last executing test programs: 1m39.212987624s ago: executing program 3 (id=2154): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket(0x8000000010, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x41, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1m39.155638264s ago: executing program 1 (id=2155): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x2}, 0x2}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0xf0, 0x2}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000004000), 0x0, 0x4040040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c0000005e00000201001ea89888ffff0e00ff0f00006e0008000000"], 0x1c}, 0x1, 0x0, 0x0, 0xa4}, 0x40408d5) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000840)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000840)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x8, {0x0, 0x3, 0x0, '\x00', {0x1, 0x0, 0xae3, 0x10, r6, 0xffffffffffffffff, 0x6000, '\x00', 0x6, 0x81, 0x1000000000001, 0x4, {0x1, 0x5}, {0x4000000000009, 0x42}, {0x2000005, 0xd}, {0x1, 0xa00}, 0x2, 0x6, 0x81, 0x5}}}}) write$FUSE_INIT(r4, &(0x7f0000001200)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x2810901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x4}, {0xc, 0xd}, {0x0, 0x3}}, [{0x4}, {0x4}]}, 0x2c}}, 0x91) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getqdisc={0x2c, 0x26, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x4}, {0xc, 0xd}, {0x0, 0x3}}, [{0x4}, {0x4}]}, 0x2c}}, 0x91) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) clock_settime(0x5, &(0x7f0000000240)={0x77359400}) (async) clock_settime(0x5, &(0x7f0000000240)={0x77359400}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m38.811126971s ago: executing program 1 (id=2157): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x28a}]}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x28, 0x6, 0xff, 0xfffff020}, {0x6, 0x0, 0x0, 0x8000000}]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000300)={0x30000, 0x0, {[0x5, 0x4, 0x9, 0x4, 0x2, 0x8001, 0x7, 0x3]}}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000001a3887bd77a5000bc617c0f6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r6, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) 1m38.437819093s ago: executing program 3 (id=2159): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000180)={{0x80}, 'port1\x00', 0xc1, 0x10, 0x1, 0xfffff801, 0x8, 0x15, 0xff, 0x0, 0x3, 0xf}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$panthor(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000780)={r6, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) ftruncate(r12, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e49671224c39cd3c1973e830e29996895e1b641670d85c8dc755df4fcca08f484649526d3f3345eb86eb876e5fd9f107aacdbb4e8510f95d6761b9590bbea8442bbe1a3767f9a3a2591ca37772de94e51365a2d96c5dd448bcb02331cf7b35ecf7973f86c417ddc44984f31db2de0511aecf8729568a5919db7dbfffc98c97a09bdfb3cd6dd44bda43062128d13062edade1ca85c492305f5bcf17e06ea348240f35c6ec7f9907b3762b78a86011e8bab45b6b5e819380421f6e0966893ab7db8a7aa9aa4c9c90ae72d305facbac17be7f85d9926915a76365aab6e2b2e6f12"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xfe5, &(0x7f0000002600)=""/4069, 0x40f00, 0x2}, 0x94) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000240)={r6, 0xc89, 0xa, 0xfffffffa, 0x3, [0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r13}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r4, 0xc02064a4, &(0x7f0000000380)={r5, 0x4, &(0x7f0000000180)=[0x3, 0x200, 0x9, 0xc], &(0x7f0000000200)=[0x9, 0xffff, 0x3, 0x6], &(0x7f0000000340)=[0x6, 0x7ff]}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0086426, &(0x7f0000000480)={0x3, &(0x7f0000000140)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r8, 0xc008641d, &(0x7f0000000600)={r14, &(0x7f00000005c0)=""/64}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000040)={r14, 0x3}) 1m38.262711188s ago: executing program 3 (id=2160): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000001200), 0xc00, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='maps\x00') preadv(r4, &(0x7f0000000700)=[{0x0}, {&(0x7f00000001c0)=""/226, 0xe2}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x4, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f0000001240)={0x6, 0x0, [{0x40000000, 0x7fffffff, 0x0, 0x5, 0x4, 0x3, 0x5}, {0x6, 0x8, 0x0, 0x16f, 0x7, 0x7, 0x5}, {0x80000019, 0xff93, 0x6, 0xf, 0x4, 0x7ff, 0x7}, {0x40000000, 0x83, 0x0, 0x5c6a0f06, 0x100, 0x5, 0x200}, {0x1, 0x5, 0x4, 0x0, 0x1, 0x7, 0x3}, {0x40000000, 0x0, 0x0, 0x5, 0x4, 0x1, 0x3}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x8901, &(0x7f0000000040)={r5}) sendmsg$inet(r5, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000010}, 0x40080) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x13, r7, 0x6, &(0x7f0000000300)={0x224, 0x0, 0x9}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 1m37.618016312s ago: executing program 3 (id=2162): unshare(0x2c020400) r0 = socket(0x18, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000002000)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c001680", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) fsopen(&(0x7f0000000000)='squashfs\x00', 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x7, 0x93, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x6, 0x0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xe, 0xfffc, 0x54fe, 0x85}, {0x6, 0x24, 0x1a, 0x8, 0xf}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x719f, 0x2, 0x9, 0x6, 0xa, 0x92}, @acm={0x4, 0x24, 0x2, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x7, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x40, 0x1, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6f, 0x5, 0x8}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0xf7, 0x7, 0x8, 0x3}, 0xb0, &(0x7f00000003c0)={0x5, 0xf, 0xb0, 0x3, [@generic={0x87, 0x10, 0xb, "18637f24de15e097c8d446c44949e429c4f48c2a22f32c34603a4d61fa03724934eba0c56aaaa1f8604953c4eec02ae02314b75ee6e5c7e7f837beb5aced29ad44ae1f4f10fe152614586e944ec1f6f39113940017d2a96fb547a512d64f4a3a5a1385c4676f135689cb64c71d9870787c63eae7e7d2a32caec3164d11f7a7e8a1326df0"}, @ssp_cap={0x10, 0x10, 0xa, 0xfb, 0x1, 0x8, 0x0, 0x800, [0xff000f]}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x5, 0x0, 0x39a, [0xff, 0xf]}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x426}}, {0xc0, &(0x7f00000006c0)=@string={0xc0, 0x3, "31d5ab161fe37a1d18385e03eb2f5153ec4b6316a68c8fdee9520c4e14df20471c4ff564e77c8e42b243e5a655e83fafa281ba2d737e2266c2f67e89f312a19829e8985ecbf27a90b000b71f4903ce30c2d88ffa31c6812dd6be5b1d3f62388c6513376297a3a2b1af91494439500a2c825e1471f8558534447c817bffdf74f592f6933236eb42578963fb0895210361ff32fc70060fd52b60a1f655841817cd1c6b07cfd42fe4be0179b6061d82c6976520bf6ada9a453b1d7fa5776ca8"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xc1a}}]}) syz_usb_control_io(r4, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, @multicast2, 0x1, 0x1e}}) 1m36.68828222s ago: executing program 1 (id=2165): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000001200), 0xc00, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='maps\x00') preadv(r4, &(0x7f0000000700)=[{0x0}, {&(0x7f00000001c0)=""/226, 0xe2}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x4, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r3, 0xc008aec1, &(0x7f0000001240)={0x6, 0x0, [{0x40000000, 0x7fffffff, 0x0, 0x5, 0x4, 0x3, 0x5}, {0x6, 0x8, 0x0, 0x16f, 0x7, 0x7, 0x5}, {0x80000019, 0xff93, 0x6, 0xf, 0x4, 0x7ff, 0x7}, {0x40000000, 0x83, 0x0, 0x5c6a0f06, 0x100, 0x5, 0x200}, {0x1, 0x5, 0x4, 0x0, 0x1, 0x7, 0x3}, {0x40000000, 0x0, 0x0, 0x5, 0x4, 0x1, 0x3}]}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) r6 = openat$pfkey(0xffffff9c, 0x0, 0x40400, 0x0) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000140)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) syz_genetlink_get_family_id$wireguard(0x0, r6) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000010}, 0x40080) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setsig(0x13, r7, 0x6, &(0x7f0000000300)={0x224, 0x0, 0x9}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) 1m36.547943592s ago: executing program 1 (id=2166): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0x4, 0xbe}]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) set_mempolicy(0x8006, 0x0, 0x5) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x204003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = landlock_create_ruleset(&(0x7f0000001080)={0x1, 0x4, 0x5, 0x2002, 0x1, 0x2}, 0x30, 0x3) landlock_restrict_self(r3, 0xd) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') bind$packet(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r2}, 0x18) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) 1m35.697680583s ago: executing program 1 (id=2175): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x7fff, 0x4) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x50001, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000240)=""/227, &(0x7f0000000340)=0xe3) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r2, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 1m34.791632161s ago: executing program 1 (id=2177): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0x1ffffff, 0x80, 0x4, 0x81}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 1m34.47132778s ago: executing program 3 (id=2178): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x20) r1 = socket(0x0, 0xa, 0xfffffffd) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) syz_usb_connect(0x4, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) select(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000180)="d9", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000400)="8b", 0x1}], 0x1}}], 0x2, 0x50) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000a80)={0x0, 0x1}, &(0x7f0000000ac0)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f0000050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000540)={0x28, 0x5, 0x0, 0x0, 0x7, 0x7, 0x6}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a00"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) socket$inet6(0xa, 0x1, 0x0) 1m33.27592907s ago: executing program 3 (id=2183): unshare(0x6020400) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0xdd37, 0x80, 0x4, 0x81}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 1m19.411334825s ago: executing program 32 (id=2177): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0x1ffffff, 0x80, 0x4, 0x81}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 1m17.890266563s ago: executing program 33 (id=2183): unshare(0x6020400) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0xdd37, 0x80, 0x4, 0x81}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 16.544221065s ago: executing program 2 (id=2375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000001000000800000000000700000000000000015b280b8fee84e3c6831ce7b600c5fa847c286f3", @ANYRES32, @ANYBLOB="c90d00"/20, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="00000000030000000100"/28], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r7) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r11, &(0x7f0000003b40)=[{{&(0x7f0000001340)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xaf6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000ac000000000000", @ANYRES32=0x0], 0x20}}], 0x6b, 0x1400) sendmsg$AUDIT_DEL_RULE(r10, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010804) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a6e92c9919593a18d", @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) socket(0x10, 0x803, 0x0) 15.364325351s ago: executing program 2 (id=2379): set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$udambuf(0xffffff9c, &(0x7f0000000200), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x100000000, 0xaa63c9edaaa48fb1}, {0xffffffffffffffff, 0x0, 0x1000100000000, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x8000}]}) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00009ab000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x303, 0xff7f, 0x0, 0x7, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x1, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x80, 0x0, 0x362, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) 14.886349814s ago: executing program 5 (id=2381): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 14.561171835s ago: executing program 6 (id=2382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000005d721bd81414bb0000000000000000000000a100280004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002004000000000000000fdffffffffffffff"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 14.042438956s ago: executing program 0 (id=2386): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000005d721bd81414bb0000000000000000000000a100280004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002004000000000000000fdffffffffffffff"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 13.926425299s ago: executing program 5 (id=2387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000001c0)=0x46) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x7, @vbi={0x3ff, 0xc7, 0x8, 0x41564e57, [0x1, 0xffffff8f], [0xfff, 0x2], 0x1}}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, 0x0) close(r3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000001080)=0xc, 0x4) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000030900020073797a310000000008000340000000070900000000797a3000000000e800bc2425159a657108000440000000001400000011000100000046fe000200000aa6503a46d12878b4733de7e0c8757f7a2eebbd5515797dace28631a256dabcc946f01013a1debec2386a0f89c03a2c87e2c6a972fbff8a3eae13addfae93905d"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x8d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 13.202718915s ago: executing program 2 (id=2388): set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$udambuf(0xffffff9c, &(0x7f0000000200), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x100000000, 0xaa63c9edaaa48fb1}, {0xffffffffffffffff, 0x0, 0x1000100000000, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x8000}]}) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00009ab000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x303, 0xff7f, 0x0, 0x7, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x1, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x80, 0x0, 0x362, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) 12.574292482s ago: executing program 6 (id=2389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000001000000800000000000700000000000000015b280b8fee84e3c6831ce7b600c5fa847c286f3", @ANYRES32, @ANYBLOB="c90d00"/20, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="00000000030000000100"/28], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r7) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r11, &(0x7f0000003b40)=[{{&(0x7f0000001340)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xaf6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000ac000000000000", @ANYRES32=0x0], 0x20}}], 0x6b, 0x1400) sendmsg$AUDIT_DEL_RULE(r10, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010804) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a6e92c9919593a18d", @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) socket(0x10, 0x803, 0x0) 11.772470346s ago: executing program 4 (id=2391): userfaultfd(0xa8adf8f4dbe850ed) r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r3, 0x0, 0x6) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000002080)) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000002180), 0x3) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth0_to_bond\x00', {0xc1e}, 0x84c8}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 11.762169309s ago: executing program 6 (id=2392): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x300, 0x10, 0x0, 0x0) 11.375396377s ago: executing program 5 (id=2393): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) 11.064657282s ago: executing program 5 (id=2394): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100000020000000eb000000000000000000000002000000"], 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0xa, 0x0, 0xc0000, &(0x7f0000000500)=[0x0], 0x1, 0x0, &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0}, 0x40) r1 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x202000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='1\x00\x00\x004\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES64=r0], 0x20) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000296473f20c4506c71fa0e3f65ea5544c089441bbb10448275720102030109024bffffffffffffff7f310e0003000001"], 0x0) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e080f0c08"], 0xb) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) (async) ftruncate(r2, 0xc17a) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) (async) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000083d000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x7, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000280)={0xff, {{0xa, 0x4e22, 0xd4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe363}}, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x8}}}, 0x104) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x2000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f00000003c0)) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x3e, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) dup(r8) (async) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x44, 0x8, 0x7f, '\x00', 0x8}) 10.850073704s ago: executing program 0 (id=2395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x40003) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) socket(0x1e, 0x805, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x7fff) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) sendto$inet(r3, 0x0, 0x0, 0x20000090, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x4, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000740)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f0640"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) creat(&(0x7f0000000080)='./file0\x00', 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000100)='./file0\x00', 0x81000c97) lremovexattr(&(0x7f0000001e00)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{}, "fe62cea3b52ebaa9", "c9a3315839c227100427fbb86ae6a41547451cdf05a400", "5d3e853f", "33fa4a8f2198c12e"}, 