last executing test programs: 7.660857373s ago: executing program 2 (id=11232): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x8000}, 0x8031, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff0018000000000000008400"], 0x38}, 0x41) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000080000ffffff7f00000000003f734372a777d967f16f5679fd11432dcf606ed481541bfef2f0c30eb389d98bab510a6bba388cb857723860c6f1384d868fc964c9a6fdc71adf5c5550dffe0303ad20c50fa2a85438ffdb42ec5f00"/112, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 7.516049954s ago: executing program 2 (id=11235): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffffbc, 0x2}, 0x90020, 0x5, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x2, 0x0, 0x20008}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x4000000, 0x7, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a00ff00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)={[{0x2b, 'net'}, {0x2b, 'cpu'}, {0x2b, 'perf_event'}, {0x2b, 'perf_event'}, {0x2b, 'freezer'}]}, 0x2b) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000b00200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 6.149707892s ago: executing program 2 (id=11242): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f2e"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 4.742687331s ago: executing program 3 (id=11248): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x8000}, 0x8031, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff0018000000000000008400"], 0x38}, 0x41) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000080000ffffff7f00000000003f734372a777d967f16f5679fd11432dcf606ed481541bfef2f0c30eb389d98bab510a6bba388cb857723860c6f1384d868fc964c9a6fdc71adf5c5550dffe0303ad20c50fa2a85438ffdb42ec5f00"/112, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018010000203ea02500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 3.539285088s ago: executing program 3 (id=11251): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x58}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 3.448614929s ago: executing program 0 (id=11252): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000100), 0x7}, 0x0, 0x2, 0x2, 0x8, 0x1, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020b000000000000002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475c", 0x71}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x9e9}], 0x3}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESDEC=r4], 0xe) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d0000000"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x8, 0x8, 0x5, 0x0, 0x80000000, 0x2002, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffafe5, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffff819}, 0x2000, 0x1, 0x0, 0x5, 0x2, 0x2, 0x8001, 0x0, 0xd2, 0x0, 0xfb}, r6, 0x3, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120) 3.447032369s ago: executing program 2 (id=11260): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000280), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="120000002820000000000000", @ANYRES32=0x0, @ANYBLOB="daf5926e2bf70f87ab04cb525b87f0e17593d4d8ff", @ANYRES64=0x0], 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x2a, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x891a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x13) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x2c, 0x3, 0x0) recvmsg(r6, 0x0, 0x2000) 3.403285189s ago: executing program 1 (id=11253): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc}, 0x50) close(0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff7ffbfffffeffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xb80b) close(r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) close(r0) 3.33293106s ago: executing program 3 (id=11254): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="a8bf38f367fa179bf4174d0e959303fb4a2c6959687a02da24cb39327e693b868160ee12cbd1e3f261fcb512cd2aa006927f461a6f0ac0a075d10d38b6beb79ef79f111c40337724ff4ce871356ac380261a7e428854e9455aa31a03451b525e0edbd3bf11ed9d4eb0c827b3e99ca78f5e5cd272aef75c7859b1a93377da3d98d53dcedf5112eeb1bdb71a53a44f4af0aa7fbbc2345b070f97f8a79465465dd9613e5ba40d57c37efab4d07240633e284273b6c214ce2f0726c2d45c1329fedd6c6cd1457ad4d3d4bf3a97ba378390161ca12832e879ecac056548026fd24e10dc78a7e6b7e32e1cf8a39e9a67ffe1931e5b13f56751ae31fe8f3b12a1225b524e006b496cd640b7337791884e3cb3e5ea4ed0d6233bb9d4b7092ccc6e973f89a5342487d351d4fb4f431a9baf1ef9339b4cbe718e004602b11a2aec997143b2b85f2602b3d82650", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f2e"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 3.189431801s ago: executing program 1 (id=11255): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x8000}, 0x8031, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff0018000000000000008400"], 0x38}, 0x41) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000080000ffffff7f00000000003f734372a777d967f16f5679fd11432dcf606ed481541bfef2f0c30eb389d98bab510a6bba388cb857723860c6f1384d868fc964c9a6fdc71adf5c5550dffe0303ad20c50fa2a85438ffdb42ec5f00"/112, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 3.058943051s ago: executing program 0 (id=11256): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r3 = getpid() r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x5, 0xff, 0x28, 0x0, 0x6, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x34, 0x1, @perf_config_ext={0xe}, 0x406, 0xfffffffffffffff8, 0x7c, 0x3, 0x80000000003, 0x7, 0x0, 0x0, 0x3bd, 0x0, 0x2}, r3, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffd, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 2.492583535s ago: executing program 2 (id=11257): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xc0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x36, &(0x7f0000000100)=r6, 0x120) sendmsg$inet(r5, &(0x7f00000026c0)={&(0x7f0000002440)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002480)}], 0x1}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101, 0x4}, 0x9fbde75d38449f7e, 0x8, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.492250175s ago: executing program 3 (id=11258): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="a8bf38f367fa179bf4174d0e959303fb4a2c6959687a02da24cb39327e693b868160ee12cbd1e3f261fcb512cd2aa006927f461a6f0ac0a075d10d38b6beb79ef79f111c40337724ff4ce871356ac380261a7e428854e9455aa31a03451b525e0edbd3bf11ed9d4eb0c827b3e99ca78f5e5cd272aef75c7859b1a93377da3d98d53dcedf5112eeb1bdb71a53a44f4af0aa7fbbc2345b070f97f8a79465465dd9613e5ba40d57c37efab4d07240633e284273b6c214ce2f0726c2d45c1329fedd6c6cd1457ad4d3d4bf3a97ba378390161ca12832e879ecac056548026fd24e10dc78a7e6b7e32e1cf8a39e9a67ffe1931e5b13f56751ae31fe8f3b12a1225b524e006b496cd640b7337791884e3cb3e5ea4ed0d6233bb9d4b7092ccc6e973f89a5342487d351d4fb4f431a9baf1ef9339b4cbe718e004602b11a2aec997143b2b85f2602b3d82650", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f2e"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 2.483904595s ago: executing program 0 (id=11266): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000280), 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="120000002820000000000000", @ANYRES32=0x0, @ANYBLOB="daf5926e2bf70f87ab04cb525b87f0e17593d4d8ff", @ANYRES64=0x0], 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x2a, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x891a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x13) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x2c, 0x3, 0x0) recvmsg(r6, 0x0, 0x2000) 2.482905095s ago: executing program 1 (id=11259): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x8000}, 0x8031, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff0018000000000000008400"], 0x38}, 0x41) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000080000ffffff7f00000000003f734372a777d967f16f5679fd11432dcf606ed481541bfef2f0c30eb389d98bab510a6bba388cb857723860c6f1384d868fc964c9a6fdc71adf5c5550dffe0303ad20c50fa2a85438ffdb42ec5f00"/112, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018010000203ea02500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 2.363198416s ago: executing program 1 (id=11261): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x148, 0x0, &(0x7f0000000680)="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", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f2e"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) 1.526120471s ago: executing program 0 (id=11262): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000000b40)}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r1, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x891a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x13) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd60000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2000) 1.229932122s ago: executing program 2 (id=11263): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0x4394) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0xc, 0x3, 0xb, 0x8, 0x1}], &(0x7f0000000080)='GPL\x00', 0x6944, 0x55, &(0x7f00000001c0)=""/85, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xe}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x3, 0x1, 0x8, 0xc}], 0x10, 0xffffffff}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xf, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xda8}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, 0x0, 0x3000c041) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xa, 0xff, 0x8, 0x1, 0x0, 0x5, 0x5013c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x81, 0x2}, 0x0, 0x0, 0x6, 0x7, 0x3, 0x582a010f, 0xff, 0x0, 0x6, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000001780)={&(0x7f00000003c0)=@phonet={0x23, 0x3, 0x62, 0x7}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000380)="8b", 0x1}], 0x1}, 0x4000004) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f0300000000000003763022fafe4eba0d0000009ee5010000000100000052a705250e6182949a3651f60a84c9f5d1938037e786a6d4bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040044) 772.064775ms ago: executing program 0 (id=11264): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x58}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 577.756607ms ago: executing program 3 (id=11265): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xc}, 0x50) close(0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff7ffbfffffeffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xb80b) close(r3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) close(r0) 515.080097ms ago: executing program 1 (id=11267): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r3 = getpid() r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x5, 0xff, 0x28, 0x0, 0x6, 0x1000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x34, 0x1, @perf_config_ext={0xe}, 0x406, 0xfffffffffffffff8, 0x7c, 0x3, 0x80000000003, 0x7, 0x0, 0x0, 0x3bd, 0x0, 0x2}, r3, 0x10, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffd, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 299.632888ms ago: executing program 3 (id=11268): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000840)='task_rename\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000880), 0x8, 0x7d, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd3, 0xd3, 0x5, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x400, 0x9}], "e1c1b2"}, @enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x4}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @volatile={0xe, 0x0, 0x0, 0x9, 0x1}, @enum64={0x8, 0x6, 0x0, 0x13, 0x1, 0x4, [{0x2, 0x2, 0xffffffff}, {0x1, 0x0, 0x8}, {0x2, 0x3, 0x6}, {0x9, 0x5, 0xa}, {0x5, 0x8, 0x9}, {0x8, 0x8000, 0x8000}]}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0xd, 0x10000}, {0xe, 0x2}, {0x1, 0x9}, {0xf, 0xcd51}, {0xf, 0x6}]}]}, {0x0, [0x61, 0x0, 0x0]}}, &(0x7f0000000c40)=""/71, 0xf1, 0x47, 0x0, 0x40, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc7", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) close(0xffffffffffffffff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 292.754308ms ago: executing program 0 (id=11269): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0xa4, 0x0, &(0x7f0000000680)="a8bf38f367fa179bf4174d0e959303fb4a2c6959687a02da24cb39327e693b868160ee12cbd1e3f261fcb512cd2aa006927f461a6f0ac0a075d10d38b6beb79ef79f111c40337724ff4ce871356ac380261a7e428854e9455aa31a03451b525e0edbd3bf11ed9d4eb0c827b3e99ca78f5e5cd272aef75c7859b1a93377da3d98d53dcedf5112eeb1bdb71a53a44f4af0aa7fbbc2345b070f97f8a79465465dd9613e5ba4", 