0x830 [ 1399.081572][T13452] ? __pfx_bpf_test_run+0x10/0x10 [ 1399.081616][T13452] ? skb_dst_set+0x72/0x140 [ 1399.081640][T13452] bpf_prog_test_run_skb+0xe35/0x2230 [ 1399.081685][T13452] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1399.081708][T13452] bpf_prog_test_run+0x2cb/0x340 [ 1399.081738][T13452] __sys_bpf+0xa22/0xd90 [ 1399.081770][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 1399.081798][T13452] ? do_futex+0x3e7/0x4e0 [ 1399.081850][T13452] ? rcu_is_watching+0x16/0xb0 [ 1399.081881][T13452] __x64_sys_bpf+0xba/0xd0 [ 1399.081906][T13452] do_syscall_64+0x166/0x520 [ 1399.081924][T13452] ? trace_irq_disable+0x3b/0x140 [ 1399.081946][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.081964][T13452] ? clear_bhb_loop+0x70/0xc0 [ 1399.081985][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.082001][T13452] RIP: 0033:0x7f5a9e86e159 [ 1399.082018][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1399.082033][T13452] RSP: 002b:00007f5a9cac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1399.082051][T13452] RAX: ffffffffffffffda RBX: 00007f5a9eaf5fa0 RCX: 00007f5a9e86e159 [ 1399.082063][T13452] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1399.082075][T13452] RBP: 00007f5a9e90506b R08: 0000000000000000 R09: 0000000000000000 [ 1399.082085][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.082096][T13452] R13: 00007f5a9eaf6038 R14: 00007f5a9eaf5fa0 R15: 00007ffea2bdfc18 [ 1399.082123][T13452] [ 1399.082133][T13452] Mem-Info: [ 1399.082141][T13452] active_anon:5938 inactive_anon:66462 isolated_anon:0 [ 1399.082141][T13452] active_file:27367 inactive_file:35194 isolated_file:0 [ 1399.082141][T13452] unevictable:0 dirty:159 writeback:0 [ 1399.082141][T13452] slab_reclaimable:12331 slab_unreclaimable:1335227 [ 1399.082141][T13452] mapped:35965 shmem:66073 pagetables:1683 [ 1399.082141][T13452] sec_pagetables:0 bounce:0 [ 1399.082141][T13452] kernel_misc_reclaimable:0 [ 1399.082141][T13452] free:3383 free_pcp:3394 free_cma:0 [ 1399.082187][T13452] Node 0 active_anon:23752kB inactive_anon:265848kB active_file:109228kB inactive_file:140724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143860kB dirty:636kB writeback:0kB shmem:264292kB kernel_stack:14048kB pagetables:6516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1399.082228][T13452] Node 1 active_anon:0kB inactive_anon:0kB active_file:240kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:96kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1399.082265][T13452] Node 0 DMA free:9908kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1399.082310][T13452] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1399.082341][T13452] Node 0 DMA32 free:1424kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23752kB inactive_anon:265848kB active_file:109228kB inactive_file:140724kB unevictable:0kB writepending:636kB zspages:3008kB present:3129332kB managed:2559012kB mlocked:0kB bounce:0kB free_pcp:4460kB local_pcp:4460kB free_cma:0kB [ 1399.082389][T13452] lowmem_reserve[]: 0 0 1 1 1 [ 1399.082418][T13452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1399.082463][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1399.082491][T13452] Node 1 Normal free:2200kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:240kB inactive_file:52kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:8980kB local_pcp:8980kB free_cma:0kB [ 1399.082539][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1399.082567][T13452] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9908kB [ 1399.082688][T13452] Node 0 DMA32: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 1*128kB (M) 1*256kB (M) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1416kB [ 1399.082785][T13452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1399.082871][T13452] Node 1 Normal: 2*4kB (UM) 0*8kB 1*16kB (M) 0*32kB 2*64kB (UM) 0*128kB 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 2200kB [ 1399.082981][T13452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1399.082995][T13452] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1399.083009][T13452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1399.083022][T13452] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1399.083036][T13452] 128620 total pagecache pages [ 1399.083045][T13452] 0 pages in swap cache [ 1399.083051][T13452] Free swap = 97384kB [ 1399.083058][T13452] Total swap = 124996kB [ 1399.083065][T13452] 2097051 pages RAM [ 1399.083071][T13452] 0 pages HighMem/MovableOnly [ 1399.083078][T13452] 425230 pages reserved [ 1399.083084][T13452] 0 pages cma reserved [ 1399.083195][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083213][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083230][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.083244][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.083311][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083327][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083343][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.083356][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.083405][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083419][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083435][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.083448][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.083496][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083511][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083527][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.083540][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.083594][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083609][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083625][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.083638][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.083686][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083700][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083716][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.083729][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.083777][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083791][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083807][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.083828][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.083875][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083890][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083905][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.083919][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.083966][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.083980][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.083996][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.084009][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1399.084057][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1399.084071][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1399.084087][T13452] node 0: slabs: 13019, objs: 156228, free: 0 [ 1399.084100][T13452] node 1: slabs: 39036, objs: 468432, free: 8 [ 1404.085418][T13452] slab_out_of_memory: 438937 callbacks suppressed [ 1404.085438][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1404.085456][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1404.085474][T13452] node 0: slabs: 14364, objs: 172368, free: 0 [ 1404.085489][T13452] node 1: slabs: 39415, objs: 472980, free: 33 [ 1404.085514][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1404.085530][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1404.085546][T13452] node 0: slabs: 561, objs: 8928, free: 0 [ 1404.085560][T13452] node 1: slabs: 29, objs: 464, free: 28 [ 1404.085577][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1404.085593][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1404.085609][T13452] node 0: slabs: 561, objs: 8928, free: 0 [ 1404.085622][T13452] node 1: slabs: 29, objs: 464, free: 28 [ 1404.085640][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1404.085655][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1404.085670][T13452] node 0: slabs: 14364, objs: 172368, free: 0 [ 1404.085683][T13452] node 1: slabs: 39415, objs: 472980, free: 33 [ 1404.085708][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1404.085724][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1404.085739][T13452] node 0: slabs: 561, objs: 8928, free: 0 [ 1404.085752][T13452] node 1: slabs: 29, objs: 464, free: 28 [ 1404.085769][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1404.085785][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1404.085800][T13452] node 0: slabs: 561, objs: 8928, free: 0 [ 1404.085813][T13452] node 1: slabs: 29, objs: 464, free: 28 [ 1404.085831][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1404.085845][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1404.085860][T13452] node 0: slabs: 14364, objs: 172368, free: 0 [ 1404.085873][T13452] node 1: slabs: 39415, objs: 472980, free: 33 [ 1404.085897][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1404.085913][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1404.085928][T13452] node 0: slabs: 561, objs: 8928, free: 0 [ 1404.085940][T13452] node 1: slabs: 29, objs: 464, free: 28 [ 1404.085958][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1404.085973][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1404.085988][T13452] node 0: slabs: 561, objs: 8928, free: 0 [ 1404.086001][T13452] node 1: slabs: 29, objs: 464, free: 28 [ 1404.086019][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1404.086033][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1404.086048][T13452] node 0: slabs: 14364, objs: 172368, free: 0 [ 1404.086061][T13452] node 