0x38) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40803}, 0x0) r10 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 10.632274985s ago: executing program 6 (id=2396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/8, 0x8}], 0x3e8, 0xe, 0x4) 10.32429801s ago: executing program 4 (id=2397): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 10.128985459s ago: executing program 2 (id=2398): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x81, 0x0, 0x0}, &(0x7f00000004c0), &(0x7f0000000140), &(0x7f0000000100)) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sync_file_range(r2, 0x6, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES64=0x0, @ANYRES32, @ANYRESDEC=r1, @ANYRESDEC=r4], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r6, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, 0x12c, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x2000, 0x1, {}, {0x1, 0xc, 0x7, 0x78, 0xd2, 0xf, "bc2d4ca6"}, 0x9, 0x1, {}, 0x9}) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d001e1ff200001000000000004000000ff71f5d8d21046232f00000000000001fc020000e2ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000500), 0x100001ff, 0x200000) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.015161357s ago: executing program 5 (id=2399): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x60, 0x4000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffe) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r6, @ANYBLOB="0100ad63adea454785ba424eb3fab1b786f728bd700000000000010000001400020077673000000000000000ecff000000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) socket$kcm(0xa, 0x5, 0x87) 9.567846047s ago: executing program 6 (id=2400): write$dsp(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="73656375726974792e7369743000443dcf1d22876d2fff5adf87c4cb3b57de2a2aa34e8c82e5712b6bfb763e358688c63a1e2cc24742b27615509b67ec8c1768ad804c6100098d153916381718a6299bdf131cf945186e4f919d290a0b07b729f0d5f2617bff2038bd8ce7afd5ad5ee571f60043534d3d550b"]) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x20040014) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x7c, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c579e051babf1c388dc4bd2939240b5489f7d85f", @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x7c}}, 0x0) 9.302518634s ago: executing program 4 (id=2401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newlink={0x23c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x2180}, [@IFLA_VFINFO_LIST={0x21c, 0x16, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fff, 0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x507, 0xafa6}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffff8, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0xd, @broadcast}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x12a}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x9, 0x2}}]}, {0x4}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x40}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xc6a, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x800, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x3, 0x1000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x788, 0x289, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x4, 0x6}}]}, {0x4}, {0xc8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x3ff, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x2, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x10001, 0xc28, 0x152a8b22, 0x88a8}}, {0x14, 0x1, {0x2386, 0xcc9, 0x7, 0x8100}}, {0x14, 0x1, {0x5, 0x3b4, 0x1d, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xd0}}, @IFLA_VF_TRUST={0xc, 0x9, {0x51fe, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x10, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x3}}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 9.131432821s ago: executing program 4 (id=2402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xd9000}, 0x1, 0x2}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="000001000000800000000000700000000000000015b280b8fee84e3c6831ce7b600c5fa847c286f3", @ANYRES32, @ANYBLOB="c90d00"/20, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="00000000030000000100"/28], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r7) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) socket$inet6_sctp(0xa, 0x801, 0x84) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r11, &(0x7f0000003b40)=[{{&(0x7f0000001340)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xaf6}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000ac000000000000", @ANYRES32=0x0], 0x20}}], 0x6b, 0x1400) sendmsg$AUDIT_DEL_RULE(r10, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010804) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="1a6e92c9919593a18d", @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf250100000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc040000}, 0x0) socket(0x10, 0x803, 0x0) 8.399030721s ago: executing program 5 (id=2403): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000500), 0x0, r1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB]) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090e000000030000000000000405000652"], 0x70}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000500140000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x68, &(0x7f0000000200)}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.652877115s ago: executing program 0 (id=2404): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}}, 0x0) 7.477862428s ago: executing program 0 (id=2405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000100000000fbdbdf25fc0000000000000000000000005d721bd81414bb0000000000000000000000a100280004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002004000000000000000fdffffffffffffff"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 5.823159276s ago: executing program 4 (id=2406): set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$udambuf(0xffffff9c, &(0x7f0000000200), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x100000000, 0xaa63c9edaaa48fb1}, {0xffffffffffffffff, 0x0, 0x1000100000000, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x8000}]}) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00009ab000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x303, 0xff7f, 0x0, 0x7, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x1, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x80, 0x0, 0x362, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) 4.884837664s ago: executing program 2 (id=2407): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x20) r1 = socket(0x0, 0xa, 0xfffffffd) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) syz_usb_connect(0x4, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) select(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000180)="d9", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000400)="8b", 0x1}], 0x1}}], 0x2, 0x50) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000a80)={0x0, 0x1}, &(0x7f0000000ac0)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f0000050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000540)={0x28, 0x5, 0x0, 0x0, 0x7, 0x7, 0x6}) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084) socket$inet6(0xa, 0x1, 0x0) 4.094186251s ago: executing program 0 (id=2408): userfaultfd(0xa8adf8f4dbe850ed) r0 = fsmount(0xffffffffffffffff, 0x0, 0x72) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_devices(r3, 0x0, 0x6) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000002080)) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000002180), 0x3) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'veth0_to_bond\x00', {0xc1e}, 0x84c8}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 2.075297036s ago: executing program 6 (id=2409): set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SCHED_CORE(0x41555856, 0x0, 0x0, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$udambuf(0xffffff9c, &(0x7f0000000200), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x100000000, 0xaa63c9edaaa48fb1}, {0xffffffffffffffff, 0x0, 0x1000100000000, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffff000, 0x8000}]}) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00009ab000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000640)) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x303, 0xff7f, 0x0, 0x7, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x1, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x80, 0x0, 0x362, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) 366.577535ms ago: executing program 2 (id=2410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/8, 0x8}], 0x3e8, 0xe, 0x4) 219.075941ms ago: executing program 4 (id=2411): r0 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000003c0)={'vlan1\x00', {0x2, 0x4e23, @loopback}}) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r5}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_disconnect(r12) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newlink={0x23c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x2180}, [@IFLA_VFINFO_LIST={0x21c, 0x16, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fff, 0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x507, 0xafa6}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffff8, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0xd, @broadcast}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x12a}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x9, 0x2}}]}, {0x4}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x40}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xc6a, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x800, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x3, 0x1000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x788, 0x289, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x4, 0x6}}]}, {0x4}, {0xc8, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x3ff, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x2, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x10001, 0xc28, 0x152a8b22, 0x88a8}}, {0x14, 0x1, {0x2386, 0xcc9, 0x7, 0x8100}}, {0x14, 0x1, {0x5, 0x3b4, 0x1d, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xd0}}, @IFLA_VF_TRUST={0xc, 0x9, {0x51fe, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0x10, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x3}}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): adding VLAN 0 to HW filter on device netdevsim1 [ 721.043055][T14473] team0: Port device netdevsim1 added [ 721.140630][T14476] team0: Port device netdevsim1 removed [ 721.248028][T14476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.367126][T14476] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 721.737990][ T29] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 722.947313][T14504] sg_write: data in/out 635269/136 bytes for SCSI command 0x0-- guessing data in; [ 722.947313][T14504] program syz.0.2318 not setting count and/or reply_len properly [ 723.374457][T14511] kvm: user requested TSC rate below hardware speed [ 724.132455][T14520] FAULT_INJECTION: forcing a failure. [ 724.132455][T14520] name failslab, interval 1, probability 0, space 0, times 0 [ 724.186992][T14520] CPU: 1 UID: 0 PID: 14520 Comm: syz.6.2322 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.187028][T14520] Tainted: [L]=SOFTLOCKUP [ 724.187036][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 724.187049][T14520] Call Trace: [ 724.187057][T14520] [ 724.187066][T14520] dump_stack_lvl+0xe8/0x150 [ 724.187114][T14520] should_fail_ex+0x40c/0x560 [ 724.187148][T14520] should_failslab+0xa8/0x100 [ 724.187182][T14520] __kmalloc_noprof+0xfe/0x720 [ 724.187208][T14520] ? rcu_is_watching+0x15/0xb0 [ 724.187241][T14520] ? tomoyo_realpath_from_path+0xef/0x640 [ 724.187394][T14520] ? tomoyo_realpath_from_path+0xef/0x640 [ 724.187430][T14520] tomoyo_realpath_from_path+0xef/0x640 [ 724.187466][T14520] ? tomoyo_path_number_perm+0x219/0x5f0 [ 724.187522][T14520] tomoyo_path_number_perm+0x246/0x5f0 [ 724.187555][T14520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 724.187584][T14520] ? __lock_acquire+0x683/0x2cf0 [ 724.187666][T14520] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 724.187732][T14520] ? __fget_files+0x2a/0x420 [ 724.187761][T14520] ? __fget_files+0x3a2/0x420 [ 724.187784][T14520] ? __fget_files+0x2a/0x420 [ 724.187812][T14520] security_file_ioctl_compat+0xc3/0x2a0 [ 724.187878][T14520] __ia32_compat_sys_ioctl+0x139/0x950 [ 724.187902][T14520] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 724.187923][T14520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 724.187956][T14520] ? __fget_files+0x3a2/0x420 [ 724.187986][T14520] ? fput+0xa0/0xd0 [ 724.188009][T14520] ? ksys_write+0x242/0x270 [ 724.188049][T14520] __do_fast_syscall_32+0x23e/0x6f0 [ 724.188068][T14520] ? do_fast_syscall_32+0x33/0x70 [ 724.188085][T14520] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.188111][T14520] ? asm_int80_emulation+0x1a/0x20 [ 724.188131][T14520] ? do_int80_emulation+0x29f/0x550 [ 724.188148][T14520] ? trace_irq_disable+0x3b/0x140 [ 724.188177][T14520] do_fast_syscall_32+0x33/0x70 [ 724.188196][T14520] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 724.188218][T14520] RIP: 0023:0xf703f0ec [ 724.188237][T14520] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 724.188254][T14520] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 724.188276][T14520] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c048aeca [ 724.188289][T14520] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 724.188301][T14520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 724.188313][T14520] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 724.188324][T14520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 724.188353][T14520] [ 724.206049][T14520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 724.223781][T14514] netlink: 'syz.5.2319': attribute type 10 has an invalid length. [ 724.274906][T14515] netlink: 'syz.5.2319': attribute type 10 has an invalid length. [ 724.406287][T14516] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2319'. [ 724.425825][T14514] bond0: (slave netdevsim1): Releasing backup interface [ 725.448000][T14514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 725.486147][T14514] team0: Port device netdevsim1 added [ 725.567626][ T189] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 725.584905][T14515] team0: Port device netdevsim1 removed [ 725.676385][T14515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 725.709568][T14515] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 725.729068][ T189] usb 3-1: device descriptor read/64, error -71 [ 725.998747][ T189] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 726.186074][ T189] usb 3-1: device descriptor read/64, error -71 [ 726.312792][ T189] usb usb3-port1: attempt power cycle [ 726.387570][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 726.564838][ T29] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 726.592628][ T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.614784][ T29] usb 7-1: config 0 has no interface number 0 [ 726.637326][ T29] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 726.667548][ T189] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 726.670909][ T29] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 726.722611][ T189] usb 3-1: device descriptor read/8, error -71 [ 726.746397][ T29] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.823036][ T29] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 726.846227][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.872754][ T29] usb 7-1: Product: syz [ 726.891268][ T29] usb 7-1: Manufacturer: syz [ 726.914622][ T29] usb 7-1: SerialNumber: syz [ 726.977725][ T189] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 726.996537][ T29] usb 7-1: config 0 descriptor?? [ 727.051319][ T189] usb 3-1: device descriptor read/8, error -71 [ 727.200342][ T189] usb usb3-port1: unable to enumerate USB device [ 727.273015][ T29] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 729.358683][T14567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2335'. [ 729.483104][T13499] usb 7-1: USB disconnect, device number 3 [ 729.867689][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 730.038247][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 730.069782][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 730.136628][ T29] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 730.146111][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.159641][ T29] usb 6-1: Product: syz [ 730.163971][ T29] usb 6-1: Manufacturer: syz [ 730.186460][ T29] usb 6-1: SerialNumber: syz [ 730.211416][ T29] usb 6-1: config 0 descriptor?? [ 730.319428][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'. [ 730.443450][ T29] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 730.483082][ T29] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 730.557859][ T29] usb 6-1: USB disconnect, device number 5 [ 730.616771][T14583] netlink: 'syz.0.2338': attribute type 10 has an invalid length. [ 730.694862][T14583] bond0: (slave netdevsim1): Releasing backup interface [ 730.734061][T14587] netlink: 'syz.0.2338': attribute type 10 has an invalid length. [ 730.766151][T14583] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 730.846403][T14593] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2338'. [ 730.881927][T14583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 730.951585][T14583] team0: Port device netdevsim1 added [ 731.096510][T14587] team0: Port device netdevsim1 removed [ 731.153899][T14587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.196524][T14587] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 731.221607][T14587] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 731.778356][T14611] netlink: 'syz.6.2345': attribute type 10 has an invalid length. [ 731.892760][T14612] netlink: 'syz.6.2345': attribute type 10 has an invalid length. [ 731.952265][T14611] bond0: (slave netdevsim1): Releasing backup interface [ 732.131036][T14615] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2345'. [ 732.226070][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.353061][T14611] team0: Port device netdevsim1 added [ 732.417900][T14191] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 732.530427][T14612] team0: Port device netdevsim1 