0x0, 0xc, 0x0, 0x9, 0x0, &(0x7f0000000180)="5d8a8441d7b8778a61", 0x0, 0x2, 0x0, 0x7c}, 0x50) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYBLOB="000000f34279e645765f2e"], 0x48) syz_clone(0x22023400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=11270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x633ed79a1ee0bcd1, 0x0) close(r1) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) r3 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b76, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000340)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000080)="3a1733", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000000)="f8ad1dcc", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @multicast}) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.1.7138'. [ 1105.586062][T24033] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1106.059343][T24049] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1107.603655][T24083] netlink: 'syz.1.7160': attribute type 10 has an invalid length. [ 1108.239748][T24107] netlink: 763 bytes leftover after parsing attributes in process `syz.3.7172'. [ 1108.676454][T24123] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7177'. [ 1108.753851][T24125] netlink: 'syz.2.7178': attribute type 10 has an invalid length. [ 1108.766082][T24125] bridge0: port 2(team0) entered disabled state [ 1108.772782][T24125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.377686][T24144] netlink: 'syz.2.7184': attribute type 10 has an invalid length. [ 1109.396121][T24144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7184'. [ 1110.265575][T24162] netlink: 'syz.3.7191': attribute type 10 has an invalid length. [ 1110.287188][T24165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7192'. [ 1111.621731][T24189] netlink: 'syz.2.7203': attribute type 10 has an invalid length. [ 1111.640939][T24189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7203'. [ 1112.215604][T24212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7210'. [ 1112.647064][T24220] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1113.212165][T24227] netlink: 'syz.0.7215': attribute type 10 has an invalid length. [ 1113.245084][T24227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7215'. [ 1113.286296][T24227] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1113.681050][T24230] netlink: 763 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1113.986659][T24239] netlink: 'syz.3.7221': attribute type 10 has an invalid length. [ 1114.809242][T24255] netlink: 'syz.0.7228': attribute type 10 has an invalid length. [ 1114.828147][T24255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7228'. [ 1114.851488][T24255] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1116.152548][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.159276][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.543897][T24306] netlink: 763 bytes leftover after parsing attributes in process `syz.2.7248'. [ 1118.561668][T24362] IPv6: Can't replace route, no match found [ 1118.633615][T24362] netlink: 'syz.3.7268': attribute type 10 has an invalid length. [ 1118.662553][T24362] bond0: (slave O3c): Opening slave failed [ 1119.314340][T24385] netlink: 'syz.0.7278': attribute type 10 has an invalid length. [ 1119.792308][T24402] netlink: 'syz.1.7285': attribute type 10 has an invalid length. [ 1121.029310][T24426] netlink: 'syz.1.7294': attribute type 10 has an invalid length. [ 1122.148619][T24454] netlink: 'syz.3.7303': attribute type 10 has an invalid length. [ 1122.518683][T24466] netlink: 'syz.2.7307': attribute type 10 has an invalid length. [ 1123.321892][T24482] netlink: 'syz.2.7314': attribute type 10 has an invalid length. [ 1123.681456][T24494] IPv6: Can't replace route, no match found [ 1123.699301][T24494] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1123.726463][T24494] netlink: 'syz.1.7318': attribute type 10 has an invalid length. [ 1123.745128][T24494] wlan1: mtu less than device minimum [ 1123.759957][T24494] : (slave wlan1): Error -22 calling dev_set_mtu [ 1124.588372][T24513] netlink: 'syz.2.7325': attribute type 10 has an invalid length. [ 1124.996067][T24533] IPv6: Can't replace route, no match found [ 1125.066104][T24530] netlink: 'syz.0.7333': attribute type 10 has an invalid length. [ 1125.075615][T24530] mac80211_hwsim hwsim3 O3c: left allmulticast mode [ 1125.083078][T24530] O3c: mtu less than device minimum [ 1125.090271][T24530] : (slave O3c): Error -22 calling dev_set_mtu [ 1125.202369][T24542] netlink: 'syz.3.7336': attribute type 10 has an invalid length. [ 1126.559170][T24569] netlink: 'syz.1.7345': attribute type 7 has an invalid length. [ 1126.699267][T24579] netlink: 'syz.0.7349': attribute type 10 has an invalid length. [ 1127.375203][T24587] IPv6: Can't replace route, no match found [ 1127.462824][T24584] netlink: 'syz.2.7350': attribute type 10 has an invalid length. [ 1127.482576][T24584] O3c: mtu less than device minimum [ 1127.488417][T24584] : (slave O3c): Error -22 calling dev_set_mtu [ 1127.766041][T24599] netlink: 'syz.3.7354': attribute type 10 has an invalid length. [ 1127.789771][T24599] geneve0: entered promiscuous mode [ 1127.901858][T24599] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1128.072755][T24609] netlink: 'syz.0.7359': attribute type 10 has an invalid length. [ 1128.083530][T24611] netlink: 'syz.1.7357': attribute type 23 has an invalid length. [ 1128.785147][T24638] validate_nla: 2 callbacks suppressed [ 1128.785253][T24638] netlink: 'syz.3.7371': attribute type 9 has an invalid length. [ 1128.789983][T24640] netlink: 'syz.1.7372': attribute type 9 has an invalid length. [ 1128.791472][T24638] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.7371'. [ 1128.801060][T24640] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1128.866169][T24640] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7372'. [ 1129.345576][T24657] netlink: 'syz.3.7378': attribute type 10 has an invalid length. [ 1129.637384][T24665] netlink: 'syz.3.7380': attribute type 10 has an invalid length. [ 1129.956610][T24673] netlink: 'syz.3.7384': attribute type 10 has an invalid length. [ 1129.975016][T24673] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7384'. [ 1129.989652][T24673] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1130.164819][T24685] netlink: 'syz.1.7389': attribute type 10 has an invalid length. [ 1130.185200][T24685] : (slave c1): Releasing backup interface [ 1130.193922][T24685] : left promiscuous mode [ 1130.537509][T24692] netlink: 'syz.1.7392': attribute type 10 has an invalid length. [ 1132.737860][T24788] netlink: 'syz.2.7402': attribute type 10 has an invalid length. [ 1132.755574][T24788] geneve0: entered promiscuous mode [ 1132.863312][T24788] : (slave geneve0): Enslaving as an active interface with an up link [ 1132.884424][T24790] netlink: 'syz.1.7404': attribute type 9 has an invalid length. [ 1132.907919][T24790] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.7404'. [ 1133.368500][T24809] netlink: 'syz.3.7411': attribute type 10 has an invalid length. [ 1133.396369][T24809] bond0: (slave netdevsim0): Releasing backup interface [ 1133.405859][T24809] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1133.429742][T24809] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1133.440913][T24809] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1133.452497][T24809] team0: Port device netdevsim0 added [ 1135.014087][T24844] netlink: 'syz.2.7421': attribute type 9 has an invalid length. [ 1135.027842][T24844] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7421'. [ 1135.121843][T24844] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7421'. [ 1135.135485][T24847] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7422'. [ 1135.145966][T24847] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7422'. [ 1135.471432][T24851] netlink: 'syz.0.7425': attribute type 10 has an invalid length. [ 1135.648213][T24857] netlink: 'syz.0.7438': attribute type 10 has an invalid length. [ 1136.238456][T24877] netlink: 'syz.1.7435': attribute type 10 has an invalid length. [ 1136.251286][T24877] geneve0: entered promiscuous mode [ 1136.279725][T24877] : (slave geneve0): Enslaving as an active interface with an up link [ 1136.836135][T24888] netlink: 'syz.3.7440': attribute type 9 has an invalid length. [ 1136.847094][T24888] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1136.895775][T24888] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1137.011358][T24893] netlink: 'syz.0.7442': attribute type 10 has an invalid length. [ 1138.188958][T24937] netlink: 'syz.0.7448': attribute type 10 has an invalid length. [ 1138.209926][T24937] geneve0: entered promiscuous mode [ 1138.309867][T24937] : (slave geneve0): Enslaving as an active interface with an up link [ 1138.426265][T24944] netlink: 'syz.0.7453': attribute type 9 has an invalid length. [ 1138.436178][T24944] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7453'. [ 1138.481818][T24944] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.7453'. [ 1138.696812][T24949] netlink: 'syz.0.7454': attribute type 10 has an invalid length. [ 1138.714566][T24949] : (slave netdevsim0): Releasing backup interface [ 1138.726349][T24949] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1138.780159][T24949] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1138.790360][T24949] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1138.805076][T24949] team0: Port device netdevsim0 added [ 1139.543734][T24968] netlink: 'syz.0.7463': attribute type 10 has an invalid length. [ 1140.170921][T24982] netlink: 'syz.3.7468': attribute type 9 has an invalid length. [ 1140.193743][T24982] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1140.344837][T24982] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1140.810359][T24990] netlink: 'syz.1.7471': attribute type 10 has an invalid length. [ 1141.731098][T25002] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7476'. [ 1141.745242][T25002] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7476'. [ 1141.931299][T25010] netlink: 'syz.1.7473': attribute type 10 has an invalid length. [ 1141.959556][T25010] : (slave ): Releasing backup interface [ 1141.970107][T25010] netdevsim netdevsim1 : left promiscuous mode [ 1142.011312][T25010] netdevsim netdevsim1 : entered promiscuous mode [ 1142.019155][T25010] netdevsim netdevsim1 : entered allmulticast mode [ 1142.037527][T25010] team0: Port device added [ 1142.078081][T25016] netlink: 'syz.0.7478': attribute type 10 has an invalid length. [ 1143.014337][T25029] netlink: 'syz.2.7483': attribute type 10 has an invalid length. [ 1143.151329][T25037] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7485'. [ 1143.170260][T25037] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7485'. [ 1143.287128][T25041] netlink: 'syz.3.7487': attribute type 10 has an invalid length. [ 1143.645440][T25052] netlink: 'syz.1.7498': attribute type 10 has an invalid length. [ 1143.753307][T25057] netlink: 'syz.2.7490': attribute type 10 has an invalid length. [ 1143.778789][T25057] : (slave netdevsim0): Releasing backup interface [ 1143.801336][T25057] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1143.835900][T25057] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1143.849360][T25057] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1143.861223][T25057] team0: Port device netdevsim0 added [ 1144.378487][T25069] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7496'. [ 1144.388110][T25069] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7496'. [ 1145.081503][T25085] netlink: 'syz.1.7507': attribute type 10 has an invalid length. [ 1145.520401][T25095] netlink: 'syz.3.7502': attribute type 10 has an invalid length. [ 1145.777625][T25099] netlink: 'syz.3.7504': attribute type 10 has an invalid length. [ 1145.831337][T25101] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7505'. [ 1145.850021][T25101] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7505'. [ 1146.000685][T25110] netlink: 'syz.3.7510': attribute type 10 has an invalid length. [ 1146.904908][T25133] netlink: 'syz.1.7514': attribute type 10 has an invalid length. [ 1147.581610][T25148] netlink: 'syz.1.7518': attribute type 10 has an invalid length. [ 1147.849018][T25162] netlink: 'syz.2.7525': attribute type 10 has an invalid