1: slabs: 39415, objs: 472980, free: 33 [ 1409.085414][T13452] warn_alloc: 935408 callbacks suppressed [ 1409.085436][T13452] syz.0.1254: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1409.085491][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1409.085510][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1409.085521][T13452] Call Trace: [ 1409.085531][T13452] [ 1409.085541][T13452] dump_stack_lvl+0xe8/0x150 [ 1409.085572][T13452] warn_alloc+0x24d/0x270 [ 1409.085603][T13452] ? __pfx_warn_alloc+0x10/0x10 [ 1409.085635][T13452] ? wake_all_kswapds+0x167/0x280 [ 1409.085662][T13452] __alloc_pages_slowpath+0xefe/0xf80 [ 1409.085705][T13452] __alloc_frozen_pages_noprof+0x421/0x5c0 [ 1409.085742][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1409.085772][T13452] ? __pfx_policy_nodemask+0x10/0x10 [ 1409.085788][T13452] ? ___slab_alloc+0x873/0x920 [ 1409.085809][T13452] ? rcu_is_watching+0x16/0xb0 [ 1409.085839][T13452] alloc_pages_mpol+0xd4/0x280 [ 1409.085860][T13452] allocate_slab+0x135/0x620 [ 1409.085883][T13452] ___slab_alloc+0x16e/0x920 [ 1409.085905][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1409.085934][T13452] __kmalloc_flags_noprof+0x2ef/0x810 [ 1409.085960][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1409.085982][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1409.086010][T13452] __alloc_empty_sheaf+0x28/0x40 [ 1409.086032][T13452] __pcs_replace_empty_main+0x479/0x690 [ 1409.086052][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1409.086080][T13452] kmem_cache_alloc_noprof+0x45d/0x690 [ 1409.086103][T13452] ? skb_clone+0x212/0x3a0 [ 1409.086122][T13452] ? skb_clone+0x212/0x3a0 [ 1409.086147][T13452] skb_clone+0x212/0x3a0 [ 1409.086171][T13452] bpf_clone_redirect+0x170/0x4b0 [ 1409.086202][T13452] ? bpf_test_run+0x1d1/0x830 [ 1409.086224][T13452] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1409.086253][T13452] ? irqentry_exit+0x218/0x910 [ 1409.086271][T13452] ? lockdep_hardirqs_on+0x7b/0x110 [ 1409.086291][T13452] ? lock_acquire+0x115/0x350 [ 1409.086319][T13452] ? __local_bh_enable+0x1e3/0x2f0 [ 1409.086343][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1409.086366][T13452] ? rcu_is_watching+0x16/0xb0 [ 1409.086390][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1409.086414][T13452] ? bpf_test_timer_continue+0x10c/0x320 [ 1409.086440][T13452] bpf_test_run+0x354/0x830 [ 1409.086479][T13452] ? __pfx_bpf_test_run+0x10/0x10 [ 1409.086523][T13452] ? skb_dst_set+0x72/0x140 [ 1409.086547][T13452] bpf_prog_test_run_skb+0xe35/0x2230 [ 1409.086592][T13452] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1409.086615][T13452] bpf_prog_test_run+0x2cb/0x340 [ 1409.086635][T13452] __sys_bpf+0xa22/0xd90 [ 1409.086667][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 1409.086695][T13452] ? do_futex+0x3e7/0x4e0 [ 1409.086742][T13452] ? rcu_is_watching+0x16/0xb0 [ 1409.086773][T13452] __x64_sys_bpf+0xba/0xd0 [ 1409.086799][T13452] do_syscall_64+0x166/0x520 [ 1409.086817][T13452] ? trace_irq_disable+0x3b/0x140 [ 1409.086840][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.086857][T13452] ? clear_bhb_loop+0x70/0xc0 [ 1409.086878][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.086895][T13452] RIP: 0033:0x7f5a9e86e159 [ 1409.086912][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.086927][T13452] RSP: 002b:00007f5a9cac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1409.086944][T13452] RAX: ffffffffffffffda RBX: 00007f5a9eaf5fa0 RCX: 00007f5a9e86e159 [ 1409.086956][T13452] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1409.086968][T13452] RBP: 00007f5a9e90506b R08: 0000000000000000 R09: 0000000000000000 [ 1409.086979][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.086989][T13452] R13: 00007f5a9eaf6038 R14: 00007f5a9eaf5fa0 R15: 00007ffea2bdfc18 [ 1409.087016][T13452] [ 1409.087023][T13452] Mem-Info: [ 1409.087031][T13452] active_anon:5938 inactive_anon:66371 isolated_anon:32 [ 1409.087031][T13452] active_file:27232 inactive_file:35098 isolated_file:0 [ 1409.087031][T13452] unevictable:0 dirty:159 writeback:0 [ 1409.087031][T13452] slab_reclaimable:12331 slab_unreclaimable:1338322 [ 1409.087031][T13452] mapped:35965 shmem:66008 pagetables:1683 [ 1409.087031][T13452] sec_pagetables:0 bounce:0 [ 1409.087031][T13452] kernel_misc_reclaimable:0 [ 1409.087031][T13452] free:2852 free_pcp:1113 free_cma:0 [ 1409.087074][T13452] Node 0 active_anon:23752kB inactive_anon:265484kB active_file:108852kB inactive_file:140344kB unevictable:0kB isolated(anon):128kB isolated(file):0kB mapped:143860kB dirty:636kB writeback:0kB shmem:264032kB kernel_stack:14048kB pagetables:6516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1409.087115][T13452] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:96kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1409.087152][T13452] Node 0 DMA free:9908kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1409.087198][T13452] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1409.087229][T13452] Node 0 DMA32 free:0kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23752kB inactive_anon:265484kB active_file:108852kB inactive_file:140344kB unevictable:0kB writepending:636kB zspages:3008kB present:3129332kB managed:2559012kB mlocked:0kB bounce:0kB free_pcp:1952kB local_pcp:1952kB free_cma:0kB [ 1409.087278][T13452] lowmem_reserve[]: 0 0 1 1 1 [ 1409.087306][T13452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1409.087351][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1409.087379][T13452] Node 1 Normal free:1500kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:2048kB free_highatomic:1024kB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2364kB local_pcp:2364kB free_cma:0kB [ 1409.087427][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1409.087455][T13452] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9908kB [ 1409.087573][T13452] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1409.087653][T13452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1409.087739][T13452] Node 1 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 1*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 1480kB [ 1409.087842][T13452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.087856][T13452] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1409.087869][T13452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1409.087883][T13452] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1409.087896][T13452] 128347 total pagecache pages [ 1409.087902][T13452] 0 pages in swap cache [ 1409.087908][T13452] Free swap = 97092kB [ 1409.087919][T13452] Total swap = 124996kB [ 1409.087926][T13452] 2097051 pages RAM [ 1409.087932][T13452] 0 pages HighMem/MovableOnly [ 1409.087938][T13452] 425230 pages reserved [ 1409.087945][T13452] 0 pages cma reserved [ 1409.095422][T13452] slab_out_of_memory: 497274 callbacks suppressed [ 1409.095433][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1409.095450][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1409.095468][T13452] node 0: slabs: 752, objs: 10456, free: 0 [ 1409.095482][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1409.095501][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1409.095515][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1409.095531][T13452] node 0: slabs: 14645, objs: 175740, free: 0 [ 1409.095545][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1409.095570][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1409.095586][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1409.095602][T13452] node 0: slabs: 752, objs: 10456, free: 0 [ 1409.095614][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1409.095633][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1409.095648][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1409.095664][T13452] node 0: slabs: 752, objs: 10456, free: 0 [ 1409.095677][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1409.095695][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1409.095709][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1409.095725][T13452] node 0: slabs: 14645, objs: 175740, free: 0 [ 1409.095744][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1409.095769][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1409.095785][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1409.095800][T13452] node 0: slabs: 752, objs: 10456, free: 0 [ 1409.095813][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1409.095831][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1409.095847][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1409.095862][T13452] node 0: slabs: 752, objs: 10456, free: 0 [ 1409.095875][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1409.095893][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1409.095907][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1409.095923][T13452] node 0: slabs: 14645, objs: 175740, free: 0 [ 1409.095936][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1409.095962][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1409.095977][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1409.095992][T13452] node 0: slabs: 752, objs: 10456, free: 0 [ 1409.096005][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1409.096024][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1409.096039][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1409.096055][T13452] node 0: slabs: 752, objs: 10456, free: 0 [ 1409.096068][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1414.105410][T13452] slab_out_of_memory: 413374 callbacks suppressed [ 1414.105430][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1414.105449][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1414.105467][T13452] node 