removed [ 732.623481][T14191] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 732.672210][T14612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.681289][T14191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.724013][T14612] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 732.736475][T14191] usb 3-1: config 0 has no interface number 0 [ 732.757839][T14191] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 732.805450][T14191] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 732.871293][T14191] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.999841][T14191] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 733.048587][T14191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.094794][T14191] usb 3-1: Product: syz [ 733.121628][T14191] usb 3-1: Manufacturer: syz [ 733.141657][T14191] usb 3-1: SerialNumber: syz [ 733.169490][T14191] usb 3-1: config 0 descriptor?? [ 733.482048][T14191] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 735.586161][T14191] usb 3-1: USB disconnect, device number 2 [ 735.586678][T14640] fuse: Unknown parameter 'user_ie' [ 736.095563][T14644] syzkaller1: entered promiscuous mode [ 736.124930][T14644] syzkaller1: entered allmulticast mode [ 736.551954][T14670] netlink: 'syz.4.2359': attribute type 10 has an invalid length. [ 736.681658][T14670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.681781][T14672] netlink: 'syz.4.2359': attribute type 10 has an invalid length. [ 736.884654][T14670] team0: Port device netdevsim1 added [ 736.894012][T14675] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2359'. [ 737.067805][T14672] team0: Port device netdevsim1 removed [ 737.489055][ T189] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 737.677603][ T189] usb 3-1: Using ep0 maxpacket: 8 [ 737.696831][ T189] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 737.738744][ T189] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 737.777295][ T189] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.829296][ T189] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 737.849919][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.905833][ T189] usbtmc 3-1:16.0: bulk endpoints not found [ 739.547866][ T5717] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 739.718308][ T5717] usb 5-1: Using ep0 maxpacket: 8 [ 739.736321][ T5717] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 739.759589][ T5717] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 739.784978][ T5717] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.837972][ T5717] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 739.869400][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.924041][ T5717] usbtmc 5-1:16.0: bulk endpoints not found [ 739.964460][ T5717] usb 3-1: USB disconnect, device number 3 [ 740.437685][ T5717] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 740.617533][ T5717] usb 6-1: Using ep0 maxpacket: 32 [ 740.642777][ T5717] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 740.681562][ T5717] usb 6-1: config 0 has no interface number 0 [ 740.723973][ T5717] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 740.764852][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.824930][ T5717] usb 6-1: Product: syz [ 740.856367][ T5717] usb 6-1: Manufacturer: syz [ 740.873183][ T5717] usb 6-1: SerialNumber: syz [ 740.899469][ T5717] usb 6-1: config 0 descriptor?? [ 740.925489][ T5717] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 741.063436][T14722] kvm: user requested TSC rate below hardware speed [ 741.099304][T14722] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 741.174840][ T5717] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 741.382935][ T5717] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 742.028557][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 742.044420][ T5717] usb 6-1: USB disconnect, device number 6 [ 742.085382][ T5717] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 742.142953][ T5717] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 742.185668][ T5717] quatech2 6-1:0.51: device disconnected [ 742.910842][T14736] fuse: Bad value for 'group_id' [ 742.945479][T14736] fuse: Bad value for 'group_id' [ 743.934777][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2382'. [ 744.004701][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2382'. [ 744.104064][ T5717] usb 5-1: USB disconnect, device number 119 [ 744.436685][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 744.460564][T14764] kvm: user requested TSC rate below hardware speed [ 744.478786][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 744.506446][T13499] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 744.679336][T13499] usb 7-1: Using ep0 maxpacket: 8 [ 744.741571][T13499] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.780203][T13499] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 744.795526][T13499] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 744.805282][T13499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.807506][ T5628] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 744.831264][T13499] usb 7-1: Product: syz [ 744.835805][T13499] usb 7-1: Manufacturer: syz [ 744.842783][T13499] usb 7-1: SerialNumber: syz [ 744.869318][T13499] usb 7-1: config 0 descriptor?? [ 744.944740][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2387'. [ 745.010539][ T5628] usb 5-1: unable to get BOS descriptor or descriptor too short [ 745.030634][ T5628] usb 5-1: config 63 has an invalid descriptor of length 159, skipping remainder of the config [ 745.067330][ T5628] usb 5-1: config 63 has 0 interfaces, different from the descriptor's value: 1 [ 745.116169][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2382'. [ 745.126586][ T5628] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 745.156243][ T5628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.179688][ T5628] usb 5-1: Product: syz [ 745.194913][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2382'. [ 745.209232][ T5628] usb 5-1: Manufacturer: syz [ 745.230085][ T5628] usb 5-1: SerialNumber: syz [ 745.231335][ T5717] usb 7-1: USB disconnect, device number 4 [ 745.532933][ T5628] usb 5-1: USB disconnect, device number 120 [ 747.410815][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.417655][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.718139][T14807] kvm: user requested TSC rate below hardware speed [ 747.744489][T14807] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 749.384288][T14830] netlink: 'syz.6.2400': attribute type 10 has an invalid length. [ 749.506368][T14834] netlink: 'syz.6.2400': attribute type 10 has an invalid length. [ 749.654451][T14830] bond0: (slave netdevsim1): Releasing backup interface [ 749.757906][T14838] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2400'. [ 749.889738][T14830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.166741][T14830] team0: Port device netdevsim1 added [ 750.287730][ T5717] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 750.298663][T14834] team0: Port device netdevsim1 removed [ 750.371758][T14834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.469904][ T5717] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 750.516173][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.572240][T14834] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 750.638692][ T5717] usb 6-1: config 0 descriptor?? [ 750.713001][ T5717] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 751.196299][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 751.246512][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 751.832763][T14840] program syz.5.2403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 756.529821][ T5717] gspca_stv06xx: I2C: Read error writing address: -110 [ 762.220072][ T4992] udevd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=-1000 [ 762.310498][ T4992] CPU: 0 UID: 0 PID: 4992 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 762.310522][ T4992] Tainted: [L]=SOFTLOCKUP [ 762.310527][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 762.310535][ T4992] Call Trace: [ 762.310540][ T4992] [ 762.310546][ T4992] dump_stack_lvl+0xe8/0x150 [ 762.310571][ T4992] dump_header+0xd3/0x4b0 [ 762.310589][ T4992] oom_kill_process+0x3ab/0x970 [ 762.310609][ T4992] out_of_memory+0x1064/0x1480 [ 762.310629][ T4992] ? __pfx_out_of_memory+0x10/0x10 [ 762.310647][ T4992] __alloc_pages_may_oom+0x1ea/0x330 [ 762.310660][ T4992] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 762.310679][ T4992] ? __pfx___alloc_pages_may_oom+0x10/0x10 [ 762.310703][ T4992] __alloc_pages_slowpath+0x6e8/0xcc0 [ 762.310730][ T4992] __alloc_frozen_pages_noprof+0x31f/0x380 [ 762.310749][ T4992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 762.310768][ T4992] ? __pfx_policy_nodemask+0x10/0x10 [ 762.310791][ T4992] alloc_pages_mpol+0x212/0x380 [ 762.310812][ T4992] alloc_pages_noprof+0xac/0x2a0 [ 762.310831][ T4992] folio_alloc_noprof+0x1e/0x30 [ 762.310849][ T4992] filemap_alloc_folio_noprof+0x111/0x470 [ 762.310871][ T4992] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 762.310889][ T4992] ? filemap_fault+0xa55/0x13b0 [ 762.310908][ T4992] __filemap_get_folio_mpol+0x402/0x1000 [ 762.310927][ T4992] filemap_fault+0xa84/0x13b0 [ 762.310944][ T4992] ? __pfx_filemap_fault+0x10/0x10 [ 762.310960][ T4992] ? __pfx_filemap_map_pages+0x10/0x10 [ 762.310980][ T4992] __do_fault+0x138/0x2a0 [ 762.310997][ T4992] ? do_pte_missing+0x140c/0x34b0 [ 762.311011][ T4992] do_pte_missing+0x2215/0x34b0 [ 762.311033][ T4992] ? handle_mm_fault+0xec/0x3080 [ 762.311048][ T4992] handle_mm_fault+0x1b36/0x3080 [ 762.311068][ T4992] ? handle_mm_fault+0xec/0x3080 [ 762.311086][ T4992] ? __pfx_handle_mm_fault+0x10/0x10 [ 762.311103][ T4992] ? lock_vma_under_rcu+0x45a/0x500 [ 762.311132][ T4992] do_user_addr_fault+0xa4d/0x1340 [ 762.311156][ T4992] ? trace_page_fault_user+0x84/0x1e0 [ 762.311175][ T4992] exc_page_fault+0x6a/0xc0 [ 762.311197][ T4992] asm_exc_page_fault+0x26/0x30 [ 762.311209][ T4992] RIP: 0033:0x5652ca30d909 [ 762.311226][ T4992] Code: Unable to access opcode bytes at 0x5652ca30d8df. [ 762.311232][ T4992] RSP: 002b:00007ffcf1b98830 EFLAGS: 00010246 [ 762.311245][ T4992] RAX: 0000000000000000 RBX: 00005652ca330400 RCX: 00007f24dfd11b0a [ 762.311254][ T4992] RDX: 00007ffcf1b98830 RSI: 00005652ca31e296 RDI: 00000000ffffff9c [ 762.311262][ T4992] RBP: 0000565307fbc148 R08: 000000002d4e8ef3 R09: 3fffffffffffffff [ 762.311271][ T4992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.311278][ T4992] R13: 00007ffcf1b98830 R14: 0000000000000000 R15: 0000000000000000 [ 762.311296][ T4992] [ 762.584661][ T4992] Mem-Info: [ 762.588250][ T4992] active_anon:2122 inactive_anon:3068 isolated_anon:0 [ 762.588250][ T4992] active_file:2 inactive_file:83 isolated_file:0 [ 762.588250][ T4992] unevictable:772 dirty:0 writeback:0 [ 762.588250][ T4992] slab_reclaimable:6839 slab_unreclaimable:109639 [ 762.588250][ T4992] mapped:36874 shmem:3616 pagetables:4255 [ 762.588250][ T4992] sec_pagetables:0 bounce:0 [ 762.588250][ T4992] kernel_misc_reclaimable:0 [ 762.588250][ T4992] free:20841 free_pcp:469 free_cma:0 [ 762.632958][ T4992] Node 0 active_anon:148kB inactive_anon:724kB active_file:16kB inactive_file:164kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:2360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:6416kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 762.667137][ T4992] Node 1 active_anon:8340kB inactive_anon:11548kB active_file:0kB inactive_file:168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44996kB dirty:0kB writeback:0kB shmem:12104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:800kB pagetables:10604kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 762.701438][ T4992] Node 0 DMA free:10060kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.731377][ T4992] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 762.737479][ T4992] Node 0 DMA32 free:25128kB boost:18432kB min:52592kB low:61132kB high:69672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148kB inactive_anon:724kB active_file:16kB inactive_file:164kB unevictable:1552kB writepending:0kB zspages:636kB present:3129332kB managed:2548708kB mlocked:16kB bounce:0kB free_pcp:272kB local_pcp:0kB free_cma:0kB [ 762.771373][ T4992] lowmem_reserve[]: 0 0 0 0 0 [ 762.776157][ T4992] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.805590][ T4992] lowmem_reserve[]: 0 0 0 0 0 [ 762.810407][ T4992] Node 1 Normal free:48176kB boost:4096kB min:59832kB low:73764kB high:87696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9632kB inactive_anon:10256kB active_file:0kB inactive_file:180kB unevictable:1536kB writepending:0kB zspages:5216kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1540kB local_pcp:436kB free_cma:0kB [ 762.844607][ T4992] lowmem_reserve[]: 0 0 0 0 0 [ 762.849629][ T4992] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10060kB [ 762.864826][ T4992] Node 0 DMA32: 233*4kB (UME) 308*8kB (UME) 343*16kB (UME) 154*32kB (ME) 92*64kB (ME) 38*128kB (UME) 2*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25076kB [ 762.881152][ T4992] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 762.892790][ T4992] Node 1 Normal: 474*4kB (UM) 572*8kB (M) 436*16kB (UM) 290*32kB (M) 163*64kB (UM) 49*128kB (M) 12*256kB (M) 5*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 48136kB [ 762.919396][ T4992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.973903][ T4992] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 763.034233][ T4992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 763.096726][ T4992] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 763.155332][ T4992] 4442 total pagecache pages [ 763.189650][ T4992] 750 pages in swap cache [ 763.230407][ T4992] Free swap = 76kB [ 763.245173][ T4992] Total swap = 124996kB [ 763.277468][ T4992] 2097051 pages RAM [ 763.296318][ T4992] 0 pages HighMem/MovableOnly [ 763.327037][ T4992] 428194 pages reserved [ 763.351864][ T4992] 0 pages cma reserved [ 763.373312][ T4992] Unreclaimable slab info: [ 763.431545][ T4992] Name Used Total [ 763.469000][ T4992] pid_3 9KB 23KB [ 763.516288][ T4992] pid_2 75KB 133KB [ 763.553874][ T4992] bio-464 17KB 22KB [ 763.587443][ T4992] bio-528 19KB 31KB [ 763.623918][ T4992] bio-544 19KB 31KB [ 763.653117][ T4992] bio-552 19KB 31KB [ 763.692253][ T4992] zswap_entry 567KB 644KB [ 763.726175][ T4992] AF_VSOCK 35KB 61KB [ 763.767783][ T4992] sw_flow_stats 14KB 16KB [ 763.804177][ T4992] sw_flow 39KB 47KB [ 763.849041][ T4992] batadv_tt_change_cache 3KB 8KB [ 763.879698][ T4992] batadv_tl_cache 14KB 16KB [ 763.911922][ T4992] INET6_SMC 35KB 58KB [ 763.943035][ T4992] INET_SMC 34KB 62KB [ 763.982439][ T4992] SMC6 56KB 93KB [ 764.018995][ T4992] SMC 28KB 93KB [ 764.051461][ T4992] TIPC 52KB 92KB [ 764.091770][ T4992] RDS 18KB 61KB [ 764.131702][ T4992] rds_connection 16KB 18KB [ 764.164098][ T4992] SCTPv6 83KB 150KB [ 764.201834][ T4992] SCTP 21KB 91KB [ 764.236484][ T4992] sctp_chunk 9KB 15KB [ 764.271367][ T4992] sctp_bind_bucket 2KB 8KB [ 764.314410][ T4992] L2TP/IPv6 28KB 63KB [ 764.342273][ T4992] L2TP/IP 28KB 63KB [ 764.386660][ T4992] KCM 29KB 62KB [ 764.414221][ T4992] kcm_mux 37KB 47KB [ 764.451107][ T4992] RXRPC 34KB 96KB [ 764.500160][ T4992] rxrpc_call_jar 245KB 286KB [ 764.531720][ T4992] can_receiver 10KB 19KB [ 764.569273][ T4992] net_bridge_fdb_entry 45KB 47KB [ 764.615536][ T4992] MPTCPv6 60KB 95KB [ 764.643387][ T4992] ip6-frags 9KB 15KB [ 764.702175][ T4992] fib6_node 135KB 156KB [ 764.733458][ T4992] ip6_dst_cache 142KB 330KB [ 764.769234][ T4992] mfc6_cache 14KB 16KB [ 764.807679][ T4992] RAWv6 148KB 247KB [ 764.845243][ T4992] UDPv6 112KB 157KB [ 764.887214][ T4992] tw_sock_TCPv6 19KB 23KB [ 764.916604][ T4992] request_sock_TCPv6 10KB 15KB [ 764.966338][ T4992] TCPv6 216KB 334KB [ 765.003451][ T4992] nf_conntrack 19KB 23KB [ 765.043012][ T4992] fq_flow_cache 11KB 11KB [ 765.083422][ T4992] wg_peer 118KB 118KB [ 765.122904][ T4992] allowedips_node 18KB 19KB [ 765.161588][ T4992] t10_alua_lu_gp_cache 8KB 11KB [ 765.202722][ T4992] scsi_sense_cache 1318KB 1328KB [ 765.238290][ T4992] virtio_scsi_cmd 21KB 24KB [ 765.279041][ T4992] bio-136 46KB 52KB [ 765.319076][ T4992] io_kiocb 42KB 56KB [ 765.353063][ T4992] bio-264 14KB 31KB [ 765.401991][ T4992] mqueue_inode_cache 47KB 61KB [ 765.440739][ T4992] bio-272 10KB 15KB [ 765.481488][ T4992] f2fs_bio_post_read_ctx 30KB 31KB [ 765.520809][ T4992] jfs_mp 14KB 15KB [ 765.561969][ T4992] fuse_request 9KB 15KB [ 765.592188][ T4992] cifs_small_rq 28KB 32KB [ 765.626646][ T4992] cifs_request 67KB 67KB [ 765.657231][ T4992] cifs_mpx_ids 8KB 11KB [ 765.691236][ T4992] cifs_io_subrequest 42KB 47KB [ 765.731767][ T4992] cifs_io_request 105KB 111KB [ 765.783608][ T4992] nfs_commit_data 24KB 31KB [ 765.821790][ T4992] nfs_write_data 38KB 47KB [ 765.860012][ T4992] jbd2_inode 10KB 11KB [ 765.892784][ T4992] ext4_system_zone 1KB 3KB [ 765.935992][ T4992] ext4_io_end_vec 0KB 11KB [ 765.985264][ T4992] kioctx 19KB 31KB [ 766.032265][ T4992] aio_kiocb 5KB 18KB [ 766.079532][ T4992] fanotify_mark 22KB 23KB [ 766.122803][ T4992] fasync_cache 19KB 19KB [ 766.161430][ T4992] userfaultfd_ctx_cache 28KB 47KB [ 766.191273][ T4992] zspage 114KB 133KB [ 766.223402][ T4992] zs_handle 203KB 204KB [ 766.260881][ T4992] pid_namespace 9KB 61KB [ 766.294481][ T4992] kvm_gmem_inode_cache 15KB 15KB [ 766.329395][ T4992] kvm_async_pf 22KB 31KB [ 766.368562][ T4992] kvm_vcpu 73KB 187KB [ 766.405935][ T4992] kvm_mmu_page_header 19KB 38KB [ 766.448474][ T4992] pte_list_desc 3KB 19KB [ 766.486621][ T4992] x86_emulator 31KB 95KB [ 766.526211][ T4992] rpc_buffers 25KB 31KB [ 766.554978][ T4992] rpc_tasks 8KB 11KB [ 766.598766][ T4992] UNIX-STREAM 72KB 159KB [ 766.636253][ T4992] UNIX 140KB 318KB [ 766.661850][ T4992] ip4-frags 281KB 355KB [ 766.675955][ T4992] MPTCP 33KB 91KB [ 766.690249][ T4992] tcp_bind2_bucket 14KB 20KB [ 766.719883][ T4992] tcp_bind_bucket 15KB 24KB [ 766.754054][ T4992] inet_peer 14KB 16KB [ 766.780626][ T4992] xfrm_state 20KB 63KB [ 766.829907][ T4992] ip_fib_trie 28KB 32KB [ 766.867419][ T4992] ip_fib_alias 92KB 98KB [ 766.897537][ T4992] rtable 21KB 112KB [ 766.930603][ T4992] PING 15KB 63KB [ 766.970143][ T4992] RAW 35KB 63KB [ 767.007908][ T4992] UDP 116KB 159KB [ 767.042164][ T4992] tw_sock_TCP 