length. [ 1148.818577][T25180] netlink: 'syz.0.7527': attribute type 10 has an invalid length. [ 1149.512572][T25190] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7532'. [ 1149.533476][T25190] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7532'. [ 1149.825511][T25197] netlink: 'syz.2.7534': attribute type 9 has an invalid length. [ 1149.842896][T25197] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7534'. [ 1150.513586][T25226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7543'. [ 1150.525603][T25226] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7543'. [ 1150.836631][T25234] netlink: 'syz.0.7545': attribute type 10 has an invalid length. [ 1150.903810][T25236] netlink: 'syz.0.7546': attribute type 9 has an invalid length. [ 1150.912285][T25236] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7546'. [ 1151.754719][T25262] netlink: 'syz.3.7554': attribute type 10 has an invalid length. [ 1151.928205][T25269] netlink: 'syz.1.7555': attribute type 10 has an invalid length. [ 1157.435319][T25325] netlink: 'syz.3.7569': attribute type 9 has an invalid length. [ 1157.445355][T25325] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.7569'. [ 1157.725300][T25321] netlink: 'syz.0.7570': attribute type 9 has an invalid length. [ 1157.738833][T25321] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7570'. [ 1159.004174][T25344] netlink: 'syz.1.7576': attribute type 10 has an invalid length. [ 1163.787731][T25375] netlink: 'syz.0.7585': attribute type 10 has an invalid length. [ 1164.128903][T25372] netlink: 'syz.3.7584': attribute type 9 has an invalid length. [ 1164.136711][T25372] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7584'. [ 1165.149870][T25387] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7589'. [ 1165.264957][T25387] netlink: 'syz.0.7589': attribute type 16 has an invalid length. [ 1165.287200][T25387] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7589'. [ 1166.246737][T25402] netlink: 'syz.2.7595': attribute type 10 has an invalid length. [ 1166.617393][T25412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7598'. [ 1166.668424][T25412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7598'. [ 1166.678920][T25409] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7598'. [ 1170.847727][T25427] netlink: 'syz.1.7603': attribute type 10 has an invalid length. [ 1171.243137][T25436] netlink: 'syz.1.7607': attribute type 9 has an invalid length. [ 1171.273172][T25436] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7607'. [ 1171.292898][T25440] netlink: 'syz.2.7610': attribute type 10 has an invalid length. [ 1171.900226][T25456] netlink: 'syz.1.7616': attribute type 10 has an invalid length. [ 1172.177567][T25469] netlink: 'syz.1.7621': attribute type 10 has an invalid length. [ 1172.221622][T25465] netlink: 'syz.3.7619': attribute type 10 has an invalid length. [ 1172.413399][T25477] netlink: 'syz.2.7625': attribute type 9 has an invalid length. [ 1172.434028][T25479] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7626'. [ 1172.443970][T25477] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7625'. [ 1172.453982][T25479] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7626'. [ 1172.775677][T25489] syz.2.7630: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1172.788354][T25487] netlink: 'syz.1.7629': attribute type 10 has an invalid length. [ 1172.805920][T25489] CPU: 0 PID: 25489 Comm: syz.2.7630 Not tainted syzkaller #0 [ 1172.813444][T25489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1172.823527][T25489] Call Trace: [ 1172.826899][T25489] [ 1172.829838][T25489] dump_stack_lvl+0x16c/0x230 [ 1172.834562][T25489] ? show_regs_print_info+0x20/0x20 [ 1172.839789][T25489] ? load_image+0x3b0/0x3b0 [ 1172.844403][T25489] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1172.850829][T25489] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1172.857345][T25489] warn_alloc+0x210/0x300 [ 1172.861689][T25489] ? stack_trace_save+0x9c/0xe0 [ 1172.866554][T25489] ? zone_watermark_ok_safe+0x230/0x230 [ 1172.872122][T25489] ? kasan_set_track+0x5f/0x70 [ 1172.876904][T25489] ? kasan_set_track+0x4e/0x70 [ 1172.881666][T25489] ? __kasan_kmalloc+0x8f/0xa0 [ 1172.886603][T25489] ? xsk_init_queue+0xb0/0x110 [ 1172.891365][T25489] ? xsk_setsockopt+0x4db/0x6f0 [ 1172.896218][T25489] ? do_sock_setsockopt+0x175/0x1a0 [ 1172.901425][T25489] ? __x64_sys_setsockopt+0x184/0x200 [ 1172.906808][T25489] __vmalloc_node_range+0x126/0x1320 [ 1172.912156][T25489] ? free_vm_area+0x50/0x50 [ 1172.916676][T25489] vmalloc_user+0x74/0x80 [ 1172.921017][T25489] ? xskq_create+0xbf/0x170 [ 1172.926224][T25489] xskq_create+0xbf/0x170 [ 1172.930565][T25489] xsk_init_queue+0xb0/0x110 [ 1172.935167][T25489] xsk_setsockopt+0x4db/0x6f0 [ 1172.939900][T25489] ? xsk_poll+0x670/0x670 [ 1172.944284][T25489] ? __fget_files+0x28/0x4d0 [ 1172.948896][T25489] ? aa_sock_opt_perm+0x74/0x100 [ 1172.953877][T25489] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1172.959439][T25489] ? security_socket_setsockopt+0x7e/0xa0 [ 1172.965166][T25489] ? xsk_poll+0x670/0x670 [ 1172.969505][T25489] do_sock_setsockopt+0x175/0x1a0 [ 1172.974557][T25489] ? __fdget+0x180/0x210 [ 1172.978810][T25489] __x64_sys_setsockopt+0x184/0x200 [ 1172.984023][T25489] do_syscall_64+0x55/0xb0 [ 1172.988532][T25489] ? clear_bhb_loop+0x40/0x90 [ 1172.993208][T25489] ? clear_bhb_loop+0x40/0x90 [ 1172.997892][T25489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1173.003830][T25489] RIP: 0033:0x7f794eb8f6c9 [ 1173.008264][T25489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.028316][T25489] RSP: 002b:00007f794fa98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1173.036738][T25489] RAX: ffffffffffffffda RBX: 00007f794ede5fa0 RCX: 00007f794eb8f6c9 [ 1173.044713][T25489] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1173.052690][T25489] RBP: 00007f794ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1173.060664][T25489] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1173.068638][T25489] R13: 00007f794ede6038 R14: 00007f794ede5fa0 R15: 00007ffeaab71368 [ 1173.076635][T25489] [ 1173.278744][T25489] Mem-Info: [ 1173.282275][T25489] active_anon:16956 inactive_anon:0 isolated_anon:0 [ 1173.282275][T25489] active_file:18526 inactive_file:40301 isolated_file:0 [ 1173.282275][T25489] unevictable:768 dirty:175 writeback:0 [ 1173.282275][T25489] slab_reclaimable:11228 slab_unreclaimable:101497 [ 1173.282275][T25489] mapped:27564 shmem:5165 pagetables:807 [ 1173.282275][T25489] sec_pagetables:0 bounce:0 [ 1173.282275][T25489] kernel_misc_reclaimable:0 [ 1173.282275][T25489] free:1325975 free_pcp:7988 free_cma:0 [ 1173.333936][T25489] Node 0 active_anon:68324kB inactive_anon:0kB active_file:74104kB inactive_file:161000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110956kB dirty:700kB writeback:0kB shmem:19824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11828kB pagetables:3228kB sec_pagetables:0kB all_unreclaimable? no [ 1173.417751][T25489] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1173.463132][T25489] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1173.510518][T25489] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1173.528092][T25489] Node 0 DMA32 free:1389880kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:69680kB inactive_anon:0kB active_file:74104kB inactive_file:159680kB unevictable:1536kB writepending:700kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:14528kB local_pcp:1572kB free_cma:0kB [ 1173.623235][T25489] lowmem_reserve[]: 0 0 1 1 1 [ 1173.632826][T25495] netlink: 'syz.1.7632': attribute type 10 has an invalid length. [ 1173.643179][T25489] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1173.684906][T25489] lowmem_reserve[]: 0 0 0 0 0 [ 1173.693968][T25489] Node 1 Normal free:3898424kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15712kB local_pcp:10400kB free_cma:0kB [ 1173.748184][T25489] lowmem_reserve[]: 0 0 0 0 0 [ 1173.765683][T25489] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1173.797029][T25489] Node 0 DMA32: 685*4kB (UME) 840*8kB (UME) 852*16kB (UME) 443*32kB (UME) 473*64kB (UME) 359*128kB (UME) 171*256kB (UME) 42*512kB (UM) 47*1024kB (UME) 7*2048kB (UM) 278*4096kB (M) = 1379924kB [ 1173.847301][T25489] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1173.881106][T25489] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 212*32kB (UME) 46*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3898424kB [ 1173.927077][T25489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1173.947234][T25489] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1173.977060][T25489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1174.007046][T25489] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1174.027051][T25489] 65392 total pagecache pages [ 1174.031939][T25489] 0 pages in swap cache [ 1174.036284][T25489] Free swap = 124996kB [ 1174.057260][T25489] Total swap = 124996kB [ 1174.067415][T25489] 2097051 pages RAM [ 1174.071420][T25489] 0 pages HighMem/MovableOnly [ 1174.088029][T25489] 416137 pages reserved [ 1174.092465][T25489] 0 pages cma reserved [ 1176.196520][T25503] netlink: 'syz.2.7635': attribute type 10 has an invalid length. [ 1177.600846][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.607761][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.815795][T25530] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7644'. [ 1177.825645][T25527] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7644'. [ 1177.929761][T25533] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7646'. [ 1177.967482][T25533] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1178.209647][T25539] netlink: 'syz.0.7647': attribute type 10 has an invalid length. [ 1178.899640][T25555] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7655'. [ 1178.915275][T25555] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1179.015253][T25561] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7656'. [ 1179.037686][T25557] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7656'. [ 1179.298190][T25569] netlink: 'syz.3.7661': attribute type 10 has an invalid length. [ 1179.621095][T25579] netlink: 'syz.0.7663': attribute type 10 has an invalid length. [ 1181.284665][T25601] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1181.373992][T25600] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7669'. [ 1181.390539][T25600] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1181.415037][T25598] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1181.931503][T25616] netlink: 'syz.3.7677': attribute type 10 has an invalid length. [ 1181.941152][T25616] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.950850][T25616] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.960038][T25616] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.501174][T25624] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7681'. [ 1182.522119][T25624] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1183.355498][T25634] netlink: 'syz.3.7683': attribute type 10 has an invalid length. [ 1183.420264][T25632] IPv6: Can't replace route, no match found [ 1183.438220][T25635] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1183.716674][T25647] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7685'. [ 1183.741158][T25643] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7685'. [ 1184.713764][T25656] IPv6: Can't replace route, no match found [ 1184.731581][T25656] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1185.034806][T25660] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1185.048462][T25660] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1185.232437][T25666] netlink: 'syz.0.7694': attribute type 10 has an invalid length. [ 1185.702955][T25672] netlink: 'syz.0.7697': attribute type 3 has an invalid length. [ 1185.712785][T25672] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.7697'. [ 1186.219399][T25679] netlink: 'syz.2.7701': attribute type 1 has an invalid length. [ 1186.237117][T25679] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.7701'. [ 1186.242141][T25680] netlink: 'syz.0.7707': attribute type 10 has an invalid length. [ 1186.543922][T25688] netlink: 'syz.0.7713': attribute type 10 has an invalid length. [ 1186.588843][T25692] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7705'. [ 