0: slabs: 1169, objs: 13792, free: 0 [ 1414.105481][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1414.105501][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1414.105517][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1414.105532][T13452] node 0: slabs: 1169, objs: 13792, free: 0 [ 1414.105546][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1414.105564][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1414.105579][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1414.105595][T13452] node 0: slabs: 15749, objs: 188988, free: 0 [ 1414.105609][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1414.105634][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1414.105650][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1414.105666][T13452] node 0: slabs: 1169, objs: 13792, free: 0 [ 1414.105679][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1414.105697][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1414.105713][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1414.105728][T13452] node 0: slabs: 1169, objs: 13792, free: 0 [ 1414.105741][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1414.105759][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1414.105773][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1414.105789][T13452] node 0: slabs: 15749, objs: 188988, free: 0 [ 1414.105802][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1414.105827][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1414.105843][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1414.105859][T13452] node 0: slabs: 1169, objs: 13792, free: 0 [ 1414.105872][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1414.105890][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1414.105905][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1414.105921][T13452] node 0: slabs: 1169, objs: 13792, free: 0 [ 1414.105933][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1414.105951][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1414.105966][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1414.105981][T13452] node 0: slabs: 15749, objs: 188988, free: 0 [ 1414.105994][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1414.106019][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1414.106035][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1414.106051][T13452] node 0: slabs: 1169, objs: 13792, free: 0 [ 1414.106064][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1419.095415][T13452] warn_alloc: 746080 callbacks suppressed [ 1419.095438][T13452] syz.0.1254: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1419.095494][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1419.095513][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1419.095523][T13452] Call Trace: [ 1419.095533][T13452] [ 1419.095544][T13452] dump_stack_lvl+0xe8/0x150 [ 1419.095576][T13452] warn_alloc+0x24d/0x270 [ 1419.095606][T13452] ? __pfx_warn_alloc+0x10/0x10 [ 1419.095638][T13452] ? wake_all_kswapds+0x167/0x280 [ 1419.095664][T13452] __alloc_pages_slowpath+0xefe/0xf80 [ 1419.095708][T13452] __alloc_frozen_pages_noprof+0x421/0x5c0 [ 1419.095738][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1419.095768][T13452] ? __pfx_policy_nodemask+0x10/0x10 [ 1419.095785][T13452] ? ___slab_alloc+0x873/0x920 [ 1419.095803][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1419.095831][T13452] ? rcu_is_watching+0x16/0xb0 [ 1419.095862][T13452] alloc_pages_mpol+0xd4/0x280 [ 1419.095883][T13452] allocate_slab+0x135/0x620 [ 1419.095907][T13452] ___slab_alloc+0x16e/0x920 [ 1419.095929][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1419.095954][T13452] ? skb_clone+0x212/0x3a0 [ 1419.095975][T13452] kmem_cache_alloc_noprof+0xec/0x690 [ 1419.095998][T13452] ? ktime_get+0x45/0x220 [ 1419.096050][T13452] ? skb_clone+0x212/0x3a0 [ 1419.096069][T13452] ? skb_clone+0x212/0x3a0 [ 1419.096094][T13452] skb_clone+0x212/0x3a0 [ 1419.096117][T13452] bpf_clone_redirect+0x170/0x4b0 [ 1419.096149][T13452] ? bpf_test_run+0x1d1/0x830 [ 1419.096171][T13452] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1419.096195][T13452] ? irqentry_exit+0x218/0x910 [ 1419.096213][T13452] ? lockdep_hardirqs_on+0x7b/0x110 [ 1419.096230][T13452] ? irqentry_exit+0x218/0x910 [ 1419.096246][T13452] ? trace_irq_disable+0x3b/0x140 [ 1419.096277][T13452] ? lock_acquire+0x115/0x350 [ 1419.096305][T13452] ? __local_bh_enable+0x1e3/0x2f0 [ 1419.096329][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1419.096353][T13452] ? rcu_is_watching+0x16/0xb0 [ 1419.096377][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1419.096401][T13452] ? bpf_test_timer_continue+0x10c/0x320 [ 1419.096426][T13452] bpf_test_run+0x354/0x830 [ 1419.096465][T13452] ? __pfx_bpf_test_run+0x10/0x10 [ 1419.096509][T13452] ? skb_dst_set+0x72/0x140 [ 1419.096533][T13452] bpf_prog_test_run_skb+0xe35/0x2230 [ 1419.096579][T13452] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1419.096602][T13452] bpf_prog_test_run+0x2cb/0x340 [ 1419.096622][T13452] __sys_bpf+0xa22/0xd90 [ 1419.096655][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 1419.096683][T13452] ? do_futex+0x3e7/0x4e0 [ 1419.096724][T13452] ? rcu_is_watching+0x16/0xb0 [ 1419.096756][T13452] __x64_sys_bpf+0xba/0xd0 [ 1419.096781][T13452] do_syscall_64+0x166/0x520 [ 1419.096800][T13452] ? trace_irq_disable+0x3b/0x140 [ 1419.096828][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.096846][T13452] ? clear_bhb_loop+0x70/0xc0 [ 1419.096867][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.096884][T13452] RIP: 0033:0x7f5a9e86e159 [ 1419.096902][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.096917][T13452] RSP: 002b:00007f5a9cac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1419.096934][T13452] RAX: ffffffffffffffda RBX: 00007f5a9eaf5fa0 RCX: 00007f5a9e86e159 [ 1419.096947][T13452] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1419.096958][T13452] RBP: 00007f5a9e90506b R08: 0000000000000000 R09: 0000000000000000 [ 1419.096969][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.096979][T13452] R13: 00007f5a9eaf6038 R14: 00007f5a9eaf5fa0 R15: 00007ffea2bdfc18 [ 1419.097006][T13452] [ 1419.097013][T13452] Mem-Info: [ 1419.097022][T13452] active_anon:5861 inactive_anon:65522 isolated_anon:28 [ 1419.097022][T13452] active_file:26245 inactive_file:34643 isolated_file:0 [ 1419.097022][T13452] unevictable:0 dirty:159 writeback:0 [ 1419.097022][T13452] slab_reclaimable:12331 slab_unreclaimable:1340616 [ 1419.097022][T13452] mapped:35965 shmem:65098 pagetables:1683 [ 1419.097022][T13452] sec_pagetables:0 bounce:0 [ 1419.097022][T13452] kernel_misc_reclaimable:0 [ 1419.097022][T13452] free:3207 free_pcp:825 free_cma:0 [ 1419.097065][T13452] Node 0 active_anon:23444kB inactive_anon:262088kB active_file:104904kB inactive_file:138524kB unevictable:0kB isolated(anon):112kB isolated(file):0kB mapped:143860kB dirty:636kB writeback:0kB shmem:260392kB kernel_stack:14048kB pagetables:6516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1419.097105][T13452] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:96kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1419.097142][T13452] Node 0 DMA free:9908kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1419.097188][T13452] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1419.097218][T13452] Node 0 DMA32 free:1420kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:2048kB free_highatomic:0kB active_anon:23444kB inactive_anon:262088kB active_file:104904kB inactive_file:138524kB unevictable:0kB writepending:636kB zspages:3008kB present:3129332kB managed:2559012kB mlocked:0kB bounce:0kB free_pcp:964kB local_pcp:964kB free_cma:0kB [ 1419.097268][T13452] lowmem_reserve[]: 0 0 1 1 1 [ 1419.097296][T13452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1419.097341][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1419.097369][T13452] Node 1 Normal free:1500kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:2048kB free_highatomic:1024kB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2200kB local_pcp:2200kB free_cma:0kB [ 1419.097416][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1419.097444][T13452] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9908kB [ 1419.097562][T13452] Node 0 DMA32: 1*4kB (M) 0*8kB 1*16kB (M) 1*32kB (M) 1*64kB (M) 0*128kB 3*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1396kB [ 1419.097668][T13452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1419.097749][T13452] Node 1 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 1*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 1480kB [ 1419.097856][T13452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.097870][T13452] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1419.097883][T13452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1419.097896][T13452] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1419.097910][T13452] 125994 total pagecache pages [ 1419.097921][T13452] 0 pages in swap cache [ 1419.097927][T13452] Free swap = 93388kB [ 1419.097934][T13452] Total swap = 124996kB [ 1419.097941][T13452] 2097051 pages RAM [ 1419.097948][T13452] 0 pages HighMem/MovableOnly [ 1419.097954][T13452] 425230 pages reserved [ 1419.097960][T13452] 0 pages cma reserved [ 1419.115408][T13452] slab_out_of_memory: 333773 callbacks suppressed [ 1419.115421][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1419.115438][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1419.115455][T13452] node 0: slabs: 17947, objs: 215364, free: 0 [ 1419.115470][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1419.115496][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1419.115512][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1419.115528][T13452] node 