16KB 23KB [ 767.085736][ T4992] request_sock_TCP 17KB 23KB [ 767.119716][ T4992] TCP 386KB 672KB [ 767.152584][ T4992] fs_bio_integrity 7KB 8KB [ 767.185134][ T4992] hugetlbfs_inode_cache 15KB 31KB [ 767.219573][ T4992] netfs_subrequest 35KB 37KB [ 767.262475][ T4992] netfs_request 105KB 111KB [ 767.293716][ T4992] bio-288 21KB 23KB [ 767.327205][ T4992] ep_head 3KB 16KB [ 767.361974][ T4992] eventpoll_pwq 7KB 15KB [ 767.402758][ T4992] eventpoll_epi 22KB 47KB [ 767.435630][ T4992] inotify_inode_mark 20KB 35KB [ 767.470314][ T4992] bpf_fs_inode_cache 14KB 15KB [ 767.514919][ T4992] sgpool-128 17KB 29KB [ 767.540522][ T4992] sgpool-64 225KB 286KB [ 767.576640][ T4992] sgpool-32 86KB 110KB [ 767.613047][ T4992] sgpool-16 40KB 52KB [ 767.658806][ T4992] sgpool-8 82KB 97KB [ 767.695311][ T4992] bio_crypt_ctx 9KB 11KB [ 767.736370][ T4992] bio_integrity_data 7KB 8KB [ 767.776324][ T4992] request_queue 193KB 272KB [ 767.814762][ T4992] blkdev_ioc 8KB 11KB [ 767.857260][ T4992] bio-200 318KB 330KB [ 767.886013][ T4992] biovec-max 828KB 901KB [ 767.930217][ T4992] biovec-128 165KB 191KB [ 767.981251][ T4992] biovec-64 201KB 220KB [ 768.019444][ T4992] biovec-16 75KB 90KB [ 768.065805][ T4992] mm_slot 3KB 7KB [ 768.100723][ T4992] ksm_mm_slot 7KB 8KB [ 768.137065][ T4992] user_namespace 28KB 30KB [ 768.185034][ T4992] uid_cache 16KB 18KB [ 768.224748][ T4992] dmaengine-unmap-256 26KB 30KB [ 768.255429][ T4992] dmaengine-unmap-128 14KB 15KB [ 768.297532][ T4992] dmaengine-unmap-16 7KB 8KB [ 768.329752][ T4992] dmaengine-unmap-2 3KB 4KB [ 768.368778][ T4992] QIPCRTR 23KB 62KB [ 768.401532][ T4992] audit_buffer 13KB 19KB [ 768.438433][ T4992] skbuff_ext_cache 11KB 28KB [ 768.479527][ T4992] skbuff_small_head 7721KB 11346KB [ 768.514190][ T4992] skbuff_fclone_cache 940KB 1065KB [ 768.555478][ T4992] skbuff_head_cache 9635KB 9637KB [ 768.596140][ T4992] configfs_dir_cache 14KB 16KB [ 768.631828][ T4992] file_lease_cache 12KB 42KB [ 768.674391][ T4992] file_lock_cache 24KB 47KB [ 768.710471][ T4992] file_lock_ctx 26KB 31KB [ 768.748989][ T4992] fsnotify_inode_mark_connector 16KB 27KB [ 768.794379][ T4992] fsnotify_mark_connector 6KB 7KB [ 768.840690][ T4992] posix_timers_cache 28KB 48KB [ 768.873436][ T4992] taskstats 56KB 111KB [ 768.909243][ T4992] mem_cgroup_per_node 76KB 92KB [ 768.949134][ T4992] mem_cgroup 82KB 92KB [ 768.983945][ T4992] proc_dir_entry 1083KB 1128KB [ 769.021987][ T4992] pde_opener 0KB 7KB [ 769.058910][ T4992] seq_file 83KB 145KB [ 769.097554][ T4992] sigqueue 10KB 55KB [ 769.133121][ T4992] shmem_inode_cache 7422KB 7947KB [ 769.186100][ T4992] kernfs_iattrs_cache 8KB 15KB [ 769.224459][ T4992] kernfs_node_cache 30911KB 31006KB [ 769.273976][ T4992] mnt_cache 132KB 204KB [ 769.317015][ T4992] filp 952KB 1456KB [ 769.352140][ T4992] names_cache 1058KB 1268KB [ 769.384747][ T4992] net_namespace 166KB 235KB [ 769.427717][ T4992] ima_iint_cache 20KB 46KB [ 769.463174][ T4992] lsm_inode_cache 1437KB 1874KB [ 769.513336][ T4992] lsm_file_cache 375KB 581KB [ 769.552629][ T4992] key_jar 32KB 39KB [ 769.593028][ T4992] uts_namespace 45KB 46KB [ 769.639537][ T4992] nsproxy 11KB 15KB [ 769.662979][ T4992] vm_area_struct 1558KB 1732KB [ 769.699890][ T4992] fs_cache 33KB 64KB [ 769.733548][ T4992] files_cache 133KB 255KB [ 769.768650][ T4992] task_exec_state 12KB 40KB [ 769.806828][ T4992] signal_cache 909KB 2126KB [ 769.844936][ T4992] sighand_cache 1137KB 2495KB [ 769.877560][ T4992] task_struct 4487KB 5239KB [ 769.915955][ T4992] cred 149KB 376KB [ 769.950993][ T4992] anon_vma_chain 472KB 570KB [ 769.989954][ T4992] anon_vma 501KB 603KB [ 770.037808][ T4992] pid 139KB 322KB [ 770.069667][ T4992] Acpi-Operand 117KB 233KB [ 770.114113][ T4992] Acpi-ParseExt 12KB 31KB [ 770.149093][ T4992] Acpi-Parse 3KB 27KB [ 770.190410][ T4992] Acpi-State 4KB 23KB [ 770.230497][ T4992] Acpi-Namespace 28KB 40KB [ 770.273284][ T4992] shared_policy_node 7KB 8KB [ 770.316382][ T4992] numa_policy 7KB 12KB [ 770.363658][ T4992] perf_event 15KB 31KB [ 770.402124][ T4992] trace_event_file 577KB 580KB [ 770.447002][ T4992] ftrace_event_field 1118KB 1122KB [ 770.482871][ T4992] pool_workqueue 777KB 832KB [ 770.525245][ T4992] task_group 24KB 32KB [ 770.562675][ T4992] maple_node 1294KB 1840KB [ 770.602662][ T4992] mm_struct 430KB 637KB [ 770.641794][ T4992] vmap_area 292KB 348KB [ 770.681412][ T4992] debug_objects_cache 2835KB 3050KB [ 770.720373][ T4992] page->ptl 237KB 322KB [ 770.759162][ T4992] kmalloc-cg-8k 3040KB 3232KB [ 770.783946][ T4992] kmalloc-cg-4k 22192KB 23504KB [ 770.821133][ T4992] kmalloc-cg-2k 13220KB 13536KB [ 770.861123][ T4992] kmalloc-cg-1k 3450KB 3552KB [ 770.895775][ T4992] kmalloc-cg-512 1655KB 2192KB [ 770.909514][T14762] syz.2.2379: page allocation stall for 10 secs: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP) nodemask=(null),cpuset=/,mems_allowed=0-1 [ 770.947921][ T4992] kmalloc-cg-256 521KB 576KB [ 770.975157][ T4992] kmalloc-cg-128 304KB 312KB [ 771.005778][ T4992] kmalloc-cg-64 75KB 124KB [ 771.043767][ T4992] kmalloc-cg-32 61KB 200KB [ 771.064052][T14762] CPU: 0 UID: 0 PID: 14762 Comm: syz.2.2379 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.064076][T14762] Tainted: [L]=SOFTLOCKUP [ 771.064081][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 771.064089][T14762] Call Trace: [ 771.064094][T14762] [ 771.064100][T14762] dump_stack_lvl+0xe8/0x150 [ 771.064130][T14762] check_alloc_stall_warn+0x20e/0x230 [ 771.064147][T14762] ? __pfx_check_alloc_stall_warn+0x10/0x10 [ 771.064163][T14762] ? wake_all_kswapds+0x167/0x280 [ 771.064179][T14762] __alloc_pages_slowpath+0x50e/0xcc0 [ 771.064206][T14762] __alloc_frozen_pages_noprof+0x31f/0x380 [ 771.064225][T14762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 771.064244][T14762] ? __pfx_policy_nodemask+0x10/0x10 [ 771.064262][T14762] ? __css_rstat_updated+0x235/0x540 [ 771.064307][T14762] alloc_pages_mpol+0x212/0x380 [ 771.064328][T14762] folio_alloc_mpol_noprof+0x39/0x160 [ 771.064347][T14762] shmem_alloc_and_add_folio+0x43e/0xf60 [ 771.064366][T14762] ? filemap_get_entry+0xcd/0x3f0 [ 771.064384][T14762] ? __pfx_filemap_get_entry+0x10/0x10 [ 771.064396][T14762] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 771.064412][T14762] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 771.064435][T14762] shmem_get_folio_gfp+0x5da/0x16d0 [ 771.064465][T14762] shmem_write_begin+0x16c/0x330 [ 771.064493][T14762] generic_perform_write+0x2d5/0x8f0 [ 771.064521][T14762] ? __pfx_generic_perform_write+0x10/0x10 [ 771.064534][T14762] ? down_write+0x16d/0x200 [ 771.064547][T14762] ? generic_write_checks_count+0x41a/0x520 [ 771.064565][T14762] ? file_update_time_flags+0x3b3/0x4a0 [ 771.064585][T14762] shmem_file_write_iter+0xf8/0x120 [ 771.064600][T14762] __kernel_write_iter+0x44a/0x8f0 [ 771.064624][T14762] ? __pfx___kernel_write_iter+0x10/0x10 [ 771.064641][T14762] ? get_dump_page+0x1e6/0x410 [ 771.064657][T14762] ? __asan_memset+0x22/0x50 [ 771.064670][T14762] ? iov_iter_bvec+0xb8/0x180 [ 771.064689][T14762] dump_user_range+0xc19/0x12c0 [ 771.064718][T14762] ? __pfx_dump_user_range+0x10/0x10 [ 771.064735][T14762] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 771.064757][T14762] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 771.064777][T14762] ? elf_core_dump+0x2ccb/0x4050 [ 771.064795][T14762] elf_core_dump+0x387b/0x4050 [ 771.064819][T14762] ? __pfx_elf_core_dump+0x10/0x10 [ 771.064831][T14762] ? get_signal+0x1094/0x12c0 [ 771.064857][T14762] ? __lock_acquire+0x683/0x2cf0 [ 771.064891][T14762] ? vfs_coredump+0x36ff/0x44b0 [ 771.064904][T14762] ? vfs_coredump+0x36ff/0x44b0 [ 771.064924][T14762] coredump_write+0x1290/0x1960 [ 771.064946][T14762] ? __pfx_coredump_write+0x10/0x10 [ 771.064969][T14762] ? unshare_files+0xab/0x140 [ 771.064987][T14762] vfs_coredump+0x36ff/0x44b0 [ 771.065027][T14762] ? __pfx_vfs_coredump+0x10/0x10 [ 771.065041][T14762] ? mt_find+0x186/0x630 [ 771.065097][T14762] ? __lock_acquire+0x683/0x2cf0 [ 771.065123][T14762] ? __lock_acquire+0x683/0x2cf0 [ 771.065142][T14762] ? __lock_acquire+0x683/0x2cf0 [ 771.065161][T14762] ? unwind_next_frame+0x8f/0x2550 [ 771.065173][T14762] ? lock_acquire+0x106/0x350 [ 771.065192][T14762] ? is_bpf_text_address+0x26/0x2b0 [ 771.065208][T14762] ? lock_acquire+0x106/0x350 [ 771.065229][T14762] ? is_bpf_text_address+0x26/0x2b0 [ 771.065248][T14762] ? is_bpf_text_address+0x292/0x2b0 [ 771.065264][T14762] ? is_bpf_text_address+0x26/0x2b0 [ 771.065282][T14762] ? kernel_text_address+0xa5/0xe0 [ 771.065301][T14762] ? __kernel_text_address+0xd/0x30 [ 771.065318][T14762] ? unwind_get_return_address+0x4d/0x90 [ 771.065330][T14762] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 771.065345][T14762] ? arch_stack_walk+0xfb/0x150 [ 771.065364][T14762] ? stack_trace_save+0xa9/0x100 [ 771.065378][T14762] ? __pfx_stack_trace_save+0x10/0x10 [ 771.065393][T14762] ? stack_depot_save_flags+0x33/0x800 [ 771.065408][T14762] ? __lock_acquire+0x683/0x2cf0 [ 771.065426][T14762] ? kasan_save_track+0x4f/0x80 [ 771.065442][T14762] ? kasan_save_track+0x3e/0x80 [ 771.065462][T14762] ? kasan_save_free_info+0x40/0x50 [ 771.065481][T14762] ? __kasan_slab_free+0x5c/0x80 [ 771.065498][T14762] ? kmem_cache_free+0x182/0x650 [ 771.065513][T14762] ? get_signal+0x9e7/0x12c0 [ 771.065524][T14762] ? arch_do_signal_or_restart+0xbb/0x860 [ 771.065539][T14762] ? irqentry_exit+0x2ba/0x8f0 [ 771.065555][T14762] ? asm_exc_page_fault+0x26/0x30 [ 771.065590][T14762] ? proc_coredump_connector+0x187/0x4e0 [ 771.065674][T14762] ? _raw_spin_unlock_irq+0x23/0x50 [ 771.065692][T14762] get_signal+0x1094/0x12c0 [ 771.065718][T14762] arch_do_signal_or_restart+0xbb/0x860 [ 771.065735][T14762] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 771.065764][T14762] irqentry_exit+0x2ba/0x8f0 [ 771.065780][T14762] ? trace_irq_disable+0x3b/0x140 [ 771.065798][T14762] asm_exc_page_fault+0x26/0x30 [ 771.065810][T14762] RIP: 0023:0xf6fef0ec [ 771.065828][T14762] Code: Unable to access opcode bytes at 0xf6fef0c2. [ 771.065834][T14762] RSP: 002b:00000000f52e14bc EFLAGS: 00010206 [ 771.065846][T14762] RAX: 0000000000000000 RBX: 0000000040020000 RCX: 0000000000000000 [ 771.065854][T14762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 771.065862][T14762] RBP: 00000000f52e15ec R08: 0000000000000000 R09: 0000000000000000 [ 771.065873][T14762] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 771.065881][T14762] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 771.065899][T14762] [ 771.610620][ T4992] kmalloc-cg-16 6KB 12KB [ 771.619444][T14762] Mem-Info: [ 771.623951][T14762] active_anon:2104 inactive_anon:3086 isolated_anon:0 [ 771.623951][T14762] active_file:32 inactive_file:19 isolated_file:0 [ 771.623951][T14762] unevictable:772 dirty:0 writeback:0 [ 771.623951][T14762] slab_reclaimable:6839 slab_unreclaimable:113776 [ 771.623951][T14762] mapped:36874 shmem:3616 pagetables:4255 [ 771.623951][T14762] sec_pagetables:0 bounce:0 [ 771.623951][T14762] kernel_misc_reclaimable:0 [ 771.623951][T14762] free:16834 free_pcp:318 free_cma:0 [ 771.643718][ T4992] kmalloc-cg-8 28KB 36KB [ 771.680663][T14762] Node 0 active_anon:192kB inactive_anon:680kB active_file:140kB inactive_file:4kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:2360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:6416kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 771.732542][T14762] Node 1 active_anon:10940kB inactive_anon:8948kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44996kB dirty:0kB writeback:0kB shmem:12104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:800kB pagetables:10604kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 771.774429][T14762] Node 0 DMA free:10060kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 771.812459][T14762] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 771.818289][T14762] Node 0 DMA32 free:17272kB boost:26624kB min:60784kB low:69324kB high:77864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:192kB inactive_anon:680kB active_file:140kB inactive_file:4kB unevictable:1552kB writepending:0kB zspages:636kB present:3129332kB managed:2548708kB mlocked:16kB bounce:0kB free_pcp:208kB local_pcp:32kB free_cma:0kB [ 771.858531][T14762] lowmem_reserve[]: 0 0 0 0 0 [ 771.863257][T14762] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 771.897857][ T4992] kmalloc-cg-192 57KB 68KB [ 771.933811][ T4992] kmalloc-cg-96 104KB 120KB [ 771.973233][ T4992] kmalloc-8k 8976KB 9184KB [ 772.024699][ T4992] kmalloc-4k 172608KB 172696KB [ 772.076278][ T4992] kmalloc-2k 15548KB 18464KB [ 772.122718][ T4992] kmalloc-1k 15142KB 15184KB [ 772.162022][ T4992] kmalloc-512 11244KB 15856KB [ 772.186042][ T4992] kmalloc-256 16746KB 16752KB [ 772.202248][ T4992] kmalloc-128 1848KB 2104KB [ 772.214201][T14762] lowmem_reserve[]: 0 0 0 0 0 [ 772.224152][ T4992] kmalloc-64 4190KB 4196KB [ 772.236606][ T4992] kmalloc-32 2930KB 3228KB [ 772.243092][ T4992] kmalloc-16 455KB 480KB [ 772.257689][ T4992] kmalloc-8 437KB 460KB [ 772.284506][ T4992] kmalloc-192 2390KB 2400KB [ 772.290729][ T4992] kmalloc-96 2047KB 2184KB [ 772.298353][ T4992] kmem_cache_node 215KB 220KB [ 772.304465][ T4992] kmem_cache 179KB 198KB [ 772.310872][ T4992] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz3,task=syz.3.2183,pid=13955,uid=0 [ 772.334899][T14762] Node 1 Normal free:39552kB boost:24576kB min:80312kB low:94244kB high:108176kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10908kB inactive_anon:8980kB active_file:108kB inactive_file:52kB unevictable:1536kB writepending:0kB zspages:5216kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1132kB local_pcp:800kB free_cma:0kB [ 772.378079][ T4992] Out of memory: Killed process 13956 (syz.3.2183) total-vm:102288kB, anon-rss:8kB, file-rss:20492kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 772.428582][T14801] syz.2.2388: page allocation failure: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 772.741441][T14801] CPU: 0 UID: 0 PID: 14801 Comm: syz.2.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.741466][T14801] Tainted: [L]=SOFTLOCKUP [ 772.741472][T14801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 772.741483][T14801] Call Trace: [ 772.741491][T14801] [ 772.741501][T14801] dump_stack_lvl+0xe8/0x150 [ 772.741533][T14801] warn_alloc+0x24c/0x270 [ 772.741554][T14801] ? __pfx_warn_alloc+0x10/0x10 [ 772.741580][T14801] __alloc_pages_slowpath+0xc3e/0xcc0 [ 772.741607][T14801] __alloc_frozen_pages_noprof+0x31f/0x380 [ 772.741626][T14801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 772.741645][T14801] ? __pfx_policy_nodemask+0x10/0x10 [ 772.741663][T14801] ? __css_rstat_updated+0x3cb/0x540 [ 772.741683][T14801] alloc_pages_mpol+0x212/0x380 [ 772.741703][T14801] folio_alloc_mpol_noprof+0x39/0x160 [ 772.741722][T14801] shmem_alloc_and_add_folio+0x43e/0xf60 [ 772.741736][T14801] ? filemap_get_entry+0xcd/0x3f0 [ 772.741753][T14801] ? __pfx_filemap_get_entry+0x10/0x10 [ 772.741766][T14801] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 772.741781][T14801] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 772.741803][T14801] shmem_get_folio_gfp+0x5da/0x16d0 [ 772.741832][T14801] shmem_write_begin+0x16c/0x330 [ 772.741849][T14801] generic_perform_write+0x2d5/0x8f0 [ 772.741871][T14801] ? __pfx_generic_perform_write+0x10/0x10 [ 772.741886][T14801] ? __mark_inode_dirty+0x4e7/0x13b0 [ 772.741922][T14801] ? mnt_put_write_access_file+0xc0/0x100 [ 772.741936][T14801] ? file_update_time_flags+0x400/0x4a0 [ 772.741956][T14801] shmem_file_write_iter+0xf8/0x120 [ 772.741971][T14801] __kernel_write_iter+0x44a/0x8f0 [ 772.741992][T14801] ? __pfx___kernel_write_iter+0x10/0x10 [ 772.742009][T14801] ? get_dump_page+0x1e6/0x410 [ 772.742031][T14801] ? __asan_memset+0x22/0x50 [ 772.742046][T14801] ? iov_iter_bvec+0xb8/0x180 [ 772.742065][T14801] dump_user_range+0xc19/0x12c0 [ 772.742087][T14801] ? __pfx_dump_user_range+0x10/0x10 [ 772.742104][T14801] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 772.742123][T14801] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 772.742144][T14801] ? elf_core_dump+0x2ccb/0x4050 [ 772.742161][T14801] elf_core_dump+0x387b/0x4050 [ 772.742186][T14801] ? __pfx_elf_core_dump+0x10/0x10 [ 772.742198][T14801] ? get_signal+0x1094/0x12c0 [ 772.742223][T14801] ? __lock_acquire+0x683/0x2cf0 [ 772.742254][T14801] ? vfs_coredump+0x36ff/0x44b0 [ 772.742267][T14801] ? vfs_coredump+0x36ff/0x44b0 [ 772.742286][T14801] coredump_write+0x1290/0x1960 [ 772.742307][T14801] ? __pfx_coredump_write+0x10/0x10 [ 772.742330][T14801] ? unshare_files+0xab/0x140 [ 772.742348][T14801] vfs_coredump+0x36ff/0x44b0 [ 772.742372][T14801] ? __pfx_vfs_coredump+0x10/0x10 [ 772.742386][T14801] ? mt_find+0x186/0x630 [ 772.742402][T14801] ? __lock_acquire+0x683/0x2cf0 [ 772.742422][T14801] ? __lock_acquire+0x683/0x2cf0 [ 772.742442][T14801] ? is_bpf_text_address+0x26/0x2b0 [ 772.742462][T14801] ? unwind_next_frame+0x8f/0x2550 [ 772.742474][T14801] ? lock_acquire+0x106/0x350 [ 772.742493][T14801] ? is_bpf_text_address+0x26/0x2b0 [ 772.742508][T14801] ? lock_acquire+0x106/0x350 [ 772.742532][T14801] ? is_bpf_text_address+0x26/0x2b0 [ 772.742551][T14801] ? is_bpf_text_address+0x292/0x2b0 [ 772.742567][T14801] ? is_bpf_text_address+0x26/0x2b0 [ 772.742585][T14801] ? kernel_text_address+0xa5/0xe0 [ 772.742603][T14801] ? __kernel_text_address+0xd/0x30 [ 772.742620][T14801] ? unwind_get_return_address+0x4d/0x90 [ 772.742632][T14801] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 772.742647][T14801] ? arch_stack_walk+0xfb/0x150 [ 772.742666][T14801] ? stack_trace_save+0xa9/0x100 [ 772.742680][T14801] ? __pfx_stack_trace_save+0x10/0x10 [ 772.742695][T14801] ? stack_depot_save_flags+0x33/0x800 [ 772.742709][T14801] ? __lock_acquire+0x683/0x2cf0 [ 772.742728][T14801] ? kasan_save_track+0x4f/0x80 [ 772.742742][T14801] ? kasan_save_track+0x3e/0x80 [ 772.742755][T14801] ? kasan_save_free_info+0x40/0x50 [ 772.742766][T14801] ? __kasan_slab_free+0x5c/0x80 [ 772.742781][T14801] ? kmem_cache_free+0x182/0x650 [ 772.742795][T14801] ? get_signal+0x9e7/0x12c0 [ 772.742807][T14801] ? arch_do_signal_or_restart+0xbb/0x860 [ 772.742830][T14801] ? irqentry_exit+0x2ba/0x8f0 [ 772.742858][T14801] ? asm_exc_page_fault+0x26/0x30 [ 772.742893][T14801] ? proc_coredump_connector+0x187/0x4e0 [ 772.742919][T14801] ? _raw_spin_unlock_irq+0x23/0x50 [ 