1186.602401][T25692] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1186.630124][T25691] IPv6: Can't replace route, no match found [ 1186.648515][T25691] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1186.798920][T25698] netlink: 'syz.1.7709': attribute type 10 has an invalid length. [ 1186.812881][T25698] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.825540][T25698] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.837915][T25698] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.889425][T25702] netlink: 'syz.3.7710': attribute type 10 has an invalid length. [ 1187.705507][T25721] netlink: 'syz.2.7717': attribute type 10 has an invalid length. [ 1187.821565][T25729] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7719'. [ 1187.849803][T25729] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1188.092030][T25737] netlink: 'syz.2.7723': attribute type 10 has an invalid length. [ 1188.108619][T25737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7723'. [ 1188.321926][T25744] netlink: 'syz.0.7727': attribute type 10 has an invalid length. [ 1188.683451][T25758] netlink: 'syz.0.7738': attribute type 10 has an invalid length. [ 1188.762611][T25760] netlink: 'syz.2.7730': attribute type 10 has an invalid length. [ 1189.404527][T25768] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7733'. [ 1189.414598][T25768] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1189.793719][T25788] netlink: 'syz.1.7740': attribute type 10 has an invalid length. [ 1189.802322][T25787] netlink: 'syz.2.7741': attribute type 10 has an invalid length. [ 1190.816598][T25808] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7748'. [ 1190.829260][T25808] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1191.282149][T25810] netlink: 'syz.1.7749': attribute type 3 has an invalid length. [ 1191.305044][T25810] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.7749'. [ 1191.392652][T25813] netlink: 'syz.2.7750': attribute type 10 has an invalid length. [ 1191.499561][T25818] netlink: 'syz.1.7760': attribute type 10 has an invalid length. [ 1192.609590][T25841] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.7762'. [ 1192.820816][T25851] : renamed from vlan0 [ 1192.831184][T25849] validate_nla: 3 callbacks suppressed [ 1192.831200][T25849] netlink: 'syz.2.7766': attribute type 10 has an invalid length. [ 1192.961053][T25855] netlink: 'syz.0.7769': attribute type 10 has an invalid length. [ 1193.159118][T25863] netlink: 'syz.3.7781': attribute type 10 has an invalid length. [ 1193.454316][T25874] netlink: 'syz.1.7775': attribute type 39 has an invalid length. [ 1193.822372][T25880] netlink: 'syz.3.7776': attribute type 3 has an invalid length. [ 1193.849543][T25880] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.7776'. [ 1194.309467][T25893] netlink: 'syz.2.7790': attribute type 3 has an invalid length. [ 1194.319201][T25893] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.7790'. [ 1194.467991][T25898] netlink: 'syz.3.7785': attribute type 10 has an invalid length. [ 1194.686615][T25904] netlink: 'syz.3.7788': attribute type 10 has an invalid length. [ 1195.178869][T25927] netlink: 'syz.1.7797': attribute type 10 has an invalid length. [ 1195.198635][T25925] netlink: 'syz.2.7796': attribute type 3 has an invalid length. [ 1195.206611][T25925] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1195.405621][T25935] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.7810'. [ 1197.950716][T26013] validate_nla: 7 callbacks suppressed [ 1197.950734][T26013] netlink: 'syz.1.7833': attribute type 10 has an invalid length. [ 1198.436415][T26025] netlink: 'syz.2.7839': attribute type 10 has an invalid length. [ 1198.905934][T26039] netlink: 'syz.0.7844': attribute type 10 has an invalid length. [ 1199.599418][T26053] netlink: 'syz.1.7849': attribute type 10 has an invalid length. [ 1200.010377][T26065] netlink: 'syz.1.7860': attribute type 10 has an invalid length. [ 1200.341419][T26067] netlink: 'syz.2.7851': attribute type 10 has an invalid length. [ 1200.540428][T26072] netlink: 'syz.2.7854': attribute type 10 has an invalid length. [ 1200.759263][T26078] netlink: 'syz.0.7866': attribute type 10 has an invalid length. [ 1201.019202][T26089] netlink: 'syz.1.7863': attribute type 10 has an invalid length. [ 1201.410215][T26102] warn_alloc: 2 callbacks suppressed [ 1201.410254][T26102] syz.0.7868: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1201.418560][T26101] netlink: 'syz.1.7869': attribute type 10 has an invalid length. [ 1201.434484][T26102] CPU: 0 PID: 26102 Comm: syz.0.7868 Not tainted syzkaller #0 [ 1201.446848][T26102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1201.456922][T26102] Call Trace: [ 1201.460218][T26102] [ 1201.463163][T26102] dump_stack_lvl+0x16c/0x230 [ 1201.467867][T26102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1201.474041][T26102] ? show_regs_print_info+0x20/0x20 [ 1201.479250][T26102] ? load_image+0x3b0/0x3b0 [ 1201.483764][T26102] warn_alloc+0x210/0x300 [ 1201.488103][T26102] ? zone_watermark_ok_safe+0x230/0x230 [ 1201.493658][T26102] ? kasan_set_track+0x5f/0x70 [ 1201.498416][T26102] ? kasan_set_track+0x4e/0x70 [ 1201.503174][T26102] ? __kasan_kmalloc+0x8f/0xa0 [ 1201.507932][T26102] ? xsk_init_queue+0xb0/0x110 [ 1201.512690][T26102] ? xsk_setsockopt+0x4db/0x6f0 [ 1201.517534][T26102] ? do_sock_setsockopt+0x175/0x1a0 [ 1201.522733][T26102] ? __x64_sys_setsockopt+0x184/0x200 [ 1201.528104][T26102] __vmalloc_node_range+0x126/0x1320 [ 1201.533410][T26102] ? free_vm_area+0x50/0x50 [ 1201.537919][T26102] vmalloc_user+0x74/0x80 [ 1201.542248][T26102] ? xskq_create+0xbf/0x170 [ 1201.546747][T26102] xskq_create+0xbf/0x170 [ 1201.551074][T26102] xsk_init_queue+0xb0/0x110 [ 1201.555661][T26102] xsk_setsockopt+0x4db/0x6f0 [ 1201.560433][T26102] ? xsk_poll+0x670/0x670 [ 1201.564760][T26102] ? __fget_files+0x28/0x4d0 [ 1201.569756][T26102] ? aa_sock_opt_perm+0x74/0x100 [ 1201.574798][T26102] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1201.580354][T26102] ? security_socket_setsockopt+0x7e/0xa0 [ 1201.586075][T26102] ? xsk_poll+0x670/0x670 [ 1201.590405][T26102] do_sock_setsockopt+0x175/0x1a0 [ 1201.595437][T26102] ? __fdget+0x180/0x210 [ 1201.599683][T26102] __x64_sys_setsockopt+0x184/0x200 [ 1201.604887][T26102] do_syscall_64+0x55/0xb0 [ 1201.609319][T26102] ? clear_bhb_loop+0x40/0x90 [ 1201.613991][T26102] ? clear_bhb_loop+0x40/0x90 [ 1201.618668][T26102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1201.624553][T26102] RIP: 0033:0x7f5384b8f6c9 [ 1201.629000][T26102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.648609][T26102] RSP: 002b:00007f5385941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1201.657129][T26102] RAX: ffffffffffffffda RBX: 00007f5384de5fa0 RCX: 00007f5384b8f6c9 [ 1201.665109][T26102] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1201.673077][T26102] RBP: 00007f5384c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1201.681041][T26102] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1201.689006][T26102] R13: 00007f5384de6038 R14: 00007f5384de5fa0 R15: 00007fffb1a552e8 [ 1201.696988][T26102] [ 1201.714150][T26102] Mem-Info: [ 1201.718472][T26102] active_anon:13013 inactive_anon:0 isolated_anon:0 [ 1201.718472][T26102] active_file:18526 inactive_file:40311 isolated_file:0 [ 1201.718472][T26102] unevictable:768 dirty:158 writeback:0 [ 1201.718472][T26102] slab_reclaimable:11400 slab_unreclaimable:99574 [ 1201.718472][T26102] mapped:24064 shmem:1361 pagetables:737 [ 1201.718472][T26102] sec_pagetables:0 bounce:0 [ 1201.718472][T26102] kernel_misc_reclaimable:0 [ 1201.718472][T26102] free:1330909 free_pcp:9322 free_cma:0 [ 1201.766437][T26102] Node 0 active_anon:52052kB inactive_anon:0kB active_file:74104kB inactive_file:161040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96256kB dirty:632kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:2948kB sec_pagetables:0kB all_unreclaimable? no [ 1201.807206][T26102] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1201.844001][T26102] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.871827][T26102] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1201.878172][T26102] Node 0 DMA32 free:1409840kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:52008kB inactive_anon:0kB active_file:74104kB inactive_file:159720kB unevictable:1536kB writepending:632kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:21332kB local_pcp:1636kB free_cma:0kB [ 1201.918064][T26102] lowmem_reserve[]: 0 0 1 1 1 [ 1201.923609][T26102] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1201.974710][T26102] lowmem_reserve[]: 0 0 0 0 0 [ 1201.987297][T26102] Node 1 Normal free:3898424kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15712kB local_pcp:5312kB free_cma:0kB [ 1202.028005][T26102] lowmem_reserve[]: 0 0 0 0 0 [ 1202.033696][T26102] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1202.048304][T26102] Node 0 DMA32: 925*4kB (UME) 604*8kB (UME) 634*16kB (UME) 666*32kB (UME) 662*64kB (UME) 305*128kB (UME) 172*256kB (UME) 78*512kB (UM) 56*1024kB (UME) 6*2048kB (UM) 277*4096kB (M) = 1409588kB [ 1202.070412][T26102] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1202.095677][T26102] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 212*32kB (UME) 46*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3898424kB [ 1202.116475][T26102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.126785][T26102] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1202.137523][T26102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.147725][T26102] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1202.157286][T26102] 60198 total pagecache pages [ 1202.162376][T26102] 0 pages in swap cache [ 1202.167103][T26102] Free swap = 124996kB [ 1202.171517][T26102] Total swap = 124996kB [ 1202.176042][T26102] 2097051 pages RAM [ 1202.180121][T26102] 0 pages HighMem/MovableOnly [ 1202.185060][T26102] 416137 pages reserved [ 1202.189713][T26102] 0 pages cma reserved [ 1203.289516][T26133] validate_nla: 3 callbacks suppressed [ 1203.289562][T26133] netlink: 'syz.1.7878': attribute type 21 has an invalid length. [ 1203.311181][T26133] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7878'. [ 1203.327474][T26133] netlink: 'syz.1.7878': attribute type 4 has an invalid length. [ 1203.364109][T26137] netlink: 'syz.3.7879': attribute type 10 has an invalid length. [ 1203.652566][T26142] netlink: 'syz.3.7882': attribute type 10 has an invalid length. [ 1203.752909][T26148] netlink: 'syz.2.7884': attribute type 39 has an invalid length. [ 1204.414137][T26159] netlink: 'syz.3.7888': attribute type 10 has an invalid length. [ 1204.666063][T26163] netlink: 'syz.2.7890': attribute type 10 has an invalid length. [ 1204.727104][T26169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7899'. [ 1205.161694][T26175] netlink: 'syz.2.7892': attribute type 21 has an invalid length. [ 1205.207163][T26175] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7892'. [ 1205.217674][T26175] netlink: 'syz.2.7892': attribute type 4 has an invalid length. [ 1205.912042][T26189] netlink: 'syz.2.7895': attribute type 10 has an invalid length. [ 1207.812007][T26218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7907'. [ 1207.994112][T26221] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1208.003602][T26221] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1208.016749][T26221] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7908'. [ 1208.160107][T26223] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.7909'. [ 1208.388824][T26230] validate_nla: 4 callbacks suppressed [ 1208.388840][T26230] netlink: 'syz.1.7911': attribute type 10 has an invalid length. [ 1208.403538][T26231] netlink: 'syz.0.7912': attribute type 10 has an invalid length. [ 1208.438061][T26226] netlink: 'syz.3.7910': attribute type 10 has an invalid length. [ 1208.446336][T26226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7910'. [ 1208.460246][T26226] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1208.747482][T26239] netlink: 'syz.1.7916': attribute type 10 has an invalid length. [ 1208.927392][T26246] netlink: 'syz.0.7919': attribute type 39 has an invalid length. [ 1209.148880][T26250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7920'. [ 1210.194675][T26256] netlink: 'syz.2.7922': attribute type 10 has an invalid length. [ 1210.232092][T26258] netlink: 'syz.0.7923': attribute