0: slabs: 1231, objs: 14304, free: 0 [ 1419.115542][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1419.115560][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1419.115576][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1419.115592][T13452] node 0: slabs: 1231, objs: 14304, free: 0 [ 1419.115605][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1419.115623][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1419.115638][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1419.115653][T13452] node 0: slabs: 17947, objs: 215364, free: 0 [ 1419.115667][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1419.115692][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1419.115707][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1419.115723][T13452] node 0: slabs: 1231, objs: 14304, free: 0 [ 1419.115736][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1419.115755][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1419.115770][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1419.115786][T13452] node 0: slabs: 1231, objs: 14304, free: 0 [ 1419.115799][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1419.115849][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1419.115863][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1419.115879][T13452] node 0: slabs: 17947, objs: 215364, free: 0 [ 1419.115892][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1419.115917][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1419.115933][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1419.115948][T13452] node 0: slabs: 1231, objs: 14304, free: 0 [ 1419.115961][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1419.115979][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1419.115994][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1419.116010][T13452] node 0: slabs: 1231, objs: 14304, free: 0 [ 1419.116022][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1419.116040][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1419.116054][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1419.116070][T13452] node 0: slabs: 17947, objs: 215364, free: 0 [ 1419.116083][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1424.125409][T13452] slab_out_of_memory: 317192 callbacks suppressed [ 1424.125434][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1424.125451][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1424.125468][T13452] node 0: slabs: 20109, objs: 241308, free: 0 [ 1424.125483][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1424.125509][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1424.125525][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1424.125541][T13452] node 0: slabs: 1704, objs: 18096, free: 0 [ 1424.125554][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1424.125572][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1424.125588][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1424.125622][T13452] node 0: slabs: 1704, objs: 18096, free: 0 [ 1424.125636][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1424.125655][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1424.125669][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1424.125685][T13452] node 0: slabs: 20109, objs: 241308, free: 0 [ 1424.125698][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1424.125724][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1424.125740][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1424.125756][T13452] node 0: slabs: 1704, objs: 18096, free: 0 [ 1424.125769][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1424.125787][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1424.125802][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1424.125818][T13452] node 0: slabs: 1704, objs: 18096, free: 0 [ 1424.125831][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1424.125849][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1424.125863][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1424.125879][T13452] node 0: slabs: 20109, objs: 241308, free: 0 [ 1424.125892][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1424.125917][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1424.125933][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1424.125948][T13452] node 0: slabs: 1704, objs: 18096, free: 0 [ 1424.125962][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1424.125980][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1424.125995][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1424.126011][T13452] node 0: slabs: 1704, objs: 18096, free: 0 [ 1424.126023][T13452] node 1: slabs: 39, objs: 624, free: 5 [ 1424.126041][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1424.126055][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1424.126071][T13452] node 0: slabs: 20109, objs: 241308, free: 0 [ 1424.126084][T13452] node 1: slabs: 39604, objs: 475248, free: 26 [ 1429.105418][T13452] warn_alloc: 567977 callbacks suppressed [ 1429.105439][T13452] syz.0.1254: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1429.105492][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1429.105511][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1429.105523][T13452] Call Trace: [ 1429.105530][T13452] [ 1429.105539][T13452] dump_stack_lvl+0xe8/0x150 [ 1429.105572][T13452] warn_alloc+0x24d/0x270 [ 1429.105602][T13452] ? __pfx_warn_alloc+0x10/0x10 [ 1429.105634][T13452] ? wake_all_kswapds+0x167/0x280 [ 1429.105660][T13452] __alloc_pages_slowpath+0xefe/0xf80 [ 1429.105703][T13452] __alloc_frozen_pages_noprof+0x421/0x5c0 [ 1429.105733][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1429.105763][T13452] ? __pfx_policy_nodemask+0x10/0x10 [ 1429.105779][T13452] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1429.105810][T13452] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1429.105836][T13452] alloc_pages_mpol+0xd4/0x280 [ 1429.105864][T13452] allocate_slab+0x135/0x620 [ 1429.105887][T13452] ___slab_alloc+0x16e/0x920 [ 1429.105909][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1429.105937][T13452] __kmalloc_flags_noprof+0x2ef/0x810 [ 1429.105963][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1429.105984][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1429.106012][T13452] __alloc_empty_sheaf+0x28/0x40 [ 1429.106035][T13452] __pcs_replace_empty_main+0x479/0x690 [ 1429.106055][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1429.106082][T13452] __kmalloc_flags_noprof+0x67e/0x810 [ 1429.106108][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1429.106129][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1429.106157][T13452] __alloc_empty_sheaf+0x28/0x40 [ 1429.106179][T13452] __pcs_replace_empty_main+0x479/0x690 [ 1429.106199][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1429.106226][T13452] kmem_cache_alloc_noprof+0x45d/0x690 [ 1429.106249][T13452] ? skb_clone+0x212/0x3a0 [ 1429.106269][T13452] ? skb_clone+0x212/0x3a0 [ 1429.106294][T13452] skb_clone+0x212/0x3a0 [ 1429.106317][T13452] bpf_clone_redirect+0x170/0x4b0 [ 1429.106348][T13452] ? bpf_test_run+0x1d1/0x830 [ 1429.106370][T13452] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1429.106400][T13452] ? irqentry_exit+0x218/0x910 [ 1429.106422][T13452] ? lock_acquire+0x115/0x350 [ 1429.106450][T13452] ? __local_bh_enable+0x1e3/0x2f0 [ 1429.106475][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1429.106498][T13452] ? rcu_is_watching+0x16/0xb0 [ 1429.106523][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1429.106547][T13452] ? bpf_test_timer_continue+0x10c/0x320 [ 1429.106573][T13452] bpf_test_run+0x354/0x830 [ 1429.106612][T13452] ? __pfx_bpf_test_run+0x10/0x10 [ 1429.106655][T13452] ? skb_dst_set+0x72/0x140 [ 1429.106679][T13452] bpf_prog_test_run_skb+0xe35/0x2230 [ 1429.106725][T13452] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1429.106747][T13452] bpf_prog_test_run+0x2cb/0x340 [ 1429.106766][T13452] __sys_bpf+0xa22/0xd90 [ 1429.106799][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 1429.106827][T13452] ? do_futex+0x3e7/0x4e0 [ 1429.106872][T13452] ? rcu_is_watching+0x16/0xb0 [ 1429.106904][T13452] __x64_sys_bpf+0xba/0xd0 [ 1429.106929][T13452] do_syscall_64+0x166/0x520 [ 1429.106946][T13452] ? trace_irq_disable+0x3b/0x140 [ 1429.106969][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.106986][T13452] ? clear_bhb_loop+0x70/0xc0 [ 1429.107007][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.107024][T13452] RIP: 0033:0x7f5a9e86e159 [ 1429.107041][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.107055][T13452] RSP: 002b:00007f5a9cac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1429.107072][T13452] RAX: ffffffffffffffda RBX: 00007f5a9eaf5fa0 RCX: 00007f5a9e86e159 [ 1429.107085][T13452] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1429.107096][T13452] RBP: 00007f5a9e90506b R08: 0000000000000000 R09: 0000000000000000 [ 1429.107107][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.107118][T13452] R13: 00007f5a9eaf6038 R14: 00007f5a9eaf5fa0 R15: 00007ffea2bdfc18 [ 1429.107145][T13452] [ 1429.107152][T13452] Mem-Info: [ 1429.107160][T13452] active_anon:5793 inactive_anon:64757 isolated_anon:0 [ 1429.107160][T13452] active_file:25329 inactive_file:29072 isolated_file:32 [ 1429.107160][T13452] unevictable:0 dirty:159 writeback:0 [ 1429.107160][T13452] slab_reclaimable:12331 slab_unreclaimable:1347142 [ 1429.107160][T13452] mapped:35965 shmem:64253 pagetables:1683 [ 1429.107160][T13452] sec_pagetables:0 bounce:0 [ 1429.107160][T13452] kernel_misc_reclaimable:0 [ 1429.107160][T13452] free:3016 free_pcp:1809 free_cma:0 [ 1429.107203][T13452] Node 0 