772.742937][T14801] get_signal+0x1094/0x12c0 [ 772.742964][T14801] arch_do_signal_or_restart+0xbb/0x860 [ 772.742982][T14801] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 772.743010][T14801] irqentry_exit+0x2ba/0x8f0 [ 772.743032][T14801] ? trace_irq_disable+0x3b/0x140 [ 772.743051][T14801] asm_exc_page_fault+0x26/0x30 [ 772.743062][T14801] RIP: 0023:0xf6fef0ec [ 772.743080][T14801] Code: Unable to access opcode bytes at 0xf6fef0c2. [ 772.743087][T14801] RSP: 002b:00000000f52e14bc EFLAGS: 00010206 [ 772.743099][T14801] RAX: 0000000000000000 RBX: 0000000040020000 RCX: 0000000000000000 [ 772.743107][T14801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.743114][T14801] RBP: 00000000f52e15ec R08: 0000000000000000 R09: 0000000000000000 [ 772.743122][T14801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 772.743129][T14801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.743147][T14801] [ 772.743594][T14762] lowmem_reserve[]: [ 773.302746][T14868] syz.0.2412 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 773.303552][ T5628] usb 6-1: USB disconnect, device number 7 [ 773.306609][T14868] CPU: 1 UID: 0 PID: 14868 Comm: syz.0.2412 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.306640][T14868] Tainted: [L]=SOFTLOCKUP [ 773.306646][T14868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 773.306657][T14868] Call Trace: [ 773.306665][T14868] [ 773.306674][T14868] dump_stack_lvl+0xe8/0x150 [ 773.306707][T14868] dump_header+0xd3/0x4b0 [ 773.306734][T14868] oom_kill_process+0x3ab/0x970 [ 773.306758][T14868] out_of_memory+0x1191/0x1480 [ 773.306788][T14868] ? __pfx_out_of_memory+0x10/0x10 [ 773.306816][T14868] __alloc_pages_may_oom+0x1ea/0x330 [ 773.306837][T14868] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 773.306865][T14868] ? __pfx___alloc_pages_may_oom+0x10/0x10 [ 773.306904][T14868] __alloc_pages_slowpath+0x6e8/0xcc0 [ 773.306946][T14868] __alloc_frozen_pages_noprof+0x31f/0x380 [ 773.306974][T14868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 773.307003][T14868] ? __pfx_policy_nodemask+0x10/0x10 [ 773.307040][T14868] alloc_pages_mpol+0x212/0x380 [ 773.307071][T14868] alloc_pages_noprof+0xac/0x2a0 [ 773.307100][T14868] folio_alloc_noprof+0x1e/0x30 [ 773.307126][T14868] filemap_alloc_folio_noprof+0x111/0x470 [ 773.307160][T14868] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 773.307187][T14868] ? filemap_fault+0xa55/0x13b0 [ 773.307216][T14868] __filemap_get_folio_mpol+0x402/0x1000 [ 773.307245][T14868] filemap_fault+0xa84/0x13b0 [ 773.307273][T14868] ? __pfx_filemap_fault+0x10/0x10 [ 773.307296][T14868] ? __pfx_filemap_map_pages+0x10/0x10 [ 773.307329][T14868] __do_fault+0x138/0x2a0 [ 773.307352][T14868] ? do_pte_missing+0x140c/0x34b0 [ 773.307375][T14868] do_pte_missing+0x2215/0x34b0 [ 773.307412][T14868] ? handle_mm_fault+0xec/0x3080 [ 773.307437][T14868] handle_mm_fault+0x1b36/0x3080 [ 773.307469][T14868] ? handle_mm_fault+0xec/0x3080 [ 773.307497][T14868] ? __pfx_handle_mm_fault+0x10/0x10 [ 773.307521][T14868] ? lock_vma_under_rcu+0x45a/0x500 [ 773.307569][T14868] do_user_addr_fault+0xa4d/0x1340 [ 773.307604][T14868] ? trace_page_fault_user+0x84/0x1e0 [ 773.307633][T14868] exc_page_fault+0x6a/0xc0 [ 773.307660][T14868] asm_exc_page_fault+0x26/0x30 [ 773.307678][T14868] RIP: 0023:0xf70cf1d8 [ 773.307702][T14868] Code: Unable to access opcode bytes at 0xf70cf1ae. [ 773.307711][T14868] RSP: 002b:00000000f75afa20 EFLAGS: 00010286 [ 773.307728][T14868] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 00000000bfffffff [ 773.307741][T14868] RDX: 000000000c230000 RSI: 00000000000000f6 RDI: 000000000c230000 [ 773.307753][T14868] RBP: 00000000f7fb5610 R08: 0000000000000000 R09: 0000000000000000 [ 773.307764][T14868] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 773.307775][T14868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 773.307804][T14868] [ 773.307890][T14868] Mem-Info: [ 773.622434][T14801] Mem-Info: [ 773.673907][T14762] 0 0 0 0 0 [ 773.677257][T14801] active_anon:2889 inactive_anon:2260 isolated_anon:0 [ 773.677257][T14801] active_file:35 inactive_file:38 isolated_file:0 [ 773.677257][T14801] unevictable:772 dirty:0 writeback:0 [ 773.677257][T14801] slab_reclaimable:6827 slab_unreclaimable:109889 [ 773.677257][T14801] mapped:36874 shmem:3616 pagetables:4230 [ 773.677257][T14801] sec_pagetables:0 bounce:0 [ 773.677257][T14801] kernel_misc_reclaimable:0 [ 773.677257][T14801] free:21050 free_pcp:347 free_cma:0 [ 773.690664][T14762] Node 0 [ 773.777655][T14868] active_anon:2581 inactive_anon:2568 isolated_anon:0 [ 773.777655][T14868] active_file:27 inactive_file:50 isolated_file:0 [ 773.777655][T14868] unevictable:772 dirty:0 writeback:0 [ 773.777655][T14868] slab_reclaimable:6827 slab_unreclaimable:109647 [ 773.777655][T14868] mapped:36874 shmem:3616 pagetables:4230 [ 773.777655][T14868] sec_pagetables:0 bounce:0 [ 773.777655][T14868] kernel_misc_reclaimable:0 [ 773.777655][T14868] free:21050 free_pcp:585 free_cma:0 [ 774.027667][T14762] DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10060kB [ 774.042038][T14801] Node 0 active_anon:188kB inactive_anon:684kB active_file:0kB inactive_file:152kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:2360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:6416kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.143651][T14762] Node 0 DMA32: 156*4kB (UME) 198*8kB (UME) 221*16kB (UME) 269*32kB (UME) 67*64kB (UME) 27*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22096kB [ 774.163747][T14868] Node 0 active_anon:112kB inactive_anon:760kB active_file:0kB inactive_file:148kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:2360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:6416kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.260880][T14762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 774.301255][T14868] Node 1 active_anon:8956kB inactive_anon:10768kB active_file:128kB inactive_file:32kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44996kB dirty:0kB writeback:0kB shmem:12104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:768kB pagetables:10476kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.404872][T14801] Node 1 active_anon:11436kB inactive_anon:8288kB active_file:136kB inactive_file:24kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44996kB dirty:0kB writeback:0kB shmem:12104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:768kB pagetables:10476kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 774.490044][T14868] Node 0 DMA free:10060kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.539101][ T32] oom_reaper: reaped process 13956 (syz.3.2183), now anon-rss:0kB, file-rss:20480kB, shmem-rss:0kB [ 774.565111][T14762] Node 1 Normal: 800*4kB (UM) 725*8kB (UM) 640*16kB (UM) 425*32kB (UM) 192*64kB (UM) 54*128kB (UM) 8*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 55112kB [ 774.592586][T14801] Node 0 DMA free:10060kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.637378][T14868] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 774.643546][T14762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 774.653218][T14868] Node 0 DMA32 free:23180kB boost:28672kB min:62832kB low:71372kB high:79912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:248kB inactive_anon:424kB active_file:156kB inactive_file:0kB unevictable:1552kB writepending:0kB zspages:636kB present:3129332kB managed:2548708kB mlocked:16kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.704352][T14762] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 774.774572][T14801] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 774.808146][T14868] lowmem_reserve[]: 0 0 0 0 0 [ 774.831654][T14762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 774.856740][T14868] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.902629][T14801] Node 0 DMA32 free:23452kB boost:28672kB min:62832kB low:71372kB high:79912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:436kB inactive_anon:268kB active_file:72kB inactive_file:76kB unevictable:1544kB writepending:0kB zspages:668kB present:3129332kB managed:2548708kB mlocked:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 774.992094][T14868] lowmem_reserve[]: 0 0 0 0 0 [ 775.036277][T14762] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 775.051485][T14868] Node 1 Normal free:56524kB boost:24576kB min:80312kB low:94244kB high:108176kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5960kB inactive_anon:12064kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:5132kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:464kB local_pcp:224kB free_cma:0kB [ 775.171992][T14762] 4062 total pagecache pages [ 775.228162][T14801] lowmem_reserve[]: 0 0 0 0 0 [ 775.232935][T14801] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 775.306311][T14762] 687 pages in swap cache [ 775.376516][T14762] Free swap = 0kB [ 775.441389][T14868] lowmem_reserve[]: 0 0 0 0 0 [ 775.479824][T14801] lowmem_reserve[]: 0 0 0 0 0 [ 775.494050][T14868] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10060kB [ 775.510738][T14762] Total swap = 124996kB [ 775.574018][T14801] Node 1 Normal free:56524kB boost:24576kB min:80312kB low:94244kB high:108176kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5936kB inactive_anon:12088kB active_file:0kB inactive_file:88kB unevictable:1536kB writepending:0kB zspages:5228kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:144kB free_cma:0kB [ 775.607997][T14868] Node 0 DMA32: 132*4kB (ME) 178*8kB (UME) 203*16kB (UME) 313*32kB (UME) 67*64kB (UME) 27*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22960kB [ 775.678457][T14762] 2097051 pages RAM [ 775.724327][T14762] 0 pages HighMem/MovableOnly [ 775.765278][T14868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 775.859109][T14868] Node 1 Normal: 1017*4kB (UM) 661*8kB (UM) 650*16kB (UM) 379*32kB (UM) 199*64kB (UM) 54*128kB (UM) 9*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 54860kB [ 775.903220][T14762] 428194 pages reserved [ 775.913336][T14868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 775.963379][T14801] lowmem_reserve[]: 0 0 0 0 0 [ 776.019075][T14801] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10060kB [ 776.094982][T14868] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 776.115845][T14762] 0 pages cma reserved [ 776.213389][T14868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 776.233775][T14801] Node 0 DMA32: 132*4kB (ME) 178*8kB (UME) 203*16kB (UME) 313*32kB (UME) 67*64kB (UME) 27*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22960kB [ 776.322614][T14868] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 776.426458][T14868] 4060 total pagecache pages [ 776.478959][T14868] 686 pages in swap cache [ 776.533754][T14868] Free swap = 0kB [ 776.576115][T14868] Total swap = 124996kB [ 776.598858][T14801] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 776.637267][T14868] 2097051 pages RAM [ 776.682805][T14868] 0 pages HighMem/MovableOnly [ 776.737703][T14868] 428194 pages reserved [ 776.791669][T14868] 0 pages cma reserved [ 776.837561][T14868] Unreclaimable slab info: [ 776.877039][T14801] Node 1 Normal: 1017*4kB (UM) 568*8kB (UM) 635*16kB (UM) 258*32kB (UM) 158*64kB (UM) 54*128kB (UM) 9*256kB (UM) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 47380kB [ 776.901683][T14868] Name Used Total [ 776.978829][T14868] pid_3 8KB 23KB [ 777.014639][T14868] pid_2 63KB 133KB [ 777.064499][T14868] bio-464 17KB 22KB [ 777.119211][T14801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 777.146774][T14868] bio-528 19KB 31KB [ 777.234556][T14868] bio-544 19KB 31KB [ 777.244503][T14801] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 777.292041][T14868] bio-552 19KB 31KB [ 777.366873][T14868] zswap_entry 574KB 648KB [ 777.373747][T14801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 777.476837][T14868] AF_VSOCK 35KB 61KB [ 777.536413][T14801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 777.565380][T14801] 4060 total pagecache pages [ 777.570090][T14868] sw_flow_stats 14KB 16KB [ 777.652179][T14868] sw_flow 39KB 47KB [ 777.688226][T14801] 686 pages in swap cache [ 777.721338][T14868] batadv_tt_change_cache 3KB 8KB [ 777.775560][T14801] Free swap = 0kB [ 777.808281][T14868] batadv_tl_cache 14KB 16KB [ 777.847805][T14868] INET6_SMC 35KB 58KB [ 777.877065][T14801] Total swap = 124996kB [ 777.937718][T14868] INET_SMC 34KB 62KB [ 778.007972][T14801] 2097051 pages RAM [ 778.021891][T14868] SMC6 56KB 93KB [ 778.056694][T14868] SMC 21KB 93KB [ 778.098987][T14801] 0 pages HighMem/MovableOnly [ 778.161711][T14868] TIPC 47KB 92KB [ 778.221278][T14868] RDS 18KB 61KB [ 778.236020][T14801] 428194 pages reserved [ 778.274695][T14868] rds_connection 16KB 18KB [ 778.314358][T14801] 0 pages cma reserved [ 778.342626][T14868] SCTPv6 74KB 150KB [ 778.414683][T14868] SCTP 19KB 91KB [ 778.460452][T14868] sctp_chunk 9KB 15KB [ 778.537992][T14868] sctp_bind_bucket 2KB 8KB [ 778.619366][T14868] L2TP/IPv6 28KB 63KB [ 778.700336][T14868] L2TP/IP 28KB 63KB [ 778.780500][T14868] KCM 29KB 62KB [ 778.822162][T14868] kcm_mux 37KB 47KB [ 778.869356][T14868] RXRPC 32KB 96KB [ 778.925787][T14868] rxrpc_call_jar 226KB 286KB [ 778.975038][T14868] can_receiver 10KB 19KB [ 779.020303][T14868] net_bridge_fdb_entry 45KB 47KB [ 779.059450][T14868] MPTCPv6 54KB 95KB [ 779.100681][T14868] ip6-frags 9KB 15KB [ 779.118251][T14868] fib6_node 135KB 156KB [ 779.144028][T14868] ip6_dst_cache 135KB 330KB [ 779.157229][T14868] mfc6_cache 14KB 16KB [ 779.165190][T14868] RAWv6 138KB 247KB [ 779.203848][T14868] UDPv6 105KB 157KB [ 779.217060][T14868] tw_sock_TCPv6 19KB 23KB [ 779.241195][T14868] request_sock_TCPv6 10KB 15KB [ 779.250159][T14868] TCPv6 148KB 303KB [ 779.256279][T14868] nf_conntrack 19KB 23KB [ 779.274315][T14868] fq_flow_cache 11KB 11KB [ 779.297054][T14868] wg_peer 118KB 118KB [ 779.328339][T14868] allowedips_node 18KB 19KB [ 779.358070][T14868] t10_alua_lu_gp_cache 8KB 11KB [ 779.385244][T14868] scsi_sense_cache 1318KB 1328KB [ 779.397850][T14868] virtio_scsi_cmd 21KB 24KB [ 779.425103][T14868] bio-136 46KB 52KB [ 779.441935][T14868] io_kiocb 40KB 56KB [ 779.473516][T14868] bio-264 14KB 31KB [ 779.527382][T14868] mqueue_inode_cache 47KB 61KB [ 779.557943][T14868] bio-272 10KB 15KB [ 779.603878][T14868] f2fs_bio_post_read_ctx 30KB 31KB [ 779.641174][T14868] jfs_mp 14KB 15KB [ 779.662652][T14868] fuse_request 9KB 15KB [ 779.710452][T14868] cifs_small_rq 28KB 32KB [ 779.720880][T14801] syz.2.2388 (14801) used greatest stack depth: 16816 bytes left [ 779.748146][T14868] cifs_request 67KB 67KB [ 779.778241][T14868] cifs_mpx_ids 8KB 11KB [ 779.800072][T14868] cifs_io_subrequest 42KB 47KB [ 779.835477][T14868] cifs_io_request 105KB 111KB [ 779.874321][T14868] nfs_commit_data 24KB 31KB [ 779.917692][T14868] nfs_write_data 38KB 47KB [ 779.943783][T14868] jbd2_inode 10KB 11KB [ 779.972615][T14868] ext4_system_zone 1KB 3KB [ 779.991022][T14868] ext4_io_end_vec 0KB 11KB [ 780.012361][T14868] kioctx 18KB 31KB [ 780.031836][T14868] aio_kiocb 5KB 18KB [ 780.055266][T14868] fanotify_mark 22KB 23KB [ 780.076555][T14868] fasync_cache 19KB 19KB [ 780.095224][T14868] userfaultfd_ctx_cache 25KB 47KB [ 780.142298][T14868] zspage 132KB 141KB [ 780.161068][T14868] zs_handle 230KB 232KB [ 780.172853][T14868] pid_namespace 8KB 61KB [ 780.191252][T14868] kvm_gmem_inode_cache 15KB 15KB [ 780.208830][T14868] kvm_async_pf 22KB 31KB [ 780.239102][T14868] kvm_vcpu 41KB 187KB [ 780.272722][T14868] kvm_mmu_page_header 19KB 38KB [ 780.291841][T14868] pte_list_desc 3KB 19KB [ 780.314263][T14868] x86_emulator 23KB 95KB [ 780.334821][T14868] rpc_buffers 25KB 31KB [ 780.363500][T14868] rpc_tasks 8KB 11KB [ 780.387156][T14868] UNIX-STREAM 63KB 159KB [ 780.406640][T14868] UNIX 127KB 318KB [ 780.429690][T14868] ip4-frags 10KB 71KB [ 780.456885][T14868] MPTCP 30KB 91KB [ 780.483659][T14868] tcp_bind2_bucket 14KB 20KB [ 780.532880][T14868] tcp_bind_bucket 15KB 24KB [ 780.573996][T14868] inet_peer 14KB 16KB [ 780.622043][T14868] xfrm_state 20KB 63KB [ 780.697029][T14868] ip_fib_trie 28KB 32KB [ 780.752259][T14868] ip_fib_alias 92KB 98KB [ 780.840936][T14868] rtable 20KB 112KB [ 780.861656][T14869] syz.4.2411: page allocation stall for 19 secs: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP) nodemask=(null),cpuset=/,mems_allowed=0-1 [ 780.910812][T14868] PING 15KB 63KB [ 780.946896][T14869] CPU: 0 UID: 0 PID: 14869 Comm: syz.4.2411 Tainted: G L syzkaller #0 PREEMPT(full) [ 780.946935][T14869] Tainted: [L]=SOFTLOCKUP [ 780.946944][T14869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 780.946957][T14869] Call Trace: [ 780.946966][T14869] [ 780.946976][T14869] dump_stack_lvl+0xe8/0x150 [ 780.947014][T14869] check_alloc_stall_warn+0x20e/0x230 [ 780.947050][T14869] ? __pfx_check_alloc_stall_warn+0x10/0x10 [ 780.947077][T14869] ? wake_all_kswapds+0x167/0x280 [ 780.947106][T14869] __alloc_pages_slowpath+0x50e/0xcc0 [ 780.947153][T14869] __alloc_frozen_pages_noprof+0x31f/0x380 [ 780.947185][T14869] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 780.947218][T14869] ? __pfx_policy_nodemask+0x10/0x10 [ 780.947259][T14869] alloc_pages_mpol+0x212/0x380 [ 780.947296][T14869] alloc_pages_noprof+0xac/0x2a0 [ 780.947328][T14869] folio_alloc_noprof+0x1e/0x30 [ 780.947358][T14869] filemap_alloc_folio_noprof+0x111/0x470 [ 780.947399][T14869] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 780.947429][T14869] ? filemap_fault+0xa55/0x13b0 [ 780.947462][T14869] __filemap_get_folio_mpol+0x402/0x1000 [ 780.947495][T14869] filemap_fault+0xa84/0x13b0 [ 780.947528][T14869] ? __pfx_filemap_fault+0x10/0x10 [ 780.947555][T14869] ? __pfx_filemap_map_pages+0x10/0x10 [ 780.947593][T14869] __do_fault+0x138/0x2a0 [ 780.947620][T14869] ? do_pte_missing+0x140c/0x34b0 [ 780.947646][T14869] do_pte_missing+0x2215/0x34b0 [ 780.947684][T14869] ? handle_mm_fault+0xec/0x3080 [ 780.947710][T14869] handle_mm_fault+0x1b36/0x3080 [ 780.947747][T14869] ? handle_mm_fault+0xec/0x3080 [ 780.947778][T14869] ? __pfx_handle_mm_fault+0x10/0x10 [ 780.947797][T14869] ? lock_vma_under_rcu+0x45a/0x500 [ 780.947851][T14869] do_user_addr_fault+0xa4d/0x1340 [ 780.947893][T14869] ? trace_page_fault_user+0x84/0x1e0 [ 780.947927][T14869] exc_page_fault+0x6a/0xc0 [ 780.947959][T14869] asm_exc_page_fault+0x26/0x30 [ 780.947980][T14869] RIP: 0023:0xf71f2f6b [ 780.948006][T14869] Code: Unable to access opcode bytes at 0xf71f2f41. [ 780.948016][T14869] RSP: 002b:00000000f75cfa18 EFLAGS: 00010286 [ 780.948046][T14869] RAX: 0000000000000000 RBX: 00000000f72dbbcc RCX: 000000000000000a [ 780.948060][T14869] RDX: 000000003462366e RSI: 00000000f7fd5610 RDI: 0000000000000000 [ 780.948073][T14869] RBP: 00000000f75cfac8 R08: 0000000000000000 R09: 0000000000000000 [ 780.948086][T14869] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 780.948098][T14869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 780.948130][T14869] [ 781.202899][T14868] RAW 31KB 63KB [ 781.293996][T14868] UDP 112KB 159KB [ 781.320908][T14869] Mem-Info: [ 781.408641][T14868] tw_sock_TCP 16KB 23KB [ 781.449475][T14869] active_anon:88 inactive_anon:13 isolated_anon:0 [ 781.449475][T14869] active_file:9 inactive_file:68 isolated_file:0 [ 781.449475][T14869] unevictable:770 dirty:0 writeback:0 [ 781.449475][T14869] slab_reclaimable:6800 slab_unreclaimable:109347 [ 781.449475][T14869] mapped:35865 shmem:769 pagetables:4187 [ 781.449475][T14869] sec_pagetables:0 bounce:0 [ 781.449475][T14869] kernel_misc_reclaimable:0 [ 781.449475][T14869] free:26943 free_pcp:72 free_cma:0 [ 781.496452][T14868] request_sock_TCP 17KB 23KB [ 781.514964][T14868] TCP 172KB 555KB [ 781.561760][T14868] fs_bio_integrity 7KB 8KB [ 781.607971][T14869] Node 0 active_anon:8kB inactive_anon:36kB active_file:68kB inactive_file:80kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 781.653669][T14868] hugetlbfs_inode_cache 15KB 31KB [ 781.715166][T14868] netfs_subrequest 35KB 37KB [ 781.767362][T14868] netfs_request 105KB 111KB [ 781.826893][T14868] bio-288 21KB 23KB [ 781.958960][T14869] Node 1 active_anon:276kB inactive_anon:404kB active_file:36kB inactive_file:96kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:704kB pagetables:10336kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 781.998515][T14868] ep_head 3KB 16KB [ 782.026071][T14868] eventpoll_pwq 7KB 15KB [ 782.090628][T14868] eventpoll_epi 22KB 47KB [ 782.143360][T14868] inotify_inode_mark 17KB 35KB [ 782.223726][T14868] bpf_fs_inode_cache 14KB 15KB [ 782.279094][T14869] Node 0 DMA free:10060kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.326027][T14868] sgpool-128 17KB 29KB [ 782.399060][T14868] sgpool-64 225KB 286KB [ 782.434781][T14868] sgpool-32 86KB 110KB [ 782.461240][T14869] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 782.517253][T14868] sgpool-16 40KB 52KB [ 782.602579][T14868] sgpool-8 82KB 97KB [ 782.640061][T14869] Node 0 DMA32 free:26792kB boost:28672kB min:62832kB low:71372kB high:79912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:132kB inactive_file:16kB unevictable:1544kB writepending:0kB zspages:608kB present:3129332kB managed:2548708kB mlocked:8kB bounce:0kB free_pcp:700kB local_pcp:224kB free_cma:0kB [ 782.678816][T14868] bio_crypt_ctx 9KB 11KB [ 782.722787][T14868] bio_integrity_data 7KB 8KB [ 782.796189][T14868] request_queue 193KB 272KB [ 782.862044][T14869] lowmem_reserve[]: 0 0 0 0 0 [ 782.863094][T14868] blkdev_ioc 8KB 11KB [ 782.954000][T14869] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 782.981991][T14868] bio-200 317KB 330KB [ 783.084129][T14868] biovec-max 828KB 901KB [ 783.173719][T14868] biovec-128 165KB 191KB [ 783.238031][T14869] lowmem_reserve[]: 0 0 0 0 0 [ 783.244867][T14868] biovec-64 201KB 220KB [ 783.288246][T14869] Node 1 Normal free:57692kB boost:32768kB min:88504kB low:102436kB high:116368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:796kB active_file:64kB inactive_file:96kB unevictable:1536kB writepending:0kB zspages:5784kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5152kB local_pcp:264kB free_cma:0kB [ 783.358723][T14868] biovec-16 75KB 90KB [ 783.452554][T14868] mm_slot 3KB 7KB [ 783.511031][T14869] lowmem_reserve[]: 0 0 0 0 0 [ 783.543922][T14868] ksm_mm_slot 7KB 8KB [ 783.554932][T14869] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10060kB [ 783.611059][T14868] user_namespace 28KB 30KB [ 783.676157][T14869] Node 0 DMA32: 323*4kB (UME) 219*8kB (UME) 204*16kB (UME) 453*32kB (UME) 68*64kB (UME) 26*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28740kB [ 783.691232][T14868] uid_cache 16KB 18KB [ 783.789134][T14868] dmaengine-unmap-256 26KB 30KB [ 783.791488][T14869] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 783.873099][T14868] dmaengine-unmap-128 14KB 15KB [ 783.954197][T14868] dmaengine-unmap-16 7KB 8KB [ 783.989404][T14869] Node 1 Normal: 1245*4kB (UM) 506*8kB (UM) 655*16kB (UM) 302*32kB (UM) 165*64kB (UM) 74*128kB (UM) 28*256kB (UM) 6*512kB (M) 3*1024kB (M) 0*2048kB 0*4096kB = 62516kB [ 784.030324][T14868] dmaengine-unmap-2 3KB 4KB [ 784.110567][T14868] QIPCRTR 23KB 62KB [ 784.155099][T14869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.201485][T14868] audit_buffer 13KB 19KB [ 784.270027][T14868] skbuff_ext_cache 11KB 28KB [ 784.317566][T14869] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 784.365169][T14868] skbuff_small_head 3554KB 3952KB [ 784.415513][T14869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 784.443390][T14868] skbuff_fclone_cache 83KB 157KB [ 784.510904][T14869] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 784.524396][T14868] skbuff_head_cache 9754KB 9761KB [ 784.610877][T14868] configfs_dir_cache 14KB 16KB [ 784.634368][T14869] 1054 total pagecache pages [ 784.684510][T14869] 208 pages in swap cache [ 784.696373][T14868] file_lease_cache 12KB 42KB [ 784.733356][T14869] Free swap = 32500kB [ 784.774849][T14868] file_lock_cache 13KB 39KB [ 784.791489][T14869] Total swap = 124996kB [ 784.842181][T14868] file_lock_ctx 26KB 31KB [ 784.860828][T14869] 2097051 pages RAM [ 784.902210][T14869] 0 pages HighMem/MovableOnly [ 784.918745][T14868] fsnotify_inode_mark_connector 13KB 27KB [ 784.955658][T14869] 428194 pages reserved [ 784.996087][T14869] 0 pages cma reserved [ 785.017586][T14868] fsnotify_mark_connector 6KB 7KB [ 785.102631][T14868] posix_timers_cache 28KB 48KB [ 785.213244][T14868] taskstats 33KB 111KB [ 785.294481][T14868] mem_cgroup_per_node 76KB 92KB [ 785.364386][T14868] mem_cgroup 82KB 92KB [ 785.396028][T14868] proc_dir_entry 985KB 1095KB [ 785.438476][T14868] pde_opener 0KB 7KB [ 785.534913][T14868] seq_file 18KB 66KB [ 785.624306][T14868] sigqueue 5KB 55KB [ 785.695024][T14868] shmem_inode_cache 7020KB 7821KB [ 785.780775][T14868] kernfs_iattrs_cache 8KB 15KB [ 785.877551][T14868] kernfs_node_cache 30437KB 30659KB [ 785.942485][T14868] mnt_cache 132KB 204KB [ 786.022382][T14868] filp 325KB 1181KB [ 786.124462][T14868] names_cache 179KB 356KB [ 786.165382][T14868] net_namespace 137KB 235KB [ 786.244775][T14868] ima_iint_cache 20KB 46KB [ 786.314498][T14868] lsm_inode_cache 1335KB 1874KB [ 786.381661][T14868] lsm_file_cache 130KB 450KB [ 786.420522][T14868] key_jar 32KB 39KB [ 786.478750][T14868] uts_namespace 45KB 46KB [ 786.571213][T14868] nsproxy 11KB 15KB [ 786.656088][T14868] vm_area_struct 1031KB 1635KB [ 786.745139][T14868] fs_cache 24KB 64KB [ 786.833794][T14868] files_cache 101KB 255KB [ 786.897230][T14868] task_exec_state 10KB 40KB [ 786.959435][T14868] signal_cache 841KB 2126KB [ 787.035698][T14868] sighand_cache 1049KB 2495KB [ 787.130935][T14868] task_struct 3766KB 5208KB [ 787.175371][T14868] cred 137KB 376KB [ 787.244371][T14868] anon_vma_chain 356KB 551KB [ 787.322822][T14868] anon_vma 385KB 587KB [ 787.394067][T14868] pid 145KB 322KB [ 787.444335][T14868] Acpi-Operand 117KB 233KB [ 787.577198][T14868] Acpi-ParseExt 12KB 31KB [ 787.638948][T14868] Acpi-Parse 3KB 27KB [ 787.681703][T14868] Acpi-State 4KB 23KB [ 787.734706][T14868] Acpi-Namespace 28KB 40KB [ 787.804800][T14868] shared_policy_node 7KB 8KB [ 787.892776][T14868] numa_policy 7KB 12KB [ 787.970851][T14868] perf_event 15KB 31KB [ 788.032054][T14868] trace_event_file 577KB 580KB [ 788.078483][T14868] ftrace_event_field 1118KB 1122KB [ 788.187568][T14868] pool_workqueue 765KB 832KB [ 788.245707][T14868] task_group 24KB 32KB [ 788.334774][T14868] maple_node 648KB 1840KB [ 788.390466][T14868] mm_struct 328KB 637KB [ 788.458145][T14868] vmap_area 291KB 348KB [ 788.514598][T14868] debug_objects_cache 2835KB 3050KB [ 788.607556][T14868] page->ptl 147KB 315KB [ 788.699716][T14868] kmalloc-cg-8k 2896KB 3168KB [ 788.766806][T14868] kmalloc-cg-4k 19640KB 22512KB [ 788.827531][T14868] kmalloc-cg-2k 12616KB 13312KB [ 788.927794][T14868] kmalloc-cg-1k 3320KB 3552KB [ 789.001890][T14868] kmalloc-cg-512 1360KB 2192KB [ 789.065221][T14868] kmalloc-cg-256 492KB 568KB [ 789.093234][T14868] kmalloc-cg-128 294KB 312KB [ 789.202433][T14868] kmalloc-cg-64 66KB 124KB [ 789.295222][T14868] kmalloc-cg-32 38KB 200KB [ 789.371506][T14868] kmalloc-cg-16 5KB 12KB [ 789.417622][T14868] kmalloc-cg-8 27KB 36KB [ 789.475251][T14868] kmalloc-cg-192 55KB 68KB [ 789.557075][T14868] kmalloc-cg-96 69KB 120KB [ 789.632975][T14868] kmalloc-8k 8720KB 9056KB [ 789.727198][T14868] kmalloc-4k 180944KB 180984KB [ 789.771019][T14868] kmalloc-2k 14564KB 18464KB [ 789.865492][T14868] kmalloc-1k 17376KB 17400KB [ 789.946791][T14868] kmalloc-512 12014KB 15856KB [ 790.021390][T14868] kmalloc-256 20662KB 20672KB [ 790.084064][T14868] kmalloc-128 1758KB 2104KB [ 790.163382][T14868] kmalloc-64 4087KB 4216KB [ 790.253719][T14868] kmalloc-32 2593KB 3228KB [ 790.336777][T14868] kmalloc-16 448KB 480KB [ 790.389208][T14868] kmalloc-8 424KB 460KB [ 790.466774][T14868] kmalloc-192 2248KB 2400KB [ 790.549097][T14868] kmalloc-96 2110KB 2184KB [ 790.636584][T14868] kmem_cache_node 215KB 220KB [ 790.670444][T14868] kmem_cache 179KB 198KB [ 790.753468][T14868] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz.0.2412,pid=14868,uid=0 [ 790.867531][T14076] syz-executor: page allocation stall for 17 secs: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP) nodemask=(null),cpuset=/,mems_allowed=0-1 [ 790.874462][T14868] Out of memory (oom_kill_allocating_task): Killed process 14868 (syz.0.2412) total-vm:102020kB, anon-rss:0kB, file-rss:20492kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 790.964159][T14076] CPU: 1 UID: 0 PID: 14076 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 790.964195][T14076] Tainted: [L]=SOFTLOCKUP [ 790.964203][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 790.964215][T14076] Call Trace: [ 790.964223][T14076] [ 790.964233][T14076] dump_stack_lvl+0xe8/0x150 [ 790.964268][T14076] check_alloc_stall_warn+0x20e/0x230 [ 790.964295][T14076] ? __pfx_check_alloc_stall_warn+0x10/0x10 [ 790.964322][T14076] ? wake_all_kswapds+0x167/0x280 [ 790.964352][T14076] __alloc_pages_slowpath+0x50e/0xcc0 [ 790.964400][T14076] __alloc_frozen_pages_noprof+0x31f/0x380 [ 790.964431][T14076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 790.964465][T14076] ? __pfx_policy_nodemask+0x10/0x10 [ 790.964507][T14076] alloc_pages_mpol+0x212/0x380 [ 790.964544][T14076] alloc_pages_noprof+0xac/0x2a0 [ 790.964577][T14076] folio_alloc_noprof+0x1e/0x30 [ 790.964607][T14076] filemap_alloc_folio_noprof+0x111/0x470 [ 790.964645][T14076] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 790.964677][T14076] ? filemap_fault+0xa55/0x13b0 [ 790.964709][T14076] __filemap_get_folio_mpol+0x402/0x1000 [ 790.964741][T14076] filemap_fault+0xa84/0x13b0 [ 790.964774][T14076] ? __pfx_filemap_fault+0x10/0x10 [ 790.964800][T14076] ? __pfx_filemap_map_pages+0x10/0x10 [ 790.964858][T14076] __do_fault+0x138/0x2a0 [ 790.964886][T14076] ? do_pte_missing+0x140c/0x34b0 [ 790.964912][T14076] do_pte_missing+0x2215/0x34b0 [ 790.964958][T14076] ? handle_mm_fault+0xec/0x3080 [ 790.964985][T14076] handle_mm_fault+0x1b36/0x3080 [ 790.965022][T14076] ? handle_mm_fault+0xec/0x3080 [ 790.965053][T14076] ? __pfx_handle_mm_fault+0x10/0x10 [ 790.965073][T14076] ? lock_vma_under_rcu+0x45a/0x500 [ 790.965126][T14076] do_user_addr_fault+0xa4d/0x1340 [ 790.965158][T14076] ? asm_int80_emulation+0x1a/0x20 [ 790.965187][T14076] ? trace_page_fault_user+0x84/0x1e0 [ 790.965220][T14076] exc_page_fault+0x6a/0xc0 [ 790.965253][T14076] asm_exc_page_fault+0x26/0x30 [ 790.965273][T14076] RIP: 0023:0xf7020490 [ 790.965298][T14076] Code: Unable to access opcode bytes at 0xf7020466. [ 790.965308][T14076] RSP: 002b:00000000f751f5ac EFLAGS: 00010246 [ 790.965328][T14076] RAX: 0000000000000011 RBX: 00000000ffffffff RCX: 0000000000000000 [ 790.965342][T14076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 790.965354][T14076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.965367][T14076] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 790.965379][T14076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 790.965412][T14076] [ 790.965421][T14076] Mem-Info: [ 791.282884][T14874] syz.2.2410 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 791.567575][T14076] active_anon:22 inactive_anon:131 isolated_anon:0 [ 791.567575][T14076] active_file:43 inactive_file:8 isolated_file:0 [ 791.567575][T14076] unevictable:770 dirty:0 writeback:0 [ 791.567575][T14076] slab_reclaimable:6777 slab_unreclaimable:114835 [ 791.567575][T14076] mapped:35865 shmem:769 pagetables:4187 [ 791.567575][T14076] sec_pagetables:0 bounce:0 [ 791.567575][T14076] kernel_misc_reclaimable:0 [ 791.567575][T14076] free:21122 free_pcp:419 free_cma:0 [ 791.711003][T14076] Node 0 active_anon:68kB inactive_anon:0kB active_file:0kB inactive_file:160kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13120kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 791.854790][T14076] Node 1 active_anon:24kB inactive_anon:512kB active_file:56kB inactive_file:104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:704kB pagetables:10336kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 791.905451][T14874] CPU: 0 UID: 0 PID: 14874 Comm: syz.2.2410 Tainted: G L syzkaller #0 PREEMPT(full) [ 791.905488][T14874] Tainted: [L]=SOFTLOCKUP [ 791.905496][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 791.905508][T14874] Call Trace: [ 791.905517][T14874] [ 791.905526][T14874] dump_stack_lvl+0xe8/0x150 [ 791.905565][T14874] dump_header+0xd3/0x4b0 [ 791.905596][T14874] oom_kill_process+0x3ab/0x970 [ 791.905624][T14874] out_of_memory+0x1191/0x1480 [ 791.905660][T14874] ? __pfx_out_of_memory+0x10/0x10 [ 791.905691][T14874] __alloc_pages_may_oom+0x1ea/0x330 [ 791.905715][T14874] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 791.905746][T14874] ? __pfx___alloc_pages_may_oom+0x10/0x10 [ 791.905790][T14874] __alloc_pages_slowpath+0x6e8/0xcc0 [ 791.905839][T14874] __alloc_frozen_pages_noprof+0x31f/0x380 [ 791.905872][T14874] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 791.905906][T14874] ? __pfx_policy_nodemask+0x10/0x10 [ 791.905947][T14874] alloc_pages_mpol+0x212/0x380 [ 791.905984][T14874] alloc_pages_noprof+0xac/0x2a0 [ 791.906018][T14874] folio_alloc_noprof+0x1e/0x30 [ 791.906048][T14874] filemap_alloc_folio_noprof+0x111/0x470 [ 791.906088][T14874] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 791.906119][T14874] ? filemap_fault+0xa55/0x13b0 [ 791.906151][T14874] __filemap_get_folio_mpol+0x402/0x1000 [ 791.906183][T14874] filemap_fault+0xa84/0x13b0 [ 791.906217][T14874] ? __pfx_filemap_fault+0x10/0x10 [ 791.906244][T14874] ? __pfx_filemap_map_pages+0x10/0x10 [ 791.906283][T14874] __do_fault+0x138/0x2a0 [ 791.906310][T14874] ? do_pte_missing+0x140c/0x34b0 [ 791.906337][T14874] do_pte_missing+0x2215/0x34b0 [ 791.906376][T14874] ? handle_mm_fault+0xec/0x3080 [ 791.906404][T14874] handle_mm_fault+0x1b36/0x3080 [ 791.906451][T14874] ? handle_mm_fault+0xec/0x3080 [ 791.906484][T14874] ? __pfx_handle_mm_fault+0x10/0x10 [ 791.906505][T14874] ? lock_vma_under_rcu+0x45a/0x500 [ 791.906559][T14874] do_user_addr_fault+0xa4d/0x1340 [ 791.906598][T14874] ? trace_page_fault_user+0x84/0x1e0 [ 791.906631][T14874] exc_page_fault+0x6a/0xc0 [ 791.906663][T14874] asm_exc_page_fault+0x26/0x30 [ 791.906684][T14874] RIP: 0023:0xf7133103 [ 791.906710][T14874] Code: Unable to access opcode bytes at 0xf71330d9. [ 791.906720][T14874] RSP: 002b:00000000f750f968 EFLAGS: 00010292 [ 791.906739][T14874] RAX: 0000000000000000 RBX: 00000000f721bc4c RCX: 000000000000000c [ 791.906752][T14874] RDX: 00000000582b6280 RSI: 00000000582b61f8 RDI: 000000000001de08 [ 791.906766][T14874] RBP: 00000000582b61f8 R08: 0000000000000000 R09: 0000000000000000 [ 791.906777][T14874] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 791.906790][T14874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 791.906824][T14874] [ 792.030732][T14874] Mem-Info: [ 792.321902][T14076] Node 0 DMA free:10060kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.487648][T14076] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 792.541038][T14076] Node 0 DMA32 free:23336kB boost:28672kB min:62832kB low:71372kB high:79912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:52kB active_file:56kB inactive_file:112kB unevictable:1544kB writepending:0kB zspages:608kB present:3129332kB managed:2548708kB mlocked:8kB bounce:0kB free_pcp:1152kB local_pcp:480kB free_cma:0kB [ 792.610430][T14874] active_anon:3 inactive_anon:217 isolated_anon:0 [ 792.610430][T14874] active_file:6 inactive_file:22 isolated_file:0 [ 792.610430][T14874] unevictable:770 dirty:0 writeback:0 [ 792.610430][T14874] slab_reclaimable:6777 slab_unreclaimable:115122 [ 792.610430][T14874] mapped:35865 shmem:769 pagetables:4187 [ 792.610430][T14874] sec_pagetables:0 bounce:0 [ 792.610430][T14874] kernel_misc_reclaimable:0 [ 792.610430][T14874] free:20872 free_pcp:397 free_cma:0 [ 792.716679][T14076] lowmem_reserve[]: 0 0 0 0 0 [ 792.754953][T14076] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.996484][T14076] lowmem_reserve[]: 0 0 0 0 0 [ 793.027229][T14076] Node 1 Normal free:50092kB boost:45056kB min:100792kB low:114724kB high:128656kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:228kB active_file:0kB inactive_file:144kB unevictable:1536kB writepending:0kB zspages:5784kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:456kB local_pcp:64kB free_cma:0kB [ 793.057158][T14874] Node 0 active_anon:0kB inactive_anon:60kB active_file:0kB inactive_file:188kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13120kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 793.217998][T14076] lowmem_reserve[]: 0 0 0 0 0 [ 793.254314][T14076] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10060kB [ 793.330051][ T32] oom_reaper: reaped process 14868 (syz.0.2412), now anon-rss:0kB, file-rss:20480kB, shmem-rss:0kB [ 793.360109][T14874] Node 