type 10 has an invalid length. [ 1210.778189][T26273] netlink: 'syz.0.7927': attribute type 10 has an invalid length. [ 1210.973726][T26275] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.7929'. [ 1211.193898][T26278] netlink: 'syz.0.7937': attribute type 10 has an invalid length. [ 1211.205063][T26278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7937'. [ 1211.220665][T26278] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1211.675916][T26289] netlink: 'syz.1.7933': attribute type 10 has an invalid length. [ 1211.792325][T26292] warn_alloc: 5 callbacks suppressed [ 1211.792372][T26292] syz.3.7935: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1211.836231][T26292] CPU: 0 PID: 26292 Comm: syz.3.7935 Not tainted syzkaller #0 [ 1211.843746][T26292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1211.853831][T26292] Call Trace: [ 1211.857126][T26292] [ 1211.860081][T26292] dump_stack_lvl+0x16c/0x230 [ 1211.864793][T26292] ? show_regs_print_info+0x20/0x20 [ 1211.870012][T26292] ? load_image+0x3b0/0x3b0 [ 1211.874537][T26292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1211.880979][T26292] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1211.887517][T26292] warn_alloc+0x210/0x300 [ 1211.891871][T26292] ? stack_trace_save+0x9c/0xe0 [ 1211.896730][T26292] ? zone_watermark_ok_safe+0x230/0x230 [ 1211.902288][T26292] ? kasan_set_track+0x5f/0x70 [ 1211.907138][T26292] ? kasan_set_track+0x4e/0x70 [ 1211.911896][T26292] ? __kasan_kmalloc+0x8f/0xa0 [ 1211.916658][T26292] ? xsk_init_queue+0xb0/0x110 [ 1211.921441][T26292] ? xsk_setsockopt+0x4db/0x6f0 [ 1211.926298][T26292] ? do_sock_setsockopt+0x175/0x1a0 [ 1211.931525][T26292] ? __x64_sys_setsockopt+0x184/0x200 [ 1211.936912][T26292] __vmalloc_node_range+0x126/0x1320 [ 1211.942224][T26292] ? free_vm_area+0x50/0x50 [ 1211.946735][T26292] vmalloc_user+0x74/0x80 [ 1211.951065][T26292] ? xskq_create+0xbf/0x170 [ 1211.955563][T26292] xskq_create+0xbf/0x170 [ 1211.959891][T26292] xsk_init_queue+0xb0/0x110 [ 1211.964479][T26292] xsk_setsockopt+0x4db/0x6f0 [ 1211.969154][T26292] ? xsk_poll+0x670/0x670 [ 1211.973479][T26292] ? __fget_files+0x28/0x4d0 [ 1211.978068][T26292] ? aa_sock_opt_perm+0x74/0x100 [ 1211.983009][T26292] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1211.988645][T26292] ? security_socket_setsockopt+0x7e/0xa0 [ 1211.994357][T26292] ? xsk_poll+0x670/0x670 [ 1211.998708][T26292] do_sock_setsockopt+0x175/0x1a0 [ 1212.003734][T26292] ? __fdget+0x180/0x210 [ 1212.007998][T26292] __x64_sys_setsockopt+0x184/0x200 [ 1212.013202][T26292] do_syscall_64+0x55/0xb0 [ 1212.017624][T26292] ? clear_bhb_loop+0x40/0x90 [ 1212.022304][T26292] ? clear_bhb_loop+0x40/0x90 [ 1212.026978][T26292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1212.032866][T26292] RIP: 0033:0x7f8ff938f6c9 [ 1212.037275][T26292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.056885][T26292] RSP: 002b:00007f8ffa14b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1212.065298][T26292] RAX: ffffffffffffffda RBX: 00007f8ff95e5fa0 RCX: 00007f8ff938f6c9 [ 1212.073275][T26292] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1212.081266][T26292] RBP: 00007f8ff9411f91 R08: 0000000000000004 R09: 0000000000000000 [ 1212.089257][T26292] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1212.097313][T26292] R13: 00007f8ff95e6038 R14: 00007f8ff95e5fa0 R15: 00007fff13e82ad8 [ 1212.105294][T26292] [ 1212.133522][T26292] Mem-Info: [ 1212.137034][T26292] active_anon:17266 inactive_anon:0 isolated_anon:0 [ 1212.137034][T26292] active_file:18526 inactive_file:40315 isolated_file:0 [ 1212.137034][T26292] unevictable:768 dirty:311 writeback:0 [ 1212.137034][T26292] slab_reclaimable:11399 slab_unreclaimable:97667 [ 1212.137034][T26292] mapped:27987 shmem:5536 pagetables:764 [ 1212.137034][T26292] sec_pagetables:0 bounce:0 [ 1212.137034][T26292] kernel_misc_reclaimable:0 [ 1212.137034][T26292] free:1325296 free_pcp:12091 free_cma:0 [ 1212.189435][T26292] Node 0 active_anon:71784kB inactive_anon:0kB active_file:74104kB inactive_file:161060kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114624kB dirty:1260kB writeback:0kB shmem:23412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11884kB pagetables:3088kB sec_pagetables:0kB all_unreclaimable? no [ 1212.259155][T26292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1212.300832][T26292] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1212.357869][T26292] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1212.364247][T26292] Node 0 DMA32 free:1383876kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:77340kB inactive_anon:0kB active_file:74104kB inactive_file:159740kB unevictable:1536kB writepending:1260kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:27588kB local_pcp:20480kB free_cma:0kB [ 1212.400093][T26292] lowmem_reserve[]: 0 0 1 1 1 [ 1212.405457][T26292] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1212.433641][T26292] lowmem_reserve[]: 0 0 0 0 0 [ 1212.439919][T26292] Node 1 Normal free:3898936kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15200kB local_pcp:10144kB free_cma:0kB [ 1212.481744][T26292] lowmem_reserve[]: 0 0 0 0 0 [ 1212.491071][T26292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1212.506024][T26292] Node 0 DMA32: 1003*4kB (UM) 401*8kB (UE) 425*16kB (UME) 319*32kB (UME) 566*64kB (UME) 238*128kB (UME) 171*256kB (UME) 75*512kB (UM) 58*1024kB (UME) 5*2048kB (M) 278*4096kB (UM) = 1381412kB [ 1212.529899][T26292] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB [ 1212.530665][T26292] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1212.547868][T26292] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 220*32kB (UME) 50*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3898936kB [ 1212.568664][T26292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1212.579273][T26292] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1212.589530][T26292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1212.599948][T26292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1212.611177][T26292] 67779 total pagecache pages [ 1212.616678][T26292] 0 pages in swap cache [ 1212.622344][T26292] Free swap = 124996kB [ 1212.626638][T26292] Total swap = 124996kB [ 1212.631677][T26292] 2097051 pages RAM [ 1212.635880][T26292] 0 pages HighMem/MovableOnly [ 1212.643048][T26292] 416137 pages reserved [ 1212.647621][T26292] 0 pages cma reserved [ 1213.568881][T26315] netlink: 'syz.2.7942': attribute type 10 has an invalid length. [ 1213.604228][T26315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7942'. [ 1213.812995][T26325] netlink: 'syz.3.7940': attribute type 10 has an invalid length. [ 1217.074908][T26332] netlink: 'syz.3.7945': attribute type 10 has an invalid length. [ 1217.199455][T26337] syzkaller0: left promiscuous mode [ 1217.215955][T26337] syzkaller0: left allmulticast mode [ 1217.659884][T26349] netlink: 'syz.2.7955': attribute type 10 has an invalid length. [ 1218.115632][T26353] tap0: tun_chr_ioctl cmd 1074025677 [ 1218.147312][T26353] tap0: linktype set to 774 [ 1218.234777][T26353] tap0: tun_chr_ioctl cmd 1074025680 [ 1218.995876][T26363] netlink: 'syz.1.7958': attribute type 10 has an invalid length. [ 1219.171822][T26367] netlink: 'syz.1.7960': attribute type 10 has an invalid length. [ 1221.318764][T26389] netlink: 'syz.3.7969': attribute type 10 has an invalid length. [ 1221.473673][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7970'. [ 1222.324289][T26405] netlink: 'syz.1.7974': attribute type 10 has an invalid length. [ 1222.824484][T26411] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7976'. [ 1222.859643][T26414] netlink: 'syz.0.7976': attribute type 10 has an invalid length. [ 1222.901696][T26410] netlink: 'syz.3.7975': attribute type 10 has an invalid length. [ 1222.947231][T26410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7975'. [ 1222.998203][T26410] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1223.585455][T26423] syzkaller0: left promiscuous mode [ 1223.601964][T26423] syzkaller0: left allmulticast mode [ 1223.767346][T26426] netlink: 'syz.1.7981': attribute type 10 has an invalid length. [ 1224.031215][T26431] warn_alloc: 5 callbacks suppressed [ 1224.031252][T26431] syz.1.7983: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1224.071335][T26431] CPU: 0 PID: 26431 Comm: syz.1.7983 Not tainted syzkaller #0 [ 1224.078846][T26431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1224.088931][T26431] Call Trace: [ 1224.092233][T26431] [ 1224.095182][T26431] dump_stack_lvl+0x16c/0x230 [ 1224.099896][T26431] ? show_regs_print_info+0x20/0x20 [ 1224.105127][T26431] ? load_image+0x3b0/0x3b0 [ 1224.109664][T26431] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1224.116116][T26431] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1224.122649][T26431] warn_alloc+0x210/0x300 [ 1224.127033][T26431] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1224.133230][T26431] ? zone_watermark_ok_safe+0x230/0x230 [ 1224.138826][T26431] ? kasan_set_track+0x5f/0x70 [ 1224.143616][T26431] ? kasan_set_track+0x4e/0x70 [ 1224.148408][T26431] ? __kasan_kmalloc+0x8f/0xa0 [ 1224.153198][T26431] ? xsk_init_queue+0xb0/0x110 [ 1224.157983][T26431] ? xsk_setsockopt+0x4db/0x6f0 [ 1224.162852][T26431] ? do_sock_setsockopt+0x175/0x1a0 [ 1224.168088][T26431] ? __x64_sys_setsockopt+0x184/0x200 [ 1224.173502][T26431] __vmalloc_node_range+0x126/0x1320 [ 1224.178867][T26431] ? free_vm_area+0x50/0x50 [ 1224.183414][T26431] vmalloc_user+0x74/0x80 [ 1224.187780][T26431] ? xskq_create+0xbf/0x170 [ 1224.192310][T26431] xskq_create+0xbf/0x170 [ 1224.196672][T26431] xsk_init_queue+0xb0/0x110 [ 1224.201302][T26431] xsk_setsockopt+0x4db/0x6f0 [ 1224.206006][T26431] ? xsk_poll+0x670/0x670 [ 1224.210365][T26431] ? aa_sock_opt_perm+0x74/0x100 [ 1224.215335][T26431] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1224.220919][T26431] ? security_socket_setsockopt+0x7e/0xa0 [ 1224.226665][T26431] ? xsk_poll+0x670/0x670 [ 1224.231022][T26431] do_sock_setsockopt+0x175/0x1a0 [ 1224.236079][T26431] ? __fdget+0x180/0x210 [ 1224.240352][T26431] __x64_sys_setsockopt+0x184/0x200 [ 1224.245689][T26431] do_syscall_64+0x55/0xb0 [ 1224.250139][T26431] ? clear_bhb_loop+0x40/0x90 [ 1224.254845][T26431] ? clear_bhb_loop+0x40/0x90 [ 1224.259540][T26431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1224.265444][T26431] RIP: 0033:0x7fb9ced8f6c9 [ 1224.269868][T26431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.289489][T26431] RSP: 002b:00007fb9cfb73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1224.298003][T26431] RAX: ffffffffffffffda RBX: 00007fb9cefe5fa0 RCX: 00007fb9ced8f6c9 [ 1224.306061][T26431] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1224.314031][T26431] RBP: 00007fb9cee11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1224.322004][T26431] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1224.329979][T26431] R13: 00007fb9cefe6038 R14: 00007fb9cefe5fa0 R15: 00007ffcd03b3998 [ 1224.337967][T26431] [ 1224.397125][T26431] Mem-Info: [ 1224.407521][T26431] active_anon:21740 inactive_anon:0 isolated_anon:0 [ 1224.407521][T26431] active_file:18526 inactive_file:40321 isolated_file:0 [ 1224.407521][T26431] unevictable:768 dirty:258 writeback:0 [ 1224.407521][T26431] slab_reclaimable:11269 slab_unreclaimable:98720 [ 1224.407521][T26431] mapped:31014 shmem:9971 pagetables:763 [ 1224.407521][T26431] sec_pagetables:0 bounce:0 [ 1224.407521][T26431] kernel_misc_reclaimable:0 [ 1224.407521][T26431] free:1320926 free_pcp:12654 free_cma:0 [ 1224.495887][T26431] Node 0 active_anon:86260kB inactive_anon:0kB active_file:74104kB inactive_file:161080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125156kB dirty:1032kB writeback:0kB shmem:37748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11964kB pagetables:3052kB sec_pagetables:0kB all_unreclaimable? no [ 1224.547970][T26431] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1224.608462][T26431] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1224.647317][T26431] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1224.664800][T26431] Node 0 DMA32 free:1369908kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:81916kB inactive_anon:0kB active_file:74104kB inactive_file:159760kB unevictable:1536kB writepending:1032kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:40040kB local_pcp:18728kB free_cma:0kB [ 1224.727715][T26431] lowmem_reserve[]: 0 0 1 1 1 [ 1224.733626][T26431] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1224.781759][T26431] lowmem_reserve[]: 0 0 0 0 0 [ 1224.788166][T26431] Node 1 Normal free:3898936kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15200kB local_pcp:10144kB free_cma:0kB [ 1224.821170][T26431] lowmem_reserve[]: 0 0 0 0 0 [ 1224.826546][T26431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1224.857441][T26431] Node 0 DMA32: 712*4kB (UME) 978*8kB (UME) 736*16kB (UME) 576*32kB (UME) 244*64kB (UME) 147*128kB (UME) 173*256kB (UME) 76*512kB (UM) 58*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1370928kB [ 1224.917193][T26431] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1224.947143][T26431] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 220*32kB (UME) 50*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3898936kB [ 1224.976944][T26431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1224.986701][T26431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1225.008020][T26431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1225.027168][T26431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1225.061702][T26447] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7987'. [ 1225.071180][T26431] 69718 total pagecache pages [ 1225.076098][T26431] 0 pages in swap cache [ 1225.090378][T26431] Free swap = 124996kB [ 1225.107176][T26431] Total swap = 124996kB [ 1225.111585][T26431] 2097051 pages RAM [ 1225.132722][T26431] 0 pages HighMem/MovableOnly [ 1225.146361][T26431] 416137 pages reserved [ 1225.153721][T26431] 0 pages cma reserved [ 1225.395985][T26453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7989'. [ 1225.942997][T26471] tap0: tun_chr_ioctl cmd 1074025677 [ 1225.989724][T26471] tap0: linktype set to 774 [ 1226.046176][T26471] tap0: tun_chr_ioctl cmd 1074025680 [ 1226.620431][T26480] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1226.711392][T26478] netlink: 'syz.2.7992': attribute type 10 has an invalid length. [ 1226.900546][T26484] netlink: 'syz.3.7995': attribute type 10 has an invalid length. [ 1228.840783][T26514] netlink: 'syz.1.8006': attribute type 10 has an invalid length. [ 1228.915552][T26514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8006'. [ 1229.001312][T26514] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1229.115210][T26515] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8005'. [ 1229.178418][T26515] netlink: 'syz.2.8005': attribute type 10 has an invalid length. [ 1229.239609][T26515] mac80211_hwsim hwsim6 O3c: entered promiscuous mode [ 1229.269779][T26515] mac80211_hwsim hwsim6 O3c: entered allmulticast mode [ 1229.302454][T26515] team0: Port device O3c added [ 1230.115075][T26519] netlink: 'syz.0.8007': attribute type 10 has an invalid length. [ 1231.434989][T26534] netlink: 'syz.2.8011': attribute type 10 has an invalid length. [ 1231.515176][T26536] netlink: 'syz.1.8014': attribute type 10 has an invalid length. [ 1232.043518][T26544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8016'. [ 1232.782599][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8025'. [ 1232.804427][T26552] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1232.941318][T26554] netlink: 'syz.1.8018': attribute type 10 has an invalid length. [ 1233.738037][T26574] netlink: 'syz.3.8024': attribute type 10 has an invalid length. [ 1233.960528][T26577] netlink: 'syz.1.8023': attribute type 10 has an invalid length. [ 1233.971226][T26577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8023'. [ 1234.001634][T26577] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1234.948733][T26590] netlink: 'syz.2.8028': attribute type 10 has an invalid length. [ 1235.126091][T26594] warn_alloc: 3 callbacks suppressed [ 1235.126130][T26594] syz.2.8030: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1235.206323][T26594] CPU: 0 PID: 26594 Comm: syz.2.8030 Not tainted syzkaller #0 [ 1235.213851][T26594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1235.223938][T26594] Call Trace: [ 1235.227339][T26594] [ 1235.230297][T26594] dump_stack_lvl+0x16c/0x230 [ 1235.235207][T26594] ? show_regs_print_info+0x20/0x20 [ 1235.240537][T26594] ? load_image+0x3b0/0x3b0 [ 1235.245092][T26594] ? __rcu_read_unlock+0x7c/0xd0 [ 1235.250067][T26594] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1235.256787][T26594] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1235.263340][T26594] warn_alloc+0x210/0x300 [ 1235.267721][T26594] ? stack_trace_save+0x9c/0xe0 [ 1235.272608][T26594] ? zone_watermark_ok_safe+0x230/0x230 [ 1235.278221][T26594] ? kasan_set_track+0x5f/0x70 [ 1235.283034][T26594] ? kasan_set_track+0x4e/0x70 [ 1235.287825][T26594] ? __kasan_kmalloc+0x8f/0xa0 [ 1235.292622][T26594] ? xsk_init_queue+0xb0/0x110 [ 1235.297410][T26594] ? xsk_setsockopt+0x4db/0x6f0 [ 1235.302291][T26594] ? do_sock_setsockopt+0x175/0x1a0 [ 1235.307524][T26594] ? __x64_sys_setsockopt+0x184/0x200 [ 1235.312932][T26594] __vmalloc_node_range+0x126/0x1320 [ 1235.318296][T26594] ? free_vm_area+0x50/0x50 [ 1235.322850][T26594] vmalloc_user+0x74/0x80 [ 1235.327215][T26594] ? xskq_create+0xbf/0x170 [ 1235.331753][T26594] xskq_create+0xbf/0x170 [ 1235.336110][T26594] xsk_init_queue+0xb0/0x110 [ 1235.340729][T26594] xsk_setsockopt+0x4db/0x6f0 [ 1235.345441][T26594] ? xsk_poll+0x670/0x670 [ 1235.349794][T26594] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1235.355988][T26594] ? xsk_poll+0x670/0x670 [ 1235.360349][T26594] ? do_sock_setsockopt+0x15e/0x1a0 [ 1235.365582][T26594] ? xsk_poll+0x670/0x670 [ 1235.369937][T26594] do_sock_setsockopt+0x175/0x1a0 [ 1235.374990][T26594] ? __fdget+0x180/0x210 [ 1235.379302][T26594] __x64_sys_setsockopt+0x184/0x200 [ 1235.384545][T26594] do_syscall_64+0x55/0xb0 [ 1235.388992][T26594] ? clear_bhb_loop+0x40/0x90 [ 1235.393691][T26594] ? clear_bhb_loop+0x40/0x90 [ 1235.398395][T26594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1235.404319][T26594] RIP: 0033:0x7f794eb8f6c9 [ 1235.408758][T26594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.428398][T26594] RSP: 002b:00007f794fa98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1235.436844][T26594] RAX: ffffffffffffffda RBX: 00007f794ede5fa0 RCX: 00007f794eb8f6c9 [ 1235.444850][T26594] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1235.452851][T26594] RBP: 00007f794ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1235.460848][T26594] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1235.468847][T26594] R13: 00007f794ede6038 R14: 00007f794ede5fa0 R15: 00007ffeaab71368 [ 1235.476869][T26594] [ 1235.489965][T26594] Mem-Info: [ 1235.503149][T26594] active_anon:25310 inactive_anon:0 isolated_anon:0 [ 1235.503149][T26594] active_file:18526 inactive_file:40325 isolated_file:0 [ 1235.503149][T26594] unevictable:768 dirty:211 writeback:0 [ 1235.503149][T26594] slab_reclaimable:11132 slab_unreclaimable:99523 [ 1235.503149][T26594] mapped:34398 shmem:13516 pagetables:803 [ 1235.503149][T26594] sec_pagetables:0 bounce:0 [ 1235.503149][T26594] kernel_misc_reclaimable:0 [ 1235.503149][T26594] free:1323646 free_pcp:5404 free_cma:0 [ 1235.596386][T26594] Node 0 active_anon:103140kB inactive_anon:0kB active_file:74104kB inactive_file:161096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137592kB dirty:840kB writeback:0kB shmem:54628kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11736kB pagetables:3112kB sec_pagetables:0kB all_unreclaimable? no [ 1235.632915][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1235.642873][T26594] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1235.732069][T26594] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1235.760093][T26594] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1235.766488][T26594] Node 0 DMA32 free:1368960kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:111796kB inactive_anon:0kB active_file:74104kB inactive_file:159776kB unevictable:1536kB writepending:840kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:7036kB local_pcp:1264kB free_cma:0kB [ 1235.806532][T26594] lowmem_reserve[]: 0 0 1 1 1 [ 1235.812113][T26594] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1235.887024][T26594] lowmem_reserve[]: 0 0 0 0 0 [ 1235.892448][T26594] Node 1 Normal free:3899192kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14944kB local_pcp:10144kB free_cma:0kB [ 1235.926317][T26594] lowmem_reserve[]: 0 0 0 0 0 [ 1235.932726][T26594] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1235.951202][T26594] Node 0 DMA32: 1550*4kB (UME) 933*8kB (UME) 581*16kB (UE) 326*32kB (UME) 110*64kB (UME) 254*128kB (UME) 177*256kB (UME) 75*512kB (UM) 51*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1361904kB [ 1235.972156][T26594] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1235.985910][T26594] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 222*32kB (UME) 53*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899192kB [ 1236.007476][T26594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1236.017976][T26594] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1236.027706][T26594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1236.037592][T26594] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1236.047216][T26594] 77092 total pagecache pages [ 1236.051909][T26594] 0 pages in swap cache [ 1236.056068][T26594] Free swap = 124996kB [ 1236.061208][T26594] Total swap = 124996kB [ 1236.065391][T26594] 2097051 pages RAM [ 1236.070664][T26594] 0 pages HighMem/MovableOnly [ 1236.075528][T26594] 416137 pages reserved [ 1236.080088][T26594] 0 pages cma reserved [ 1236.249779][T26600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8032'. [ 1236.554873][T26606] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8034'. [ 1236.731611][T26602] netlink: 'syz.3.8033': attribute type 10 has an invalid length. [ 1237.181567][T26613] netlink: 'syz.2.8035': attribute type 10 has an invalid length. [ 1237.491896][T26615] netlink: 'syz.1.8036': attribute type 10 has an invalid length. [ 1237.624946][T26623] netlink: 'syz.0.8039': attribute type 10 has an invalid length. [ 1237.711378][T26620] netlink: 'syz.2.8038': attribute type 10 has an invalid length. [ 1237.720202][T26620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8038'. [ 1238.062084][T26631] syzkaller0: left promiscuous mode [ 1238.075375][T26631] syzkaller0: left allmulticast mode [ 1238.203353][T26628] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1239.032058][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.038815][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.172350][T26647] netlink: 'syz.1.8046': attribute type 10 has an invalid length. [ 1240.191260][T26649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8045'. [ 1240.390330][T26657] netlink: 'syz.0.8051': attribute type 10 has an invalid length. [ 1240.699993][T26657] team_slave_1: left promiscuous mode [ 1240.705635][T26657] team_slave_1: left allmulticast mode [ 1240.727091][T26657] team0 (unregistering): Port device team_slave_1 removed [ 1240.738105][T26657] vlan0: left promiscuous mode [ 1240.746464][T26657] team0 (unregistering): Port device vlan0 removed [ 1240.754539][T26657] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1240.762489][T26657] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1240.783212][T26657] team0 (unregistering): Port device netdevsim0 removed [ 1240.852127][T26665] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 1240.899550][T26659] netlink: 'syz.1.8052': attribute type 10 has an invalid length. [ 1240.908601][T26659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8052'. [ 1240.944219][T26659] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1242.555836][T26702] netlink: 'syz.0.8066': attribute type 10 has an invalid length. [ 1242.617391][T26702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1243.151375][T26704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.277838][T26713] netlink: 'syz.2.8071': attribute type 10 has an invalid length. [ 1243.515943][T26719] syzkaller0: left promiscuous mode [ 1243.523676][T26719] syzkaller0: left allmulticast mode [ 1244.957522][T26736] netlink: 'syz.2.8078': attribute type 10 has an invalid length. [ 1244.997057][T26736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8078'. [ 1245.650804][T26740] delete_channel: no stack [ 1245.738573][T26744] warn_alloc: 10 