active_anon:23172kB inactive_anon:259028kB active_file:101240kB inactive_file:116240kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:143860kB dirty:636kB writeback:0kB shmem:257012kB kernel_stack:14048kB pagetables:6516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1429.107244][T13452] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:96kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1429.107281][T13452] Node 0 DMA free:10000kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.107326][T13452] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1429.107357][T13452] Node 0 DMA32 free:840kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:4096kB free_highatomic:632kB active_anon:23172kB inactive_anon:259028kB active_file:101240kB inactive_file:116240kB unevictable:0kB writepending:636kB zspages:3008kB present:3129332kB managed:2559012kB mlocked:0kB bounce:0kB free_pcp:4856kB local_pcp:4856kB free_cma:0kB [ 1429.107406][T13452] lowmem_reserve[]: 0 0 1 1 1 [ 1429.107434][T13452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.107479][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1429.107507][T13452] Node 1 Normal free:1224kB boost:21876kB min:28244kB low:32352kB high:36460kB reserved_highatomic:2048kB free_highatomic:1208kB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2380kB local_pcp:2380kB free_cma:0kB [ 1429.107556][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1429.107583][T13452] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10000kB [ 1429.107692][T13452] Node 0 DMA32: 3*4kB (MH) 0*8kB 1*16kB (H) 1*32kB (H) 2*64kB (MH) 1*128kB (M) 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 828kB [ 1429.107797][T13452] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1429.107888][T13452] Node 1 Normal: 0*4kB 1*8kB (H) 1*16kB (H) 1*32kB (H) 2*64kB (H) 0*128kB 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 1208kB [ 1429.107993][T13452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1429.108007][T13452] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1429.108020][T13452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1429.108033][T13452] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1429.108047][T13452] 118649 total pagecache pages [ 1429.108053][T13452] 0 pages in swap cache [ 1429.108059][T13452] Free swap = 89948kB [ 1429.108066][T13452] Total swap = 124996kB [ 1429.108073][T13452] 2097051 pages RAM [ 1429.108079][T13452] 0 pages HighMem/MovableOnly [ 1429.108085][T13452] 425230 pages reserved [ 1429.108092][T13452] 0 pages cma reserved [ 1429.135402][T13452] slab_out_of_memory: 251815 callbacks suppressed [ 1429.135416][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1429.135433][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1429.135450][T13452] node 0: slabs: 23336, objs: 280032, free: 0 [ 1429.135465][T13452] node 1: slabs: 39605, objs: 475260, free: 26 [ 1429.135491][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1429.135507][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1429.135524][T13452] node 0: slabs: 1711, objs: 18184, free: 0 [ 1429.135537][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1429.135556][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1429.135572][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1429.135587][T13452] node 0: slabs: 1711, objs: 18184, free: 0 [ 1429.135600][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1429.135618][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1429.135632][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1429.135648][T13452] node 0: slabs: 23336, objs: 280032, free: 0 [ 1429.135662][T13452] node 1: slabs: 39605, objs: 475260, free: 26 [ 1429.135687][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1429.135703][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1429.135719][T13452] node 0: slabs: 1711, objs: 18184, free: 0 [ 1429.135732][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1429.135750][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1429.135766][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1429.135781][T13452] node 0: slabs: 1711, objs: 18184, free: 0 [ 1429.135794][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1429.135813][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1429.135827][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1429.135843][T13452] node 0: slabs: 23336, objs: 280032, free: 0 [ 1429.135862][T13452] node 1: slabs: 39605, objs: 475260, free: 26 [ 1429.135887][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1429.135903][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1429.135919][T13452] node 0: slabs: 1711, objs: 18184, free: 0 [ 1429.135932][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1429.135950][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1429.135966][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1429.135981][T13452] node 0: slabs: 1711, objs: 18184, free: 0 [ 1429.135994][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1429.136012][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1429.136027][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1429.136043][T13452] node 0: slabs: 23336, objs: 280032, free: 0 [ 1429.136056][T13452] node 1: slabs: 39605, objs: 475260, free: 26 [ 1434.145405][T13452] slab_out_of_memory: 335555 callbacks suppressed [ 1434.145425][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1434.145442][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1434.145460][T13452] node 0: slabs: 25565, objs: 306780, free: 0 [ 1434.145481][T13452] node 1: slabs: 39605, objs: 475260, free: 26 [ 1434.145508][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1434.145524][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1434.145540][T13452] node 0: slabs: 1720, objs: 18304, free: 0 [ 1434.145554][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1434.145573][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1434.145589][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1434.145604][T13452] node 0: slabs: 1720, objs: 18304, free: 0 [ 1434.145618][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1434.145636][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1434.145650][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1434.145666][T13452] node 0: slabs: 25565, objs: 306780, free: 0 [ 1434.145679][T13452] node 1: slabs: 39605, objs: 475260, free: 26 [ 1434.145705][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1434.145721][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1434.145736][T13452] node 0: slabs: 1720, objs: 18304, free: 0 [ 1434.145749][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1434.145768][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1434.145784][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1434.145799][T13452] node 0: slabs: 1720, objs: 18304, free: 0 [ 1434.145812][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1434.145830][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1434.145845][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1434.145860][T13452] node 0: slabs: 25565, objs: 306780, free: 0 [ 1434.145874][T13452] node 1: slabs: 39605, objs: 475260, free: 26 [ 1434.145899][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1434.145915][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1434.145930][T13452] node 0: slabs: 1720, objs: 18304, free: 0 [ 1434.145943][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1434.145962][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1434.145977][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1434.145993][T13452] node 0: slabs: 1720, objs: 18304, free: 0 [ 1434.146006][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1434.146026][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1434.146041][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1434.146057][T13452] node 0: slabs: 25565, objs: 306780, free: 0 [ 1434.146070][T13452] node 1: slabs: 39605, objs: 475260, free: 26 [ 1440.434253][T13452] warn_alloc: 501892 callbacks suppressed [ 1440.434273][T13452] syz.0.1254: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1440.434327][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1440.434347][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1440.434358][T13452] Call Trace: [ 1440.434366][T13452] [ 1440.434374][T13452] dump_stack_lvl+0xe8/0x150 [ 1440.434405][T13452] warn_alloc+0x24d/0x270 [ 1440.434435][T13452] ? __pfx_warn_alloc+0x10/0x10 [ 1440.434467][T13452] ? wake_all_kswapds+0x167/0x280 [ 1440.434493][T13452] __alloc_pages_slowpath+0xefe/0xf80 [ 1440.434537][T13452] __alloc_frozen_pages_noprof+0x421/0x5c0 [ 1440.434566][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1440.434595][T13452] ? __pfx_policy_nodemask+0x10/0x10 [ 1440.434612][T13452] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 1440.434643][T13452] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1440.434670][T13452] alloc_pages_mpol+0xd4/0x280 [ 1440.434690][T13452] allocate_slab+0x135/0x620 [ 1440.434714][T13452] ___slab_alloc+0x16e/0x920 [ 1440.434742][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1440.434769][T13452] __kmalloc_flags_noprof+0x2ef/0x810 [ 1440.434796][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1440.434817][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1440.434845][T13452] __alloc_empty_sheaf+0x28/0x40 [ 1440.434867][T13452] __pcs_replace_empty_main+0x479/0x690 [ 1440.434888][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1440.434915][T13452] __kmalloc_flags_noprof+0x67e/0x810 [ 1440.434941][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1440.434963][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1440.434991][T13452] __alloc_empty_sheaf+0x28/0x40 [ 1440.435013][T13452] __pcs_replace_empty_main+0x479/0x690 [ 1440.435033][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1440.435061][T13452] kmem_cache_alloc_noprof+0x45d/0x690 [ 1440.435083][T13452] ? skb_clone+0x212/0x3a0 [ 1440.435125][T13452] ? skb_clone+0x212/0x3a0 [ 1440.435150][T13452] skb_clone+0x212/0x3a0 [ 1440.435173][T13452] bpf_clone_redirect+0x170/0x4b0 [ 1440.435204][T13452] ? bpf_test_run+0x1d1/0x830 [ 1440.435227][T13452] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1440.435257][T13452] ? irqentry_exit+0x218/0x910 [ 1440.435279][T13452] ? lock_acquire+0x115/0x350 [ 1440.435307][T13452] ? __local_bh_enable+0x1e3/0x2f0 [ 1440.435331][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1440.435355][T13452] ? rcu_is_watching+0x16/0xb0 [ 1440.435379][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1440.435406][T13452] ? bpf_test_timer_continue+0x10c/0x320 [ 1440.435432][T13452] bpf_test_run+0x354/0x830 [ 1440.435470][T13452] ? __pfx_bpf_test_run+0x10/0x10 [ 1440.435514][T13452] ? skb_dst_set+0x72/0x140 [ 1440.435538][T13452] bpf_prog_test_run_skb+0xe35/0x2230 [ 1440.435583][T13452] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1440.435606][T13452] bpf_prog_test_run+0x2cb/0x340 [ 1440.435626][T13452] __sys_bpf+0xa22/0xd90 [ 1440.435658][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 1440.435686][T13452] ? do_futex+0x3e7/0x4e0 [ 1440.435732][T13452] ? rcu_is_watching+0x16/0xb0 [ 1440.435764][T13452] __x64_sys_bpf+0xba/0xd0 [ 1440.435789][T13452] do_syscall_64+0x166/0x520 [ 1440.435807][T13452] ? trace_irq_disable+0x3b/0x140 [ 1440.435830][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.435847][T13452] ? clear_bhb_loop+0x70/0xc0 [ 1440.435867][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.435884][T13452] RIP: 0033:0x7f5a9e86e159 [ 1440.435900][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.435915][T13452] RSP: 002b:00007f5a9cac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1440.435932][T13452] RAX: ffffffffffffffda RBX: 00007f5a9eaf5fa0 RCX: 00007f5a9e86e159 [ 1440.435945][T13452] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1440.435956][T13452] RBP: 00007f5a9e90506b R08: 0000000000000000 R09: 0000000000000000 [ 1440.435967][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.435978][T13452] R13: 00007f5a9eaf6038 R14: 00007f5a9eaf5fa0 R15: 00007ffea2bdfc18 [ 1440.436005][T13452] [ 1440.436047][T13452] Mem-Info: [ 1440.436054][T13452] active_anon:5793 inactive_anon:64660 isolated_anon:32 [ 1440.436054][T13452] active_file:25447 inactive_file:21568 isolated_file:0 [ 1440.436054][T13452] unevictable:0 dirty:159 writeback:0 [ 1440.436054][T13452] slab_reclaimable:12331 slab_unreclaimable:1355665 [ 1440.436054][T13452] mapped:35965 shmem:64253 pagetables:1683 [ 1440.436054][T13452] sec_pagetables:0 bounce:0 [ 1440.436054][T13452] kernel_misc_reclaimable:0 [ 1440.436054][T13452] free:2961 free_pcp:813 free_cma:0 [ 1440.436098][T13452] Node 0 active_anon:23172kB inactive_anon:258640kB active_file:101712kB inactive_file:86224kB unevictable:0kB isolated(anon):128kB isolated(file):0kB mapped:143860kB dirty:636kB writeback:0kB shmem:257012kB kernel_stack:14048kB pagetables:6516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1440.436139][T13452] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:96kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1440.436175][T13452] Node 0 DMA free:10000kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.436221][T13452] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1440.436251][T13452] Node 0 DMA32 free:620kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:4096kB free_highatomic:576kB active_anon:23172kB inactive_anon:258640kB active_file:101712kB inactive_file:86224kB unevictable:0kB writepending:636kB zspages:3008kB present:3129332kB managed:2559012kB mlocked:0kB bounce:0kB free_pcp:1228kB local_pcp:1228kB free_cma:0kB [ 1440.436301][T13452] lowmem_reserve[]: 0 0 1 1 1 [ 1440.436329][T13452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.436374][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1440.436402][T13452] Node 1 Normal free:1224kB boost:21876kB min:28244kB low:32352kB high:36460kB reserved_highatomic:2048kB free_highatomic:1208kB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2024kB local_pcp:2024kB free_cma:0kB [ 1440.436450][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1440.436478][T13452] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10000kB [ 1440.436586][T13452] Node 0 DMA32: 2*4kB (H) 1*8kB (H) 1*16kB (H) 1*32kB (H) 0*64kB 0*128kB 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 576kB [ 1440.436687][T13452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1440.436774][T13452] Node 1 Normal: 0*4kB 1*8kB (H) 1*16kB (H) 1*32kB (H) 2*64kB (H) 0*128kB 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 1208kB [ 1440.436875][T13452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.436889][T13452] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1440.436902][T13452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1440.436915][T13452] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1440.436928][T13452] 111265 total pagecache pages [ 1440.436934][T13452] 0 pages in swap cache [ 1440.436940][T13452] Free swap = 89640kB [ 1440.436947][T13452] Total swap = 124996kB [ 1440.436953][T13452] 2097051 pages RAM [ 1440.436959][T13452] 0 pages HighMem/MovableOnly [ 1440.436965][T13452] 425230 pages reserved [ 1440.436971][T13452] 0 pages cma reserved [ 1440.436979][T13452] slab_out_of_memory: 163361 callbacks suppressed [ 1440.436989][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437006][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437022][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437035][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437056][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437071][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437087][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437100][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437169][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437185][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437201][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437214][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437233][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437249][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437265][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437278][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437340][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437356][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437371][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437384][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437403][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437418][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437434][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437446][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437508][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437524][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437540][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437553][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437571][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437587][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437602][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437615][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437676][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437692][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437708][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437728][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1440.437747][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 1440.437762][T13452] cache: kmalloc-256, object size: 256, buffer size: 512, default order: 1, min order: 0 [ 1440.437778][T13452] node 0: slabs: 3997, objs: 36568, free: 0 [ 1440.437791][T13452] node 1: slabs: 42, objs: 664, free: 8 [ 1449.216579][T13452] slab_out_of_memory: 31574 callbacks suppressed [ 1449.216600][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.216619][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.216635][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.216649][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.216699][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.216714][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.216730][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.216743][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.216792][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.216807][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.216824][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.216842][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.216892][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.216907][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.216922][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.216935][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.216984][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.216999][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.217015][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.217028][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.217077][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.217092][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.217108][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.217121][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.217170][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.217184][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.217200][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.217213][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.217262][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.217276][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.217292][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.217318][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.217370][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.217385][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.217401][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.217414][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1449.217463][T13452] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 