1 active_anon:16kB inactive_anon:800kB active_file:64kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:704kB pagetables:10336kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 793.386618][T14076] Node 0 DMA32: 191*4kB (UME) 200*8kB (UME) 203*16kB (UME) 278*32kB (UME) 70*64kB (UME) 26*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22572kB [ 793.545298][T14874] Node 0 DMA free:10156kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 793.599960][T14076] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 793.704869][T14076] Node 1 Normal: 1290*4kB (UM) 493*8kB (UM) 582*16kB (UM) 263*32kB (UM) 142*64kB (UM) 62*128kB (UM) 25*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 52816kB [ 793.737297][T14874] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 793.789033][T14076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 793.865750][T14874] Node 0 DMA32 free:35644kB boost:28672kB min:62832kB low:71372kB high:79912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68kB inactive_anon:0kB active_file:0kB inactive_file:156kB unevictable:1544kB writepending:0kB zspages:608kB present:3129332kB managed:2548708kB mlocked:8kB bounce:0kB free_pcp:460kB local_pcp:196kB free_cma:0kB [ 793.878172][T14076] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 793.961370][T14874] lowmem_reserve[]: 0 0 0 0 0 [ 793.987642][T14076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 794.029186][T14874] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 794.066354][T14076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 794.127554][T14076] 1052 total pagecache pages [ 794.150472][T14076] 208 pages in swap cache [ 794.229202][T14076] Free swap = 32628kB [ 794.260883][T14874] lowmem_reserve[]: 0 0 0 0 0 [ 794.272545][T14076] Total swap = 124996kB [ 794.291394][T14076] 2097051 pages RAM [ 794.332544][T14076] 0 pages HighMem/MovableOnly [ 794.367714][T14076] 428194 pages reserved [ 794.394718][T14076] 0 pages cma reserved [ 794.522049][T14874] Node 1 Normal free:53360kB boost:45056kB min:100792kB low:114724kB high:128656kB reserved_highatomic:0KB free_highatomic:0KB active_anon:332kB inactive_anon:460kB active_file:76kB inactive_file:72kB unevictable:1536kB writepending:0kB zspages:5784kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 794.604550][T14874] lowmem_reserve[]: 0 0 0 0 0 [ 794.754887][T14874] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10156kB [ 794.937527][T14874] Node 0 DMA32: 266*4kB (UME) 201*8kB (UME) 210*16kB (UME) 472*32kB (UME) 114*64kB (UME) 51*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36752kB [ 795.127504][T14874] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 795.347302][T14874] Node 1 Normal: 1300*4kB (UM) 500*8kB (UM) 582*16kB (UM) 276*32kB (UM) 143*64kB (UM) 62*128kB (UM) 25*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53392kB [ 795.610525][T14874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.752833][T14874] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 795.853809][T14874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.924412][T14874] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.997369][T14874] 1054 total pagecache pages [ 796.063517][T14874] 208 pages in swap cache [ 796.147249][T14874] Free swap = 32628kB [ 796.198947][T14874] Total swap = 124996kB [ 796.246176][T14874] 2097051 pages RAM [ 796.294071][T14874] 0 pages HighMem/MovableOnly [ 796.387967][T14874] 428194 pages reserved [ 796.479044][T14874] 0 pages cma reserved [ 796.544316][T14874] Unreclaimable slab info: [ 796.622946][T14874] Name Used Total [ 796.693112][T14874] pid_3 8KB 23KB [ 796.773202][T14874] pid_2 37KB 133KB [ 796.887932][T14874] bio-464 17KB 22KB [ 797.038597][T14874] bio-528 19KB 31KB [ 797.132890][T14874] bio-544 19KB 31KB [ 797.219464][T14874] bio-552 19KB 31KB [ 797.361629][T14874] zswap_entry 655KB 731KB [ 797.441852][T14874] AF_VSOCK 35KB 61KB [ 797.584823][T14874] sw_flow_stats 14KB 16KB [ 797.693782][T14874] sw_flow 39KB 47KB [ 797.837586][T14874] batadv_tt_change_cache 3KB 8KB [ 797.975142][T14874] batadv_tl_cache 14KB 16KB [ 798.053482][T14874] INET6_SMC 35KB 58KB [ 798.104144][T14874] INET_SMC 34KB 62KB [ 798.187347][T14874] SMC6 56KB 93KB [ 798.299997][T14874] SMC 18KB 93KB [ 798.419967][T14874] TIPC 39KB 92KB [ 798.492235][T14874] RDS 18KB 61KB [ 798.628587][T14874] rds_connection 16KB 18KB [ 798.751995][T14874] SCTPv6 62KB 150KB [ 798.814847][T14874] SCTP 15KB 91KB [ 798.932141][T14874] sctp_chunk 9KB 15KB [ 799.093588][T14874] sctp_bind_bucket 2KB 8KB [ 799.152067][T14874] L2TP/IPv6 26KB 63KB [ 799.255118][T14874] L2TP/IP 28KB 63KB [ 799.380861][T14874] KCM 29KB 62KB [ 799.521006][T14874] kcm_mux 37KB 47KB [ 799.622569][T14874] RXRPC 28KB 96KB [ 799.789514][T14874] rxrpc_call_jar 208KB 286KB [ 799.891047][T14874] can_receiver 10KB 19KB [ 799.997202][T14874] net_bridge_fdb_entry 45KB 47KB [ 800.097527][T14874] MPTCPv6 51KB 95KB [ 800.175591][T14874] ip6-frags 9KB 15KB [ 800.272512][T14874] fib6_node 135KB 156KB [ 800.404084][T14874] ip6_dst_cache 115KB 330KB [ 800.474010][T14874] mfc6_cache 14KB 16KB [ 800.593256][T14874] RAWv6 119KB 247KB [ 800.668127][T14874] UDPv6 103KB 157KB [ 800.690817][T14874] tw_sock_TCPv6 19KB 23KB [ 800.696948][T14874] request_sock_TCPv6 10KB 15KB [ 800.762976][T14874] TCPv6 97KB 303KB [ 800.871303][ T5286] dhcpcd: page allocation stall for 39 secs: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP) nodemask=(null),cpuset=/,mems_allowed=0-1 [ 800.877893][T14874] nf_conntrack 19KB 23KB [ 800.968667][ T5286] CPU: 0 UID: 101 PID: 5286 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 800.968704][ T5286] Tainted: [L]=SOFTLOCKUP [ 800.968712][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 800.968725][ T5286] Call Trace: [ 800.968734][ T5286] [ 800.968742][ T5286] dump_stack_lvl+0xe8/0x150 [ 800.968779][ T5286] check_alloc_stall_warn+0x20e/0x230 [ 800.968806][ T5286] ? __pfx_check_alloc_stall_warn+0x10/0x10 [ 800.968834][ T5286] ? wake_all_kswapds+0x167/0x280 [ 800.968862][ T5286] __alloc_pages_slowpath+0x50e/0xcc0 [ 800.968912][ T5286] __alloc_frozen_pages_noprof+0x31f/0x380 [ 800.968943][ T5286] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 800.968976][ T5286] ? __pfx_policy_nodemask+0x10/0x10 [ 800.969017][ T5286] alloc_pages_mpol+0x212/0x380 [ 800.969054][ T5286] alloc_pages_noprof+0xac/0x2a0 [ 800.969087][ T5286] folio_alloc_noprof+0x1e/0x30 [ 800.969117][ T5286] filemap_alloc_folio_noprof+0x111/0x470 [ 800.969152][ T5286] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 800.969183][ T5286] ? filemap_fault+0xa55/0x13b0 [ 800.969214][ T5286] __filemap_get_folio_mpol+0x402/0x1000 [ 800.969246][ T5286] filemap_fault+0xa84/0x13b0 [ 800.969286][ T5286] ? __pfx_filemap_fault+0x10/0x10 [ 800.969312][ T5286] ? __pfx_filemap_map_pages+0x10/0x10 [ 800.969346][ T5286] __do_fault+0x138/0x2a0 [ 800.969373][ T5286] ? do_pte_missing+0x140c/0x34b0 [ 800.969399][ T5286] do_pte_missing+0x2215/0x34b0 [ 800.969436][ T5286] ? handle_mm_fault+0xec/0x3080 [ 800.969463][ T5286] handle_mm_fault+0x1b36/0x3080 [ 800.969499][ T5286] ? handle_mm_fault+0xec/0x3080 [ 800.969530][ T5286] ? __pfx_handle_mm_fault+0x10/0x10 [ 800.969549][ T5286] ? lock_vma_under_rcu+0x45a/0x500 [ 800.969601][ T5286] do_user_addr_fault+0xa4d/0x1340 [ 800.969643][ T5286] ? trace_page_fault_user+0x84/0x1e0 [ 800.969675][ T5286] exc_page_fault+0x6a/0xc0 [ 800.969708][ T5286] asm_exc_page_fault+0x26/0x30 [ 800.969728][ T5286] RIP: 0033:0x7f6d46a1344b [ 800.969755][ T5286] Code: Unable to access opcode bytes at 0x7f6d46a13421. [ 800.969765][ T5286] RSP: 002b:00007ffca0593530 EFLAGS: 00010202 [ 800.969785][ T5286] RAX: 000000000000000e RBX: 00007ffca0593a30 RCX: 00007f6d46b3ef60 [ 800.969800][ T5286] RDX: 00005608c72cba6d RSI: 00007f6d46a1280d RDI: 00007f6d46b3eee0 [ 800.969815][ T5286] RBP: 0000000000000000 R08: 000000000000002e R09: 0000000000000000 [ 800.969827][ T5286] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 800.969839][ T5286] R13: 00007ffca0593f30 R14: 00000000ffffffff R15: 0000000000000000 [ 800.969871][ T5286] [ 800.969880][ T5286] Mem-Info: [ 801.029718][T14874] fq_flow_cache 11KB 11KB [ 801.253705][ T5286] active_anon:0 inactive_anon:168 isolated_anon:0 [ 801.253705][ T5286] active_file:0 inactive_file:70 isolated_file:0 [ 801.253705][ T5286] unevictable:770 dirty:0 writeback:0 [ 801.253705][ T5286] slab_reclaimable:6694 slab_unreclaimable:113765 [ 801.253705][ T5286] mapped:35865 shmem:769 pagetables:4160 [ 801.253705][ T5286] sec_pagetables:0 bounce:0 [ 801.253705][ T5286] kernel_misc_reclaimable:0 [ 801.253705][ T5286] free:22267 free_pcp:489 free_cma:0 [ 801.315670][ T5286] Node 0 active_anon:4kB inactive_anon:40kB active_file:44kB inactive_file:100kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 801.377549][ T5286] Node 1 active_anon:264kB inactive_anon:480kB active_file:140kB inactive_file:16kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:672kB pagetables:10228kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 801.411900][ T5286] Node 0 DMA free:10060kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 801.476577][ T5286] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 801.511861][ T5286] Node 0 DMA32 free:28924kB boost:28672kB min:62832kB low:71372kB high:79912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:8kB inactive_file:40kB unevictable:1544kB writepending:0kB zspages:608kB present:3129332kB managed:2548708kB mlocked:8kB bounce:0kB free_pcp:1388kB local_pcp:624kB free_cma:0kB [ 801.627967][ T5286] lowmem_reserve[]: 0 0 0 0 0 [ 801.633219][ T5286] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 801.676616][ T5286] lowmem_reserve[]: 0 0 0 0 0 [ 801.687512][ T5286] Node 1 Normal free:50084kB boost:45056kB min:100792kB low:114724kB high:128656kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:496kB active_file:40kB inactive_file:120kB unevictable:1536kB writepending:0kB zspages:5784kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:288kB local_pcp:192kB free_cma:0kB [ 801.747762][ T5286] lowmem_reserve[]: 0 0 0 0 0 [ 801.752567][ T5286] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10060kB [ 801.782808][ T5286] Node 0 DMA32: 195*4kB (UME) 199*8kB (ME) 207*16kB (UME) 140*32kB (UME) 129*64kB (UME) 54*128kB (UM) 12*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 28916kB [ 801.835498][ T5286] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 801.867452][ T5286] Node 1 Normal: 1303*4kB (UM) 471*8kB (UM) 581*16kB (UM) 212*32kB (UM) 129*64kB (UM) 61*128kB (UM) 25*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 50084kB [ 801.884587][T14874] wg_peer 118KB 118KB [ 801.897047][T14874] allowedips_node 18KB 19KB [ 801.905936][ T5286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 801.936166][ T5286] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 801.990369][ T5286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 802.017890][T14874] t10_alua_lu_gp_cache 8KB 11KB [ 802.029336][ T5286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 802.050576][T14874] scsi_sense_cache 1318KB 1328KB [ 802.073276][ T5286] 1054 total pagecache pages [ 802.104603][ T5286] 208 pages in swap cache [ 802.132620][ T5286] Free swap = 32628kB [ 802.169099][ T5286] Total swap = 124996kB [ 802.202258][T14874] virtio_scsi_cmd 21KB 24KB [ 802.208508][ T5286] 2097051 pages RAM [ 802.228879][ T5286] 0 pages HighMem/MovableOnly [ 802.255850][ T5286] 428194 pages reserved [ 802.274216][ T5286] 0 pages cma reserved [ 802.304847][T14874] bio-136 44KB 52KB [ 802.402880][T14874] io_kiocb 37KB 56KB [ 802.466650][T14874] bio-264 14KB 31KB [ 802.601267][T14874] mqueue_inode_cache 47KB 61KB [ 802.703188][T14874] bio-272 10KB 15KB [ 802.831342][T14874] f2fs_bio_post_read_ctx 30KB 31KB [ 802.924330][T14874] jfs_mp 14KB 15KB [ 803.058817][T14874] fuse_request 9KB 15KB [ 803.107706][T14874] cifs_small_rq 28KB 32KB [ 803.300477][T14874] cifs_request 67KB 67KB [ 803.431983][T14874] cifs_mpx_ids 8KB 11KB [ 803.495437][T14874] cifs_io_subrequest 42KB 47KB [ 803.611536][T14874] cifs_io_request 105KB 111KB [ 803.831454][T14874] nfs_commit_data 24KB 31KB [ 803.924502][T14874] nfs_write_data 38KB 47KB [ 803.990103][T14874] jbd2_inode 10KB 11KB [ 804.101346][T14874] ext4_system_zone 1KB 3KB [ 804.218437][T14874] ext4_io_end_vec 0KB 11KB [ 804.353817][T14874] kioctx 18KB 31KB [ 804.422432][T14874] aio_kiocb 5KB 18KB [ 804.540437][T14874] fanotify_mark 22KB 23KB [ 804.648906][T14874] fasync_cache 19KB 19KB [ 804.743428][T14874] userfaultfd_ctx_cache 23KB 47KB [ 804.845961][T14874] zspage 130KB 141KB [ 804.988509][T14874] zs_handle 234KB 240KB [ 805.201070][T14874] pid_namespace 8KB 61KB [ 805.276216][T14874] kvm_gmem_inode_cache 15KB 15KB [ 805.492153][T14874] kvm_async_pf 22KB 31KB [ 805.559391][T14874] kvm_vcpu 31KB 187KB [ 805.636296][T14874] kvm_mmu_page_header 19KB 38KB [ 805.723477][T14874] pte_list_desc 3KB 19KB [ 805.824347][ T5631] Bluetooth: hci6: command 0x0406 tx timeout [ 805.830868][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 805.888210][T14874] x86_emulator 20KB 95KB [ 806.027749][T14874] rpc_buffers 25KB 31KB [ 806.185463][T14874] rpc_tasks 8KB 11KB [ 806.326534][T14874] UNIX-STREAM 63KB 159KB [ 806.424964][T14874] UNIX 95KB 318KB [ 806.543555][T14874] ip4-frags 10KB 71KB [ 806.658832][T14874] MPTCP 30KB 91KB [ 806.767203][T14874] tcp_bind2_bucket 13KB 20KB [ 806.853766][T14874] tcp_bind_bucket 15KB 24KB [ 807.005785][T14874] inet_peer 14KB 16KB [ 807.111405][T14874] xfrm_state 20KB 63KB [ 807.252744][T14874] ip_fib_trie 28KB 32KB [ 807.392506][T14874] ip_fib_alias 92KB 98KB [ 807.464938][T14874] rtable 19KB 108KB [ 807.597294][T14874] PING 15KB 63KB [ 807.736754][T14874] RAW 31KB 63KB [ 807.814721][T14874] UDP 106KB 159KB [ 808.001380][T14874] tw_sock_TCP 16KB 23KB [ 808.134519][T14874] request_sock_TCP 17KB 23KB [ 808.199510][T14874] TCP 22KB 263KB [ 808.283362][T14874] fs_bio_integrity 7KB 8KB [ 808.379949][T14874] hugetlbfs_inode_cache 15KB 31KB [ 808.460855][T14874] netfs_subrequest 35KB 37KB [ 808.562985][T14874] netfs_request 105KB 111KB [ 808.651878][T14874] bio-288 21KB 23KB [ 808.748345][T14874] ep_head 3KB 16KB [ 808.853580][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.869687][T14874] eventpoll_pwq 7KB 15KB [ 808.873626][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.993680][T14874] eventpoll_epi 22KB 47KB [ 809.110608][T14874] inotify_inode_mark 15KB 35KB [ 809.244491][T14874] bpf_fs_inode_cache 14KB 15KB [ 809.276423][T14874] sgpool-128 17KB 29KB [ 809.396834][T14874] sgpool-64 40KB 223KB [ 809.528808][T14874] sgpool-32 10KB 110KB [ 809.635830][T14874] sgpool-16 9KB 52KB [ 809.776915][T14874] sgpool-8 9KB 37KB [ 809.875246][T14874] bio_crypt_ctx 9KB 11KB [ 809.998979][T14874] bio_integrity_data 7KB 8KB [ 810.108265][T14874] request_queue 193KB 272KB [ 810.214250][T14874] blkdev_ioc 8KB 11KB [ 810.336612][T14874] bio-200 15KB 41KB [ 810.448935][T14874] biovec-max 238KB 505KB [ 810.574134][T14874] biovec-128 23KB 191KB [ 810.631550][T14874] biovec-64 11KB 126KB [ 810.718799][T14874] biovec-16 4KB 30KB [ 810.850161][T14874] mm_slot 3KB 7KB [ 810.897477][ T5611] syz-executor: page allocation stall for 49 secs: order:0, mode:0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP) nodemask=(null),cpuset=/,mems_allowed=0-1 [ 810.993488][T14874] ksm_mm_slot 7KB 8KB [ 811.010324][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 811.010362][ T5611] Tainted: [L]=SOFTLOCKUP [ 811.010370][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 811.010382][ T5611] Call Trace: [ 811.010390][ T5611] [ 811.010400][ T5611] dump_stack_lvl+0xe8/0x150 [ 811.010437][ T5611] check_alloc_stall_warn+0x20e/0x230 [ 811.010466][ T5611] ? __pfx_check_alloc_stall_warn+0x10/0x10 [ 811.010493][ T5611] ? wake_all_kswapds+0x167/0x280 [ 811.010521][ T5611] __alloc_pages_slowpath+0x50e/0xcc0 [ 811.010569][ T5611] __alloc_frozen_pages_noprof+0x31f/0x380 [ 811.010602][ T5611] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 811.010635][ T5611] ? __pfx_policy_nodemask+0x10/0x10 [ 811.010678][ T5611] alloc_pages_mpol+0x212/0x380 [ 811.010719][ T5611] alloc_pages_noprof+0xac/0x2a0 [ 811.010751][ T5611] folio_alloc_noprof+0x1e/0x30 [ 811.010789][ T5611] filemap_alloc_folio_noprof+0x111/0x470 [ 811.010829][ T5611] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 811.010861][ T5611] ? filemap_fault+0xa55/0x13b0 [ 811.010894][ T5611] __filemap_get_folio_mpol+0x402/0x1000 [ 811.010927][ T5611] filemap_fault+0xa84/0x13b0 [ 811.010961][ T5611] ? __pfx_filemap_fault+0x10/0x10 [ 811.010988][ T5611] ? __pfx_filemap_map_pages+0x10/0x10 [ 811.011024][ T5611] __do_fault+0x138/0x2a0 [ 811.011050][ T5611] ? do_pte_missing+0x140c/0x34b0 [ 811.011078][ T5611] do_pte_missing+0x2215/0x34b0 [ 811.011117][ T5611] ? handle_mm_fault+0xec/0x3080 [ 811.011144][ T5611] handle_mm_fault+0x1b36/0x3080 [ 811.011180][ T5611] ? handle_mm_fault+0xec/0x3080 [ 811.011211][ T5611] ? __pfx_handle_mm_fault+0x10/0x10 [ 811.011230][ T5611] ? lock_vma_under_rcu+0x45a/0x500 [ 811.011282][ T5611] do_user_addr_fault+0xa4d/0x1340 [ 811.011323][ T5611] ? trace_page_fault_user+0x84/0x1e0 [ 811.011354][ T5611] exc_page_fault+0x6a/0xc0 [ 811.011387][ T5611] asm_exc_page_fault+0x26/0x30 [ 811.011407][ T5611] RIP: 0023:0xf717c53c [ 811.011433][ T5611] Code: Unable to access opcode bytes at 0xf717c512. [ 811.011444][ T5611] RSP: 002b:00000000ffd28fa0 EFLAGS: 00010282 [ 811.011462][ T5611] RAX: 000000000000000b RBX: 00000000f7476ff4 RCX: 00000000000007f0 [ 811.011476][ T5611] RDX: 0000000000001bb1 RSI: 0000000000029058 RDI: 0000000000029058 [ 811.011490][ T5611] RBP: 0000000000029058 R08: 0000000000000000 R09: 0000000000000000 [ 811.011502][ T5611] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 811.011515][ T5611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.011547][ T5611] [ 811.011570][ T5611] Mem-Info: [ 811.121499][T14874] user_namespace 28KB 30KB [ 811.353365][ T5611] active_anon:9 inactive_anon:136 isolated_anon:0 [ 811.353365][ T5611] active_file:23 inactive_file:50 isolated_file:0 [ 811.353365][ T5611] unevictable:770 dirty:0 writeback:0 [ 811.353365][ T5611] slab_reclaimable:6545 slab_unreclaimable:114097 [ 811.353365][ T5611] mapped:35865 shmem:769 pagetables:4160 [ 811.353365][ T5611] sec_pagetables:0 bounce:0 [ 811.353365][ T5611] kernel_misc_reclaimable:0 [ 