callbacks suppressed [ 1245.738612][T26744] syz.2.8080: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1245.776197][T26744] CPU: 0 PID: 26744 Comm: syz.2.8080 Not tainted syzkaller #0 [ 1245.783712][T26744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1245.793799][T26744] Call Trace: [ 1245.797095][T26744] [ 1245.800047][T26744] dump_stack_lvl+0x16c/0x230 [ 1245.804763][T26744] ? show_regs_print_info+0x20/0x20 [ 1245.810000][T26744] ? load_image+0x3b0/0x3b0 [ 1245.814529][T26744] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1245.820978][T26744] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1245.827503][T26744] warn_alloc+0x210/0x300 [ 1245.831849][T26744] ? stack_trace_save+0x9c/0xe0 [ 1245.836701][T26744] ? zone_watermark_ok_safe+0x230/0x230 [ 1245.842250][T26744] ? trace_call_bpf+0xc3/0x690 [ 1245.847104][T26744] ? kasan_set_track+0x5f/0x70 [ 1245.851860][T26744] ? kasan_set_track+0x4e/0x70 [ 1245.856618][T26744] ? __kasan_kmalloc+0x8f/0xa0 [ 1245.861374][T26744] ? xsk_init_queue+0xb0/0x110 [ 1245.866134][T26744] ? xsk_setsockopt+0x4db/0x6f0 [ 1245.870981][T26744] ? do_sock_setsockopt+0x175/0x1a0 [ 1245.876198][T26744] ? __x64_sys_setsockopt+0x184/0x200 [ 1245.881619][T26744] __vmalloc_node_range+0x126/0x1320 [ 1245.886930][T26744] ? free_vm_area+0x50/0x50 [ 1245.891439][T26744] vmalloc_user+0x74/0x80 [ 1245.895769][T26744] ? xskq_create+0xbf/0x170 [ 1245.900269][T26744] xskq_create+0xbf/0x170 [ 1245.904625][T26744] xsk_init_queue+0xb0/0x110 [ 1245.909239][T26744] xsk_setsockopt+0x4db/0x6f0 [ 1245.913935][T26744] ? xsk_poll+0x670/0x670 [ 1245.918268][T26744] ? __fget_files+0x28/0x4d0 [ 1245.922881][T26744] ? aa_sock_opt_perm+0x74/0x100 [ 1245.927832][T26744] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1245.933388][T26744] ? security_socket_setsockopt+0x7e/0xa0 [ 1245.939115][T26744] ? xsk_poll+0x670/0x670 [ 1245.943446][T26744] do_sock_setsockopt+0x175/0x1a0 [ 1245.948483][T26744] ? __fdget+0x180/0x210 [ 1245.952733][T26744] __x64_sys_setsockopt+0x184/0x200 [ 1245.957938][T26744] do_syscall_64+0x55/0xb0 [ 1245.962355][T26744] ? clear_bhb_loop+0x40/0x90 [ 1245.967026][T26744] ? clear_bhb_loop+0x40/0x90 [ 1245.971698][T26744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1245.977586][T26744] RIP: 0033:0x7f794eb8f6c9 [ 1245.981994][T26744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.001602][T26744] RSP: 002b:00007f794fa98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1246.010013][T26744] RAX: ffffffffffffffda RBX: 00007f794ede5fa0 RCX: 00007f794eb8f6c9 [ 1246.017981][T26744] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1246.025945][T26744] RBP: 00007f794ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1246.033923][T26744] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1246.041889][T26744] R13: 00007f794ede6038 R14: 00007f794ede5fa0 R15: 00007ffeaab71368 [ 1246.049884][T26744] [ 1246.098439][T26744] Mem-Info: [ 1246.102076][T26744] active_anon:23112 inactive_anon:0 isolated_anon:0 [ 1246.102076][T26744] active_file:18526 inactive_file:40329 isolated_file:0 [ 1246.102076][T26744] unevictable:768 dirty:259 writeback:0 [ 1246.102076][T26744] slab_reclaimable:11123 slab_unreclaimable:98129 [ 1246.102076][T26744] mapped:34772 shmem:11383 pagetables:770 [ 1246.102076][T26744] sec_pagetables:0 bounce:0 [ 1246.102076][T26744] kernel_misc_reclaimable:0 [ 1246.102076][T26744] free:1326713 free_pcp:5762 free_cma:0 [ 1246.178404][T26744] Node 0 active_anon:94600kB inactive_anon:0kB active_file:74104kB inactive_file:161112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136772kB dirty:1048kB writeback:0kB shmem:46132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:3040kB sec_pagetables:0kB all_unreclaimable? no [ 1246.232197][T26744] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1246.307109][T26744] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1246.370053][T26744] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1246.376517][T26744] Node 0 DMA32 free:1387032kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:97656kB inactive_anon:0kB active_file:74104kB inactive_file:159792kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:7764kB local_pcp:4000kB free_cma:0kB [ 1246.447343][T26744] lowmem_reserve[]: 0 0 1 1 1 [ 1246.466772][T26744] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1246.526586][T26744] lowmem_reserve[]: 0 0 0 0 0 [ 1246.532720][T26744] Node 1 Normal free:3899192kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14944kB local_pcp:10144kB free_cma:0kB [ 1246.617219][T26744] lowmem_reserve[]: 0 0 0 0 0 [ 1246.622356][T26744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1246.653679][T26744] Node 0 DMA32: 1346*4kB (UE) 880*8kB (UME) 577*16kB (UM) 445*32kB (UME) 187*64kB (UME) 317*128kB (UME) 180*256kB (UME) 75*512kB (UM) 54*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1381240kB [ 1246.718973][T26744] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1246.757161][T26744] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 222*32kB (UME) 53*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899192kB [ 1246.797537][T26744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.817208][T26744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1246.832888][T26744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.853109][T26744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1246.893283][T26744] 74022 total pagecache pages [ 1246.901485][T26744] 0 pages in swap cache [ 1246.909105][T26744] Free swap = 124996kB [ 1246.910157][T26761] netlink: 'syz.3.8086': attribute type 10 has an invalid length. [ 1246.913279][T26744] Total swap = 124996kB [ 1246.913291][T26744] 2097051 pages RAM [ 1246.913299][T26744] 0 pages HighMem/MovableOnly [ 1246.913307][T26744] 416137 pages reserved [ 1246.913315][T26744] 0 pages cma reserved [ 1247.706618][T26774] netlink: 'syz.3.8094': attribute type 10 has an invalid length. [ 1248.650967][T26774] team_slave_1: left promiscuous mode [ 1248.656630][T26774] team_slave_1: left allmulticast mode [ 1248.698721][T26774] team0 (unregistering): Port device team_slave_1 removed [ 1248.706276][T26774] geneve1: left promiscuous mode [ 1248.711625][T26774] geneve1: left allmulticast mode [ 1248.728366][T26774] team0 (unregistering): Port device geneve1 removed [ 1248.735559][T26774] : left promiscuous mode [ 1248.751510][T26774] team0 (unregistering): Port device removed [ 1248.758775][T26774] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1248.768816][T26774] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1248.798311][T26774] team0 (unregistering): Port device netdevsim0 removed [ 1249.312471][T26793] netlink: 'syz.0.8098': attribute type 10 has an invalid length. [ 1249.891139][T26810] netlink: 'syz.1.8104': attribute type 10 has an invalid length. [ 1250.266051][T26810] team_slave_1: left promiscuous mode [ 1250.281265][T26810] team_slave_1: left allmulticast mode [ 1250.317359][T26810] team0 (unregistering): Port device team_slave_1 removed [ 1250.335107][T26810] geneve1: left promiscuous mode [ 1250.345137][T26810] geneve1: left allmulticast mode [ 1250.366520][T26810] team0 (unregistering): Port device geneve1 removed [ 1250.375641][T26810] netdevsim netdevsim1 : left promiscuous mode [ 1250.383751][T26810] netdevsim netdevsim1 : left allmulticast mode [ 1250.393279][T26810] team0 (unregistering): Port device removed [ 1250.435278][T26814] netlink: 'syz.0.8112': attribute type 10 has an invalid length. [ 1250.699942][T26821] netlink: 'syz.3.8106': attribute type 10 has an invalid length. [ 1251.287457][T26845] netlink: 'syz.2.8117': attribute type 10 has an invalid length. [ 1251.368454][T26848] netlink: 'syz.2.8118': attribute type 21 has an invalid length. [ 1251.376775][T26848] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8118'. [ 1251.392166][T26848] netlink: 'syz.2.8118': attribute type 4 has an invalid length. [ 1251.411145][T26848] pim6reg1: entered promiscuous mode [ 1251.416801][T26848] pim6reg1: entered allmulticast mode [ 1251.707734][T26851] delete_channel: no stack [ 1252.176724][T26868] netlink: 'syz.2.8126': attribute type 10 has an invalid length. [ 1252.197606][T26870] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8127'. [ 1253.065834][T26896] netlink: 'syz.1.8139': attribute type 10 has an invalid length. [ 1253.236300][T26901] netlink: 'syz.1.8149': attribute type 10 has an invalid length. [ 1253.355994][T26908] netlink: 'syz.0.8152': attribute type 10 has an invalid length. [ 1254.114698][T26929] netlink: 'syz.3.8155': attribute type 10 has an invalid length. [ 1254.272678][T26936] netlink: 'syz.2.8157': attribute type 29 has an invalid length. [ 1254.301296][T26936] netlink: 'syz.2.8157': attribute type 29 has an invalid length. [ 1254.316264][T26936] netlink: 'syz.2.8157': attribute type 29 has an invalid length. [ 1254.328216][T26936] netlink: 'syz.2.8157': attribute type 29 has an invalid length. [ 1254.338835][T26936] netlink: 'syz.2.8157': attribute type 29 has an invalid length. [ 1254.353814][T26938] IPv6: Can't replace route, no match found [ 1254.369376][T26938] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1254.416515][T26938] bond0: (slave O3c): Opening slave failed [ 1254.706278][T26948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8161'. [ 1257.276642][T26999] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8182'. [ 1257.365932][T27003] warn_alloc: 10 callbacks suppressed [ 1257.365967][T27003] syz.3.8184: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1257.399274][T27003] CPU: 0 PID: 27003 Comm: syz.3.8184 Not tainted syzkaller #0 [ 1257.406799][T27003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1257.416871][T27003] Call Trace: [ 1257.420168][T27003] [ 1257.423114][T27003] dump_stack_lvl+0x16c/0x230 [ 1257.427828][T27003] ? show_regs_print_info+0x20/0x20 [ 1257.433052][T27003] ? load_image+0x3b0/0x3b0 [ 1257.437945][T27003] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1257.444383][T27003] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1257.450916][T27003] warn_alloc+0x210/0x300 [ 1257.455287][T27003] ? stack_trace_save+0x9c/0xe0 [ 1257.460174][T27003] ? zone_watermark_ok_safe+0x230/0x230 [ 1257.465737][T27003] ? kasan_set_track+0x5f/0x70 [ 1257.470497][T27003] ? kasan_set_track+0x4e/0x70 [ 1257.475258][T27003] ? __kasan_kmalloc+0x8f/0xa0 [ 1257.480015][T27003] ? xsk_init_queue+0xb0/0x110 [ 1257.484775][T27003] ? xsk_setsockopt+0x4db/0x6f0 [ 1257.489625][T27003] ? do_sock_setsockopt+0x175/0x1a0 [ 1257.494825][T27003] ? __x64_sys_setsockopt+0x184/0x200 [ 1257.500208][T27003] __vmalloc_node_range+0x126/0x1320 [ 1257.505521][T27003] ? free_vm_area+0x50/0x50 [ 1257.510031][T27003] vmalloc_user+0x74/0x80 [ 1257.514377][T27003] ? xskq_create+0xbf/0x170 [ 1257.518878][T27003] xskq_create+0xbf/0x170 [ 1257.523208][T27003] xsk_init_queue+0xb0/0x110 [ 1257.527799][T27003] xsk_setsockopt+0x4db/0x6f0 [ 1257.532482][T27003] ? xsk_poll+0x670/0x670 [ 1257.536833][T27003] ? __fget_files+0x28/0x4d0 [ 1257.541427][T27003] ? aa_sock_opt_perm+0x74/0x100 [ 1257.546452][T27003] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1257.552011][T27003] ? security_socket_setsockopt+0x7e/0xa0 [ 1257.557724][T27003] ? xsk_poll+0x670/0x670 [ 1257.562049][T27003] do_sock_setsockopt+0x175/0x1a0 [ 1257.567075][T27003] ? __fdget+0x180/0x210 [ 1257.571322][T27003] __x64_sys_setsockopt+0x184/0x200 [ 1257.576524][T27003] do_syscall_64+0x55/0xb0 [ 1257.580942][T27003] ? clear_bhb_loop+0x40/0x90 [ 1257.585611][T27003] ? clear_bhb_loop+0x40/0x90 [ 1257.590294][T27003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1257.596231][T27003] RIP: 0033:0x7f8ff938f6c9 [ 1257.600642][T27003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.620260][T27003] RSP: 002b:00007f8ffa14b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1257.628672][T27003] RAX: ffffffffffffffda RBX: 00007f8ff95e5fa0 RCX: 00007f8ff938f6c9 [ 1257.636636][T27003] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1257.644608][T27003] RBP: 00007f8ff9411f91 R08: 0000000000000004 R09: 0000000000000000 [ 1257.652665][T27003] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1257.660626][T27003] R13: 00007f8ff95e6038 R14: 00007f8ff95e5fa0 R15: 00007fff13e82ad8 [ 1257.668867][T27003] [ 1257.692076][T27003] Mem-Info: [ 1257.791930][T27003] active_anon:13017 inactive_anon:0 isolated_anon:0 [ 