1449.217477][T13452] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 1449.217493][T13452] node 0: slabs: 34229, objs: 410748, free: 0 [ 1449.217506][T13452] node 1: slabs: 43647, objs: 523764, free: 29 [ 1450.435399][T13452] warn_alloc: 98913 callbacks suppressed [ 1450.435417][T13452] syz.0.1254: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1450.435472][T13452] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1450.435491][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1450.435503][T13452] Call Trace: [ 1450.435510][T13452] [ 1450.435521][T13452] dump_stack_lvl+0xe8/0x150 [ 1450.435554][T13452] warn_alloc+0x24d/0x270 [ 1450.435585][T13452] ? __pfx_warn_alloc+0x10/0x10 [ 1450.435618][T13452] ? wake_all_kswapds+0x167/0x280 [ 1450.435644][T13452] __alloc_pages_slowpath+0xefe/0xf80 [ 1450.435687][T13452] __alloc_frozen_pages_noprof+0x421/0x5c0 [ 1450.435717][T13452] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1450.435746][T13452] ? __pfx_policy_nodemask+0x10/0x10 [ 1450.435764][T13452] ? ___slab_alloc+0x873/0x920 [ 1450.435783][T13452] ? __alloc_empty_sheaf+0x28/0x40 [ 1450.435810][T13452] ? rcu_is_watching+0x16/0xb0 [ 1450.435842][T13452] alloc_pages_mpol+0xd4/0x280 [ 1450.435863][T13452] allocate_slab+0x135/0x620 [ 1450.435886][T13452] ___slab_alloc+0x16e/0x920 [ 1450.435908][T13452] ? rt_spin_trylock+0x13a/0x2b0 [ 1450.435936][T13452] ? skb_clone+0x212/0x3a0 [ 1450.435959][T13452] kmem_cache_alloc_noprof+0xec/0x690 [ 1450.435982][T13452] ? skb_clone+0x212/0x3a0 [ 1450.436001][T13452] ? skb_clone+0x212/0x3a0 [ 1450.436026][T13452] skb_clone+0x212/0x3a0 [ 1450.436049][T13452] bpf_clone_redirect+0x170/0x4b0 [ 1450.436081][T13452] ? bpf_test_run+0x1d1/0x830 [ 1450.436105][T13452] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1450.436135][T13452] ? irqentry_exit+0x218/0x910 [ 1450.436157][T13452] ? lock_acquire+0x115/0x350 [ 1450.436185][T13452] ? __local_bh_enable+0x1e3/0x2f0 [ 1450.436211][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1450.436234][T13452] ? rcu_is_watching+0x16/0xb0 [ 1450.436258][T13452] ? __local_bh_disable_ip+0x3d/0x420 [ 1450.436282][T13452] ? bpf_test_timer_continue+0x10c/0x320 [ 1450.436308][T13452] bpf_test_run+0x354/0x830 [ 1450.436347][T13452] ? __pfx_bpf_test_run+0x10/0x10 [ 1450.436390][T13452] ? skb_dst_set+0x72/0x140 [ 1450.436414][T13452] bpf_prog_test_run_skb+0xe35/0x2230 [ 1450.436460][T13452] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1450.436482][T13452] bpf_prog_test_run+0x2cb/0x340 [ 1450.436503][T13452] __sys_bpf+0xa22/0xd90 [ 1450.436536][T13452] ? __pfx___sys_bpf+0x10/0x10 [ 1450.436564][T13452] ? do_futex+0x3e7/0x4e0 [ 1450.436606][T13452] ? rcu_is_watching+0x16/0xb0 [ 1450.436637][T13452] __x64_sys_bpf+0xba/0xd0 [ 1450.436662][T13452] do_syscall_64+0x166/0x520 [ 1450.436680][T13452] ? trace_irq_disable+0x3b/0x140 [ 1450.436703][T13452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.436721][T13452] ? clear_bhb_loop+0x70/0xc0 [ 1450.436742][T13452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.436759][T13452] RIP: 0033:0x7f5a9e86e159 [ 1450.436775][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.436790][T13452] RSP: 002b:00007f5a9cac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1450.436813][T13452] RAX: ffffffffffffffda RBX: 00007f5a9eaf5fa0 RCX: 00007f5a9e86e159 [ 1450.436826][T13452] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1450.436837][T13452] RBP: 00007f5a9e90506b R08: 0000000000000000 R09: 0000000000000000 [ 1450.436848][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.436859][T13452] R13: 00007f5a9eaf6038 R14: 00007f5a9eaf5fa0 R15: 00007ffea2bdfc18 [ 1450.436886][T13452] [ 1450.436892][T13452] Mem-Info: [ 1450.436901][T13452] active_anon:5793 inactive_anon:63761 isolated_anon:32 [ 1450.436901][T13452] active_file:23625 inactive_file:19344 isolated_file:0 [ 1450.436901][T13452] unevictable:0 dirty:159 writeback:0 [ 1450.436901][T13452] slab_reclaimable:12331 slab_unreclaimable:1359064 [ 1450.436901][T13452] mapped:35965 shmem:63382 pagetables:1683 [ 1450.436901][T13452] sec_pagetables:0 bounce:0 [ 1450.436901][T13452] kernel_misc_reclaimable:0 [ 1450.436901][T13452] free:2981 free_pcp:2322 free_cma:0 [ 1450.436944][T13452] Node 0 active_anon:23172kB inactive_anon:255044kB active_file:94424kB inactive_file:77328kB unevictable:0kB isolated(anon):128kB isolated(file):0kB mapped:143860kB dirty:636kB writeback:0kB shmem:253528kB kernel_stack:14048kB pagetables:6516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1450.436985][T13452] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:96kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1450.437022][T13452] Node 0 DMA free:10008kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1450.437068][T13452] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 1450.437099][T13452] Node 0 DMA32 free:668kB boost:13476kB min:17396kB low:19928kB high:22460kB reserved_highatomic:4096kB free_highatomic:648kB active_anon:23172kB inactive_anon:255044kB active_file:94424kB inactive_file:77328kB unevictable:0kB writepending:636kB zspages:3084kB present:3129332kB managed:2559012kB mlocked:0kB bounce:0kB free_pcp:3900kB local_pcp:3900kB free_cma:0kB [ 1450.437148][T13452] lowmem_reserve[]: 0 0 1 1 1 [ 1450.437176][T13452] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1450.437220][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1450.437248][T13452] Node 1 Normal free:1248kB boost:21876kB min:28244kB low:32352kB high:36460kB reserved_highatomic:2048kB free_highatomic:1208kB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:48kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5360kB local_pcp:5360kB free_cma:0kB [ 1450.437296][T13452] lowmem_reserve[]: 0 0 0 0 0 [ 1450.437324][T13452] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9996kB [ 1450.437436][T13452] Node 0 DMA32: 2*4kB (H) 0*8kB 0*16kB 2*32kB (H) 1*64kB (H) 0*128kB 2*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 648kB [ 1450.437534][T13452] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1450.437614][T13452] Node 1 Normal: 0*4kB 1*8kB (H) 1*16kB (H) 1*32kB (H) 2*64kB (H) 0*128kB 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 1208kB [ 1450.437714][T13452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.437729][T13452] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1450.437742][T13452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.437755][T13452] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1450.437768][T13452] 106351 total pagecache pages [ 1450.437775][T13452] 0 pages in swap cache [ 1450.437781][T13452] Free swap = 86004kB [ 1450.437787][T13452] Total swap = 124996kB [ 1450.437794][T13452] 2097051 pages RAM [ 1450.437800][T13452] 0 pages HighMem/MovableOnly [ 1450.437813][T13452] 425230 pages reserved [ 1450.437819][T13452] 0 pages cma reserved [ 1453.315397][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1463.180786][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13452 [ 1463.188185][ C0] rcu: (detected by 0, t=10502 jiffies, g=90549, q=40572 ncpus=1) [ 1463.196099][ C0] task:syz.0.1254 state:R running task stack:24360 pid:13452 tgid:13449 ppid:5585 task_flags:0x400140 flags:0x00080000 [ 1463.209599][ C0] Call Trace: [ 1463.212890][ C0] [ 1463.215915][ C0] sched_show_task+0x4aa/0x5f0 [ 1463.220733][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 1463.226033][ C0] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1463.231255][ C0] ? wq_watchdog_touch+0xf9/0x160 [ 1463.236298][ C0] print_other_cpu_stall+0xfbf/0x1350 [ 1463.241696][ C0] ? notifier_call_chain+0x1a5/0x3d0 [ 1463.247009][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1463.252842][ C0] ? __timekeeping_advance+0xe58/0x1370 [ 1463.258418][ C0] rcu_sched_clock_irq+0x9fe/0x10e0 [ 1463.263892][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1463.269536][ C0] ? rcu_is_watching+0x16/0xb0 [ 1463.274327][ C0] ? trace_softirq_raise+0x3b/0x130 [ 1463.279543][ C0] update_process_times+0x234/0x2d0 [ 1463.284761][ C0] tick_nohz_handler+0x38f/0x6b0 [ 1463.289717][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1463.295193][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1463.300326][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1463.305810][ C0] __hrtimer_run_queues+0x3a0/0xaf0 [ 1463.311290][ C0] hrtimer_interrupt+0x4c2/0xa80 [ 1463.316257][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1463.322276][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1463.327917][ C0] [ 1463.330859][ C0] [ 1463.333794][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1463.339775][ C0] RIP: 0010:kasan_check_range+0x1ca/0x2c0 [ 1463.345499][ C0] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 da ef 29 09 cc 45 84 ff 0f 85 a1 00 00 00 [ 1463.365115][ C0] RSP: 0018:ffffc90004997028 EFLAGS: 00000256 [ 1463.371295][ C0] RAX: ffffffff82153501 RBX: 0000000000000009 RCX: ffffffff8215358b [ 