811.353365][ T5611] free:21980 free_pcp:563 free_cma:0 [ 811.399548][ T5611] Node 0 active_anon:12kB inactive_anon:32kB active_file:152kB inactive_file:0kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:102500kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13088kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 811.437429][ T5611] Node 1 active_anon:144kB inactive_anon:548kB active_file:40kB inactive_file:108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:672kB pagetables:10228kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 811.545563][T14874] uid_cache 16KB 18KB [ 811.601582][ T5611] Node 0 DMA free:10060kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 811.713707][T14874] dmaengine-unmap-256 26KB 30KB [ 811.807174][ T5611] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 811.843776][T14874] dmaengine-unmap-128 14KB 15KB [ 811.854773][ T5611] Node 0 DMA32 free:25680kB boost:28672kB min:62832kB low:71372kB high:79912kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:32kB active_file:0kB inactive_file:208kB unevictable:1544kB writepending:0kB zspages:608kB present:3129332kB managed:2548708kB mlocked:8kB bounce:0kB free_pcp:2372kB local_pcp:1844kB free_cma:0kB [ 811.993841][T14874] dmaengine-unmap-16 7KB 8KB [ 812.071821][ T5611] lowmem_reserve[]: 0 0 0 0 0 [ 812.093211][T14874] dmaengine-unmap-2 3KB 4KB [ 812.102370][ T5611] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 812.157646][ T5611] lowmem_reserve[]: 0 0 0 0 0 [ 812.162569][ T5611] Node 1 Normal free:50180kB boost:45056kB min:100792kB low:114724kB high:128656kB reserved_highatomic:0KB free_highatomic:0KB active_anon:316kB inactive_anon:496kB active_file:68kB inactive_file:80kB unevictable:1536kB writepending:0kB zspages:5784kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1316kB local_pcp:964kB free_cma:0kB [ 812.197766][ T5611] lowmem_reserve[]: 0 0 0 0 0 [ 812.217446][ T5611] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10060kB [ 812.246417][ T5611] Node 0 DMA32: 198*4kB (ME) 211*8kB (ME) 207*16kB (ME) 118*32kB (UME) 58*64kB (UME) 53*128kB (UM) 12*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 23648kB [ 812.267461][ T5611] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 812.292290][T14874] QIPCRTR 23KB 62KB [ 812.311934][ T5611] Node 1 Normal: 1363*4kB (UM) 451*8kB (M) 478*16kB (UM) 208*32kB (M) 127*64kB (M) 74*128kB (UM) 26*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 50180kB [ 812.398660][ T5611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.421742][ T5611] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 812.437420][ T5611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.484008][T14874] audit_buffer 13KB 19KB [ 812.494800][ T5611] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 812.541181][ T5611] 1050 total pagecache pages [ 812.562231][ T5611] 208 pages in swap cache [ 812.575113][T14874] skbuff_ext_cache 10KB 28KB [ 812.587672][ T5611] Free swap = 32628kB [ 812.620033][ T5611] Total swap = 124996kB [ 812.643030][ T5611] 2097051 pages RAM [ 812.667583][ T5611] 0 pages HighMem/MovableOnly [ 812.679940][T14874] skbuff_small_head 4192KB 4249KB [ 812.687948][ T31] INFO: task syz.3.2183:13956 blocked for more than 143 seconds. [ 812.695763][ T31] Tainted: G L syzkaller #0 [ 812.707621][ T5611] 428194 pages reserved [ 812.716844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.744580][ T5611] 0 pages cma reserved [ 812.758217][T14874] skbuff_fclone_cache 32KB 105KB [ 812.796484][ T31] task:syz.3.2183 state:D stack:24264 pid:13956 tgid:13955 ppid:5642 task_flags:0x480140 flags:0x0808000a [ 812.882846][ T31] Call Trace: [ 812.914171][ T31] [ 812.924611][T14874] skbuff_head_cache 13954KB 13965KB [ 812.938996][ T31] __schedule+0x17d9/0x56c0 [ 812.974162][ T31] ? __lock_acquire+0x683/0x2cf0 [ 813.013756][ T31] ? __pfx___schedule+0x10/0x10 [ 813.050796][ T31] ? schedule+0x90/0x2b0 [ 813.062762][T14874] configfs_dir_cache 14KB 16KB [ 813.086903][ T31] schedule+0x164/0x2b0 [ 813.123940][ T31] schedule_preempt_disabled+0x13/0x30 [ 813.167177][ T31] __mutex_lock+0x7bf/0x1550 [ 813.172283][T14874] file_lease_cache 12KB 42KB [ 813.172307][T14874] file_lock_cache 10KB 39KB [ 813.172323][T14874] file_lock_ctx 26KB 31KB [ 813.172340][T14874] fsnotify_inode_mark_connector 12KB 27KB [ 813.172355][T14874] fsnotify_mark_connector 6KB 7KB [ 813.172371][T14874] posix_timers_cache 28KB 48KB [ 813.172387][T14874] taskstats 26KB 111KB [ 813.263915][ T31] ? __ia32_compat_sys_ioctl+0x139/0x950 [ 813.308953][ T31] ? __mutex_lock+0x5d4/0x1550 [ 813.389002][ T31] ? blk_trace_setup+0x2d0/0x520 [ 813.450243][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 813.476475][T14874] mem_cgroup_per_node 76KB 92KB [ 813.501690][ T31] blk_trace_setup+0x2d0/0x520 [ 813.507515][T14874] mem_cgroup 82KB 92KB [ 813.526492][T14874] proc_dir_entry 888KB 1072KB [ 813.530665][ T31] ? __pfx_blk_trace_setup+0x10/0x10 [ 813.581872][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 813.634521][ T31] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 813.655060][T14874] pde_opener 0KB 7KB [ 813.668225][ T31] sg_ioctl+0xa5d/0x21b0 [ 813.700433][ T31] ? __pfx_sg_ioctl+0x10/0x10 [ 813.745562][ T31] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 813.774807][ T31] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 813.813015][T14874] seq_file 7KB 39KB [ 813.821370][ T31] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 813.874076][ T31] ? kmem_cache_free+0x182/0x650 [ 813.919713][ T31] ? __se_sys_futex_time32+0x3ab/0x440 [ 813.945214][T14874] sigqueue 3KB 55KB [ 813.955361][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 814.019900][ T31] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 814.065259][ T31] ? rcu_is_watching+0x15/0xb0 [ 814.086676][ T31] __do_fast_syscall_32+0x23e/0x6f0 [ 814.110330][T14874] shmem_inode_cache 6913KB 7757KB [ 814.145102][ T31] ? do_fast_syscall_32+0x33/0x70 [ 814.183973][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 814.203057][T14874] kernfs_iattrs_cache 8KB 15KB [ 814.228539][ T31] ? asm_int80_emulation+0x1a/0x20 [ 814.270475][ T31] ? do_int80_emulation+0x29f/0x550 [ 814.292261][ T31] ? trace_irq_disable+0x3b/0x140 [ 814.331779][ T31] do_fast_syscall_32+0x33/0x70 [ 814.369210][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 814.384779][T14874] kernfs_node_cache 30080KB 30460KB [ 814.425279][ T31] RIP: 0023:0xf700f0ec [ 814.450606][ T31] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 814.509027][T14874] mnt_cache 123KB 204KB [ 814.525744][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0481273 [ 814.606454][ T31] RDX: 0000000080000580 RSI: 0000000000000000 RDI: 0000000000000000 [ 814.623781][T14874] filp 200KB 1031KB [ 814.680493][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 814.717509][T14874] names_cache 13KB 56KB [ 814.735315][T14874] net_namespace 137KB 235KB [ 814.744195][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 814.789250][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 814.858969][ T31] [ 814.876686][T14874] ima_iint_cache 19KB 46KB [ 814.879215][ T31] [ 814.879215][ T31] Showing all locks held in the system: [ 814.977991][ T31] 1 lock held by kthreadd/2: [ 815.019332][T14874] lsm_inode_cache 1289KB 1838KB [ 815.020947][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 815.121498][ T31] 3 locks held by kworker/0:1/10: [ 815.153592][T14874] lsm_file_cache 80KB 411KB [ 815.164971][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 815.209275][T14874] key_jar 32KB 39KB [ 815.215251][ T31] #1: ffffc900000f7c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 815.342496][ T31] #2: ffffffff9039c7a0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 815.378692][T14874] uts_namespace 45KB 46KB [ 815.447134][ T31] 3 locks held by kworker/1:1/29: [ 815.457750][T14874] nsproxy 10KB 15KB [ 815.469592][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 815.564866][ T31] #1: ffffc90000a47c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 815.570188][T14874] vm_area_struct 843KB 1526KB [ 815.646633][ T31] #2: ffffffff9039c7a0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 815.735537][ T31] 1 lock held by khungtaskd/31: [ 815.786712][T14874] fs_cache 20KB 64KB [ 815.792679][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 815.798823][T14874] files_cache 87KB 255KB [ 815.887114][ T31] 4 locks held by kworker/0:2/189: [ 815.930362][ T31] 2 locks held by klogd/4981: [ 815.968509][ T31] 3 locks held by udevd/4992: [ 815.984518][T14874] task_exec_state 9KB 40KB [ 816.000780][ T31] 3 locks held by dhcpcd/5286: [ 816.032638][ T31] 1 lock held by crond/5363: [ 816.069349][ T31] 2 locks held by getty/5380: [ 816.106463][ T31] #0: ffff8880358360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 816.140551][T14874] signal_cache 810KB 2126KB [ 816.192735][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 816.267852][ T31] 3 locks held by syz-executor/5611: [ 816.282605][T14874] sighand_cache 1010KB 2495KB [ 816.307285][ T31] 3 locks held by kworker/0:3/5628: [ 816.346440][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 816.418119][T14874] task_struct 3448KB 5146KB [ 816.434914][ T31] #1: ffffc90004537c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 816.531324][ T31] #2: ffffffff9039c7a0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 816.563926][T14874] cred 132KB 376KB [ 816.601499][ T31] 3 locks held by syz-executor/5643: [ 816.648467][ T31] 3 locks held by syz-executor/5644: [ 816.710884][ T31] 2 locks held by syz-executor/5645: [ 816.731521][ T31] #0: ffff88807693b3f8 (mapping.invalidate_lock#2){++++}-{4:4}, at: filemap_fault+0xa55/0x13b0 [ 816.732114][T14874] anon_vma_chain 302KB 543KB [ 816.793186][ T31] #1: ffffffff8ec848e0 (fs_reclaim){+.+.}-{0:0}, at: __alloc_pages_direct_reclaim+0xbd/0x310 [ 816.898888][T14874] anon_vma 336KB 583KB [ 816.922616][T14874] pid 143KB 322KB [ 816.922918][ T31] 3 locks held by kworker/0:4/5682: [ 816.928955][T14874] Acpi-Operand 117KB 233KB [ 816.928977][T14874] Acpi-ParseExt 12KB 31KB [ 816.928993][T14874] Acpi-Parse 3KB 27KB [ 816.929009][T14874] Acpi-State 4KB 23KB [ 816.929024][T14874] Acpi-Namespace 28KB 40KB [ 816.929038][T14874] shared_policy_node 7KB 8KB [ 816.929053][T14874] numa_policy 7KB 12KB [ 816.929067][T14874] perf_event 15KB 31KB [ 816.929081][T14874] trace_event_file 577KB 580KB [ 816.929096][T14874] ftrace_event_field 1118KB 1122KB [ 816.929112][T14874] pool_workqueue 765KB 832KB [ 816.929128][T14874] task_group 24KB 32KB [ 816.929175][T14874] maple_node 536KB 1840KB [ 816.929192][T14874] mm_struct 280KB 637KB [ 816.929210][T14874] vmap_area 291KB 348KB [ 816.929240][T14874] debug_objects_cache 2829KB 3050KB [ 816.929263][T14874] page->ptl 118KB 315KB [ 816.929279][T14874] kmalloc-cg-8k 2864KB 3136KB [ 817.046039][T14874] kmalloc-cg-4k 18744KB 22016KB [ 817.052203][T14874] kmalloc-cg-2k 12156KB 13248KB [ 817.075914][T14874] kmalloc-cg-1k 3180KB 3520KB [ 817.079649][ T31] #0: [ 817.082120][T14874] kmalloc-cg-512 1273KB 2192KB [ 817.091268][T14874] kmalloc-cg-256 472KB 568KB [ 817.097409][T14874] kmalloc-cg-128 290KB 312KB [ 817.103506][T14874] kmalloc-cg-64 61KB 124KB [ 817.111519][T14874] kmalloc-cg-32 37KB 200KB [ 817.123394][ T31] ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 817.132535][T14874] kmalloc-cg-16 5KB 12KB [ 817.140209][T14874] kmalloc-cg-8 25KB 36KB [ 817.146352][T14874] kmalloc-cg-192 48KB 68KB [ 817.152483][T14874] kmalloc-cg-96 66KB 120KB [ 817.178493][T14874] kmalloc-8k 8480KB 8864KB [ 817.260863][ T31] #1: ffffc90004607c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 817.267501][T14874] kmalloc-4k 155968KB 156080KB [ 817.353355][ T31] #2: ffffffff9039c7a0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 817.399202][T14874] kmalloc-2k 14148KB 18464KB [ 817.433283][ T31] 3 locks held by kworker/0:5/5697: [ 817.476042][T14874] kmalloc-1k 20528KB 20596KB [ 817.477888][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 817.602204][ T31] #1: ffffc90005097c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 817.710561][ T31] #2: ffffffff9039c7a0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 817.734141][T14874] kmalloc-512 12007KB 15856KB [ 817.792420][ T31] 3 locks held by kworker/0:7/5759: [ 817.840381][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 817.914415][ T31] #1: ffffc9000540fc40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 817.939448][T14874] kmalloc-256 31201KB 31224KB [ 818.029692][ T31] #2: ffffffff9039c7a0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 818.035575][T14874] kmalloc-128 1729KB 2104KB [ 818.102027][ T31] 3 locks held by syz.1.2177/13930: [ 818.139429][ T31] 1 lock held by syz.3.2183/13956: [ 818.178857][ T31] #0: ffff888026c0f868 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x2d0/0x520 [ 818.253748][ T31] 3 locks held by syz-executor/14076: [ 818.285150][T14874] kmalloc-64 5706KB 5712KB [ 818.301222][ T31] 3 locks held by kworker/0:0/14191: [ 818.357423][ T31] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 818.407871][T14874] kmalloc-32 2455KB 3228KB [ 818.417203][ T31] #1: ffffc90003967c40 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 818.525373][ T31] #2: ffffffff9039c7a0 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 818.544878][T14874] kmalloc-16 448KB 480KB [ 818.577592][T14874] kmalloc-8 418KB 456KB [ 818.601416][ T31] 3 locks held by syz.2.2379/14762: [ 818.633261][ T31] 1 lock held by syz.4.2411/14869: [ 818.675560][ T31] 3 locks held by dhcpcd/14872: [ 818.725902][ T31] 3 locks held by syz.2.2410/14874: [ 818.744951][T14874] kmalloc-192 2044KB 2356KB [ 818.763224][ T31] [ 818.779347][ T31] ============================================= [ 818.779347][ T31] [ 818.849239][ T31] NMI backtrace for cpu 1 [ 818.849266][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 818.849293][ T31] Tainted: [L]=SOFTLOCKUP [ 818.849301][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 818.849313][ T31] Call Trace: [ 818.849322][ T31] [ 818.849332][ T31] dump_stack_lvl+0xe8/0x150 [ 818.849369][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 818.849397][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 818.849438][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 818.849466][ T31] sys_info+0x135/0x170 [ 818.849551][ T31] watchdog+0xfd7/0x1030 [ 818.849591][ T31] ? watchdog+0x1c7/0x1030 [ 818.849622][ T31] kthread+0x388/0x470 [ 818.849651][ T31] ? __pfx_watchdog+0x10/0x10 [ 818.849674][ T31] ? __pfx_kthread+0x10/0x10 [ 818.849703][ T31] ret_from_fork+0x514/0xb70 [ 818.849743][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 818.849771][ T31] ? __switch_to+0xc89/0x1420 [ 818.849798][ T31] ? __pfx_kthread+0x10/0x10 [ 818.849825][ T31] ret_from_fork_asm+0x1a/0x30 [ 818.849858][ T31] [ 818.849866][ T31] Sending NMI from CPU 1 to CPUs 0: [ 818.968679][ C0] NMI backtrace for cpu 0 [ 818.968703][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.968726][ C0] Tainted: [L]=SOFTLOCKUP [ 818.968732][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 818.968742][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 818.968772][ C0] Code: 3c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 0a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 818.968786][ C0] RSP: 0000:ffffffff8e807de0 EFLAGS: 00000246 [ 818.968802][ C0] RAX: 0000000000ab6ddd RBX: ffffffff819ab33c RCX: 0000000080000001 [ 818.968838][ C0] RDX: 0000000000000001 RSI: ffffffff8e22b35b RDI: ffffffff8c4bda80 [ 818.968850][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 818.968861][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 818.968873][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 818.968891][ C0] FS: 0000000000000000(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 818.968905][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.968917][ C0] CR2: 00000000f717c512 CR3: 000000000e946000 CR4: 00000000003526f0 [ 818.968932][ C0] Call Trace: [ 818.968941][ C0] [ 818.968947][ C0] default_idle+0x9/0x20 [ 818.968963][ C0] default_idle_call+0x72/0xb0 [ 818.968980][ C0] do_idle+0x1cc/0x540 [ 818.969002][ C0] ? __pfx_do_idle+0x10/0x10 [ 818.969026][ C0] cpu_startup_entry+0x43/0x60 [ 818.969046][ C0] rest_init+0x2de/0x300 [ 818.969064][ C0] start_kernel+0x392/0x3e0 [ 818.969199][ C0] x86_64_start_reservations+0x24/0x30 [ 818.969239][ C0] x86_64_start_kernel+0x137/0x1b0 [ 818.969258][ C0] common_startup_64+0x13e/0x157 [ 818.969283][ C0] [ 819.250012][T14874] kmalloc-96 2248KB 2256KB [ 819.438698][T14874] kmem_cache_node 215KB 220KB [ 819.497567][T14874] kmem_cache 179KB 198KB [ 819.804811][T14874] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.2410,pid=14874,uid=0 [ 820.075625][T14874] Out of memory (oom_kill_allocating_task): Killed process 14874 (syz.2.2410) total-vm:102020kB, anon-rss:0kB, file-rss:20492kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 820.167474][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 820.174400][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 820.185114][ T31] Tainted: [L]=SOFTLOCKUP [ 820.189465][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 820.199539][ T31] Call Trace: [ 820.202819][ T31] [ 820.205741][ T31] vpanic+0x56c/0xa60 [ 820.209726][ T31] ? __pfx___schedule+0x10/0x10 [ 820.214588][ T31] ? __pfx_vpanic+0x10/0x10 [ 820.219096][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 820.225252][ T31] panic+0xc5/0xd0 [ 820.228980][ T31] ? __pfx_panic+0x10/0x10 [ 820.233422][ T31] ? preempt_schedule_common+0x82/0xd0 [ 820.239144][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 820.244517][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 820.250671][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 820.256820][ T31] watchdog+0x1030/0x1030 [ 820.261167][ T31] ? watchdog+0x1c7/0x1030 [ 820.265595][ T31] kthread+0x388/0x470 [ 820.269690][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.274382][ T31] ? __pfx_kthread+0x10/0x10 [ 820.278987][ T31] ret_from_fork+0x514/0xb70 [ 820.283609][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.288754][ T31] ? __switch_to+0xc89/0x1420 [ 820.293428][ T31] ? __pfx_kthread+0x10/0x10 [ 820.298029][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.302806][ T31] [ 820.306051][ T31] Kernel Offset: disabled [ 820.310445][ T31] Rebooting in 86400 seconds..