1463.379272][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88823fff8c00 [ 1463.387259][ C0] RBP: 0000000000000002 R08: ffff88823fff8c07 R09: 1ffff11047fff180 [ 1463.395240][ C0] R10: dffffc0000000000 R11: ffffed1047fff181 R12: 0000000000001b95 [ 1463.403210][ C0] R13: dffffc0000000000 R14: ffffed1047fff181 R15: 1ffff11047fff180 [ 1463.411191][ C0] ? isolate_migratepages_block+0x3611/0x3650 [ 1463.417296][ C0] ? compaction_suitable+0x3b/0x390 [ 1463.422543][ C0] compaction_suitable+0x3b/0x390 [ 1463.427592][ C0] wakeup_kcompactd+0x338/0x540 [ 1463.432482][ C0] wake_all_kswapds+0x167/0x280 [ 1463.437365][ C0] __alloc_pages_slowpath+0x3ff/0xf80 [ 1463.442782][ C0] __alloc_frozen_pages_noprof+0x421/0x5c0 [ 1463.448609][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1463.454968][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 1463.460282][ C0] alloc_pages_mpol+0xd4/0x280 [ 1463.465067][ C0] allocate_slab+0x89/0x620 [ 1463.469579][ C0] ? kfree+0x1c5/0x6d0 [ 1463.473660][ C0] ___slab_alloc+0x16e/0x920 [ 1463.478257][ C0] ? rt_spin_trylock+0x13a/0x2b0 [ 1463.483306][ C0] __kmalloc_node_track_caller_noprof+0x294/0x7b0 [ 1463.489732][ C0] ? bpf_clone_redirect+0x1e9/0x4b0 [ 1463.494945][ C0] ? bpf_clone_redirect+0x1e9/0x4b0 [ 1463.500940][ C0] pskb_expand_head+0x22c/0x13a0 [ 1463.505898][ C0] ? skb_ensure_writable+0x2bd/0x450 [ 1463.511197][ C0] bpf_clone_redirect+0x1e9/0x4b0 [ 1463.516249][ C0] ? bpf_test_run+0x1d1/0x830 [ 1463.521365][ C0] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1463.526836][ C0] ? irqentry_exit+0x218/0x910 [ 1463.531608][ C0] ? lock_acquire+0x115/0x350 [ 1463.536311][ C0] ? __local_bh_enable+0x1e3/0x2f0 [ 1463.541458][ C0] ? __local_bh_disable_ip+0x3d/0x420 [ 1463.546941][ C0] ? rcu_is_watching+0x16/0xb0 [ 1463.551722][ C0] ? __local_bh_disable_ip+0x3d/0x420 [ 1463.557124][ C0] ? bpf_test_timer_continue+0x10c/0x320 [ 1463.562769][ C0] bpf_test_run+0x354/0x830 [ 1463.567298][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 1463.572366][ C0] ? skb_dst_set+0x72/0x140 [ 1463.576881][ C0] bpf_prog_test_run_skb+0xe35/0x2230 [ 1463.582284][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1463.588098][ C0] bpf_prog_test_run+0x2cb/0x340 [ 1463.593043][ C0] __sys_bpf+0xa22/0xd90 [ 1463.597328][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1463.602122][ C0] ? do_futex+0x3e7/0x4e0 [ 1463.606483][ C0] ? rcu_is_watching+0x16/0xb0 [ 1463.611263][ C0] __x64_sys_bpf+0xba/0xd0 [ 1463.615710][ C0] do_syscall_64+0x166/0x520 [ 1463.620318][ C0] ? trace_irq_disable+0x3b/0x140 [ 1463.625374][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.631452][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1463.636171][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.642108][ C0] RIP: 0033:0x7f5a9e86e159 [ 1463.646539][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.666158][ C0] RSP: 002b:00007f5a9cac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1463.674587][ C0] RAX: ffffffffffffffda RBX: 00007f5a9eaf5fa0 RCX: 00007f5a9e86e159 [ 1463.682646][ C0] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1463.690621][ C0] RBP: 00007f5a9e90506b R08: 0000000000000000 R09: 0000000000000000 [ 1463.698679][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.706650][ C0] R13: 00007f5a9eaf6038 R14: 00007f5a9eaf5fa0 R15: 00007ffea2bdfc18 [ 1463.714638][ C0] [ 1463.717660][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 1777 jiffies! g90549 f0x0 RCU_GP_WAIT_FQS(5) ->state=I [ 1463.729552][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=51664 [ 1463.737438][ C0] rcu: rcu_preempt kthread starved for 1778 jiffies! g90549 f0x0 RCU_GP_WAIT_FQS(5) ->state=I ->cpu=0 [ 1463.748381][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1463.758366][ C0] rcu: RCU grace-period kthread stack dump: [ 1463.764263][ C0] task:rcu_preempt state:I stack:23776 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1463.776273][ C0] Call Trace: [ 1463.779562][ C0] [ 1463.782498][ C0] __schedule+0x16d9/0x5700 [ 1463.787021][ C0] ? __lock_acquire+0x747/0x2de0 [ 1463.791981][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1463.797103][ C0] ? __pfx___schedule+0x10/0x10 [ 1463.801983][ C0] ? lock_acquire+0x115/0x350 [ 1463.806672][ C0] ? schedule+0x90/0x2b0 [ 1463.810919][ C0] schedule+0x164/0x2b0 [ 1463.815077][ C0] schedule_timeout+0x152/0x2c0 [ 1463.819935][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1463.825330][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1463.830661][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1463.836504][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1463.842083][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1463.846974][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1463.853142][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1463.858445][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1463.863687][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1463.869501][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1463.874105][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1463.879320][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1463.884271][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1463.889309][ C0] kthread+0x38b/0x470 [ 1463.893409][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1463.898634][ C0] ? __pfx_kthread+0x10/0x10 [ 1463.903286][ C0] ret_from_fork+0x514/0xb70 [ 1463.907973][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1463.913108][ C0] ? __switch_to+0xc89/0x1420 [ 1463.917849][ C0] ? __pfx_kthread+0x10/0x10 [ 1463.922457][ C0] ret_from_fork_asm+0x1a/0x30 [ 1463.927264][ C0] [ 1463.930293][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1463.936715][ C0] CPU: 0 UID: 0 PID: 13452 Comm: syz.0.1254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1463.946617][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1463.956686][ C0] RIP: 0010:kasan_check_range+0x1ca/0x2c0 [ 1463.962440][ C0] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d e9 da ef 29 09 cc 45 84 ff 0f 85 a1 00 00 00 [ 1463.982140][ C0] RSP: 0018:ffffc90004997028 EFLAGS: 00000256 [ 1463.988230][ C0] RAX: ffffffff82153501 RBX: 0000000000000009 RCX: ffffffff8215358b [ 1463.996288][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88823fff8c00 [ 1464.004261][ C0] RBP: 0000000000000002 R08: ffff88823fff8c07 R09: 1ffff11047fff180 [ 1464.012233][ C0] R10: dffffc0000000000 R11: ffffed1047fff181 R12: 0000000000001b95 [ 1464.020236][ C0] R13: dffffc0000000000 R14: ffffed1047fff181 R15: 1ffff11047fff180 [ 1464.028308][ C0] FS: 00007f5a9cac66c0(0000) GS:ffff888125bc3000(0000) knlGS:0000000000000000 [ 1464.037335][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1464.043938][ C0] CR2: 000055892da90138 CR3: 000000008130c000 CR4: 00000000003526f0 [ 1464.051944][ C0] Call Trace: [ 1464.055234][ C0] [ 1464.058187][ C0] compaction_suitable+0x3b/0x390 [ 1464.063244][ C0] wakeup_kcompactd+0x338/0x540 [ 1464.068124][ C0] wake_all_kswapds+0x167/0x280 [ 1464.072994][ C0] __alloc_pages_slowpath+0x3ff/0xf80 [ 1464.078497][ C0] __alloc_frozen_pages_noprof+0x421/0x5c0 [ 1464.084347][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1464.090738][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 1464.096054][ C0] alloc_pages_mpol+0xd4/0x280 [ 1464.100836][ C0] allocate_slab+0x89/0x620 [ 1464.105349][ C0] ? kfree+0x1c5/0x6d0 [ 1464.109530][ C0] ___slab_alloc+0x16e/0x920 [ 1464.114216][ C0] ? rt_spin_trylock+0x13a/0x2b0 [ 1464.119186][ C0] __kmalloc_node_track_caller_noprof+0x294/0x7b0 [ 1464.125618][ C0] ? bpf_clone_redirect+0x1e9/0x4b0 [ 1464.130833][ C0] ? bpf_clone_redirect+0x1e9/0x4b0 [ 1464.136164][ C0] pskb_expand_head+0x22c/0x13a0 [ 1464.141150][ C0] ? skb_ensure_writable+0x2bd/0x450 [ 1464.146457][ C0] bpf_clone_redirect+0x1e9/0x4b0 [ 1464.151506][ C0] ? bpf_test_run+0x1d1/0x830 [ 1464.156195][ C0] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1464.161671][ C0] ? irqentry_exit+0x218/0x910 [ 1464.166522][ C0] ? lock_acquire+0x115/0x350 [ 1464.171441][ C0] ? __local_bh_enable+0x1e3/0x2f0 [ 1464.176590][ C0] ? __local_bh_disable_ip+0x3d/0x420 [ 1464.181987][ C0] ? rcu_is_watching+0x16/0xb0 [ 1464.186765][ C0] ? __local_bh_disable_ip+0x3d/0x420 [ 1464.192150][ C0] ? bpf_test_timer_continue+0x10c/0x320 [ 1464.197799][ C0] bpf_test_run+0x354/0x830 [ 1464.202341][ C0] ? __pfx_bpf_test_run+0x10/0x10 [ 1464.207419][ C0] ? skb_dst_set+0x72/0x140 [ 1464.211952][ C0] bpf_prog_test_run_skb+0xe35/0x2230 [ 1464.217358][ C0] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1464.223187][ C0] bpf_prog_test_run+0x2cb/0x340 [ 1464.228130][ C0] __sys_bpf+0xa22/0xd90 [ 1464.232427][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1464.237206][ C0] ? do_futex+0x3e7/0x4e0 [ 1464.241577][ C0] ? rcu_is_watching+0x16/0xb0 [ 1464.246370][ C0] __x64_sys_bpf+0xba/0xd0 [ 1464.250816][ C0] do_syscall_64+0x166/0x520 [ 1464.255421][ C0] ? trace_irq_disable+0x3b/0x140 [ 1464.260452][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.266531][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1464.271233][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.277306][ C0] RIP: 0033:0x7f5a9e86e159 [ 1464.281739][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.301358][ C0] RSP: 002b:00007f5a9cac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1464.309791][ C0] RAX: ffffffffffffffda RBX: 00007f5a9eaf5fa0 RCX: 00007f5a9e86e159 [ 1464.317768][ C0] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1464.325765][ C0] RBP: 00007f5a9e90506b R08: 0000000000000000 R09: 0000000000000000 [ 1464.333742][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1464.341730][ C0] R13: 00007f5a9eaf6038 R14: 00007f5a9eaf5fa0 R15: 00007ffea2bdfc18 [ 1464.349720][ C0]