1257.791930][T27003] active_file:18526 inactive_file:40333 isolated_file:0 [ 1257.791930][T27003] unevictable:768 dirty:265 writeback:0 [ 1257.791930][T27003] slab_reclaimable:11147 slab_unreclaimable:99475 [ 1257.791930][T27003] mapped:24082 shmem:1361 pagetables:715 [ 1257.791930][T27003] sec_pagetables:0 bounce:0 [ 1257.791930][T27003] kernel_misc_reclaimable:0 [ 1257.791930][T27003] free:1329905 free_pcp:10897 free_cma:0 [ 1257.840207][T27003] Node 0 active_anon:52068kB inactive_anon:0kB active_file:74104kB inactive_file:161128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96328kB dirty:1060kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11768kB pagetables:2860kB sec_pagetables:0kB all_unreclaimable? no [ 1257.874547][T27003] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1257.907398][T27003] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.953760][T27003] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1257.965796][T27003] Node 0 DMA32 free:1404800kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:52124kB inactive_anon:0kB active_file:74104kB inactive_file:159808kB unevictable:1536kB writepending:1060kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:29764kB local_pcp:21108kB free_cma:0kB [ 1257.998275][T27003] lowmem_reserve[]: 0 0 1 1 1 [ 1258.003935][T27003] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1258.038012][T27003] lowmem_reserve[]: 0 0 0 0 0 [ 1258.043230][T27003] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1258.097255][T27003] lowmem_reserve[]: 0 0 0 0 0 [ 1258.107432][T27003] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1258.149487][T27003] Node 0 DMA32: 1028*4kB (UME) 832*8kB (UE) 565*16kB (UE) 427*32kB (UME) 631*64kB (UME) 316*128kB (UME) 167*256kB (UME) 69*512kB (UM) 58*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1404800kB [ 1258.225636][T27003] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1258.296122][T27003] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1258.341941][T27016] validate_nla: 4 callbacks suppressed [ 1258.341963][T27016] netlink: 'syz.0.8187': attribute type 10 has an invalid length. [ 1258.357174][T27003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.366788][T27003] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.376371][T27003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1258.386717][T27003] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1258.447759][T27003] 60222 total pagecache pages [ 1258.452520][T27003] 0 pages in swap cache [ 1258.458295][T27003] Free swap = 124996kB [ 1258.462514][T27003] Total swap = 124996kB [ 1258.466702][T27003] 2097051 pages RAM [ 1258.472279][T27003] 0 pages HighMem/MovableOnly [ 1258.477126][T27003] 416137 pages reserved [ 1258.480807][T27016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8187'. [ 1258.481580][T27003] 0 pages cma reserved [ 1258.833488][T27026] netlink: 'syz.3.8192': attribute type 21 has an invalid length. [ 1258.867433][T27026] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8192'. [ 1258.908867][T27026] netlink: 'syz.3.8192': attribute type 4 has an invalid length. [ 1259.034812][T27024] pim6reg1: entered promiscuous mode [ 1259.059730][T27024] pim6reg1: entered allmulticast mode [ 1259.470714][T27034] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8193'. [ 1260.495222][T27066] netlink: 'syz.1.8204': attribute type 21 has an invalid length. [ 1260.527407][T27066] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8204'. [ 1260.569431][T27066] netlink: 'syz.1.8204': attribute type 4 has an invalid length. [ 1262.544326][T27077] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8208'. [ 1263.089362][T27095] netlink: 'syz.0.8219': attribute type 10 has an invalid length. [ 1263.436687][T27104] netlink: 'syz.0.8221': attribute type 21 has an invalid length. [ 1263.447126][T27104] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1263.472554][T27104] netlink: 'syz.0.8221': attribute type 4 has an invalid length. [ 1263.835242][T27113] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8225'. [ 1263.964490][T27117] netlink: 'syz.1.8226': attribute type 10 has an invalid length. [ 1264.280314][T27123] netlink: 'syz.1.8230': attribute type 10 has an invalid length. [ 1264.314784][T27123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8230'. [ 1264.929671][T27134] netlink: 'syz.3.8235': attribute type 10 has an invalid length. [ 1264.956366][T27134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8235'. [ 1266.288523][T27144] netlink: 'syz.0.8238': attribute type 10 has an invalid length. [ 1266.320630][T27148] netlink: 'syz.2.8239': attribute type 10 has an invalid length. [ 1266.694746][T27148] bridge0: port 2(team0) entered disabled state [ 1266.711383][T27148] team_slave_1: left promiscuous mode [ 1266.717274][T27148] team_slave_1: left allmulticast mode [ 1266.738677][T27148] team0 (unregistering): Port device team_slave_1 removed [ 1266.749022][T27148] vlan0: left promiscuous mode [ 1266.756235][T27148] team0 (unregistering): Port device vlan0 removed [ 1266.765219][T27148] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1266.773889][T27148] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1266.794171][T27148] team0 (unregistering): Port device netdevsim0 removed [ 1266.808577][T27148] mac80211_hwsim hwsim6 O3c: left promiscuous mode [ 1266.815620][T27148] mac80211_hwsim hwsim6 O3c: left allmulticast mode [ 1266.836791][T27148] team0 (unregistering): Port device O3c removed [ 1267.066314][T27168] netlink: 'syz.0.8244': attribute type 2 has an invalid length. [ 1267.099610][T27168] netlink: 'syz.0.8244': attribute type 1 has an invalid length. [ 1267.115802][T27168] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8244'. [ 1267.286245][T27178] netlink: 'syz.3.8248': attribute type 21 has an invalid length. [ 1267.328344][T27178] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1268.235440][T27187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8251'. [ 1268.361296][T27192] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.8253'. [ 1268.583596][T27197] warn_alloc: 12 callbacks suppressed [ 1268.583641][T27197] syz.3.8256: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1268.633652][T27197] CPU: 1 PID: 27197 Comm: syz.3.8256 Not tainted syzkaller #0 [ 1268.641196][T27197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1268.651423][T27197] Call Trace: [ 1268.654738][T27197] [ 1268.657687][T27197] dump_stack_lvl+0x16c/0x230 [ 1268.662399][T27197] ? show_regs_print_info+0x20/0x20 [ 1268.667638][T27197] ? load_image+0x3b0/0x3b0 [ 1268.672177][T27197] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1268.678621][T27197] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1268.685165][T27197] warn_alloc+0x210/0x300 [ 1268.689542][T27197] ? zone_watermark_ok_safe+0x230/0x230 [ 1268.695124][T27197] ? lockdep_hardirqs_on+0x98/0x150 [ 1268.700362][T27197] __vmalloc_node_range+0x126/0x1320 [ 1268.705701][T27197] ? free_vm_area+0x50/0x50 [ 1268.710233][T27197] vmalloc_user+0x74/0x80 [ 1268.714579][T27197] ? xskq_create+0xbf/0x170 [ 1268.719093][T27197] xskq_create+0xbf/0x170 [ 1268.723444][T27197] xsk_init_queue+0xb0/0x110 [ 1268.728051][T27197] xsk_setsockopt+0x4db/0x6f0 [ 1268.732746][T27197] ? xsk_poll+0x670/0x670 [ 1268.737090][T27197] ? __fget_files+0x28/0x4d0 [ 1268.741701][T27197] ? aa_sock_opt_perm+0x74/0x100 [ 1268.746657][T27197] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1268.752217][T27197] ? security_socket_setsockopt+0x7e/0xa0 [ 1268.757962][T27197] ? xsk_poll+0x670/0x670 [ 1268.762309][T27197] do_sock_setsockopt+0x175/0x1a0 [ 1268.767350][T27197] ? __fdget+0x180/0x210 [ 1268.771614][T27197] __x64_sys_setsockopt+0x184/0x200 [ 1268.776830][T27197] do_syscall_64+0x55/0xb0 [ 1268.781261][T27197] ? clear_bhb_loop+0x40/0x90 [ 1268.785948][T27197] ? clear_bhb_loop+0x40/0x90 [ 1268.790635][T27197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1268.796538][T27197] RIP: 0033:0x7f8ff938f6c9 [ 1268.800956][T27197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1268.820611][T27197] RSP: 002b:00007f8ffa14b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1268.829043][T27197] RAX: ffffffffffffffda RBX: 00007f8ff95e5fa0 RCX: 00007f8ff938f6c9 [ 1268.837029][T27197] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1268.845008][T27197] RBP: 00007f8ff9411f91 R08: 0000000000000004 R09: 0000000000000000 [ 1268.853005][T27197] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1268.861263][T27197] R13: 00007f8ff95e6038 R14: 00007f8ff95e5fa0 R15: 00007fff13e82ad8 [ 1268.869352][T27197] [ 1268.893260][T27197] Mem-Info: [ 1268.896737][T27197] active_anon:12990 inactive_anon:0 isolated_anon:0 [ 1268.896737][T27197] active_file:18526 inactive_file:40339 isolated_file:0 [ 1268.896737][T27197] unevictable:768 dirty:207 writeback:0 [ 1268.896737][T27197] slab_reclaimable:11065 slab_unreclaimable:98645 [ 1268.896737][T27197] mapped:24044 shmem:1361 pagetables:718 [ 1268.896737][T27197] sec_pagetables:0 bounce:0 [ 1268.896737][T27197] kernel_misc_reclaimable:0 [ 1268.896737][T27197] free:1332676 free_pcp:8638 free_cma:0 [ 1269.031607][T27197] Node 0 active_anon:52060kB inactive_anon:0kB active_file:74104kB inactive_file:161152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96176kB dirty:828kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11652kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no [ 1269.084922][T27197] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1269.127721][T27197] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.155836][T27197] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1269.162530][T27197] Node 0 DMA32 free:1415884kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:51940kB inactive_anon:0kB active_file:74104kB inactive_file:159832kB unevictable:1536kB writepending:852kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:19680kB local_pcp:15700kB free_cma:0kB [ 1269.196851][T27197] lowmem_reserve[]: 0 0 1 1 1 [ 1269.209558][T27197] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1269.318770][T27197] lowmem_reserve[]: 0 0 0 0 0 [ 1269.356977][T27197] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:10144kB free_cma:0kB [ 1269.497207][T27197] lowmem_reserve[]: 0 0 0 0 0 [ 1269.502308][T27197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1269.717072][T27197] Node 0 DMA32: 1601*4kB (UME) 1437*8kB (UME) 724*16kB (UME) 531*32kB (UME) 554*64kB (UME) 316*128kB (UME) 168*256kB (UME) 70*512kB (UM) 60*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1415692kB [ 1269.826531][T27197] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1269.971347][T27197] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1270.006971][T27197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.034864][T27197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1270.064220][T27197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.085277][T27197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1270.104089][T27197] 60226 total pagecache pages [ 1270.115751][T27197] 0 pages in swap cache [ 1270.125328][T27197] Free swap = 124996kB [ 1270.134440][T27197] Total swap = 124996kB [ 1270.145136][T27197] 2097051 pages RAM [ 1270.152880][T27197] 0 pages HighMem/MovableOnly [ 1270.166995][T27197] 416137 pages reserved [ 1270.171205][T27197] 0 pages cma reserved [ 1270.213481][T27221] validate_nla: 3 callbacks suppressed [ 1270.213501][T27221] netlink: 'syz.2.8263': attribute type 10 has an invalid length. [ 1270.231876][T27221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8263'. [ 1270.631821][T27230] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8267'. [ 1271.705742][T27259] netlink: 'syz.1.8278': attribute type 21 has an invalid length. [ 1271.747467][T27259] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1271.816282][T27259] netlink: 'syz.1.8278': attribute type 4 has an invalid length. [ 1272.322173][T27271] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8281'. [ 1272.652721][T27284] netlink: 'syz.3.8287': attribute type 1 has an invalid length. [ 1272.663033][T27284] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.8287'. [ 1272.692873][T27282] netlink: 'syz.1.8286': attribute type 10 has an invalid length. [ 1272.704622][T27282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1273.052059][T27295] netlink: 'syz.1.8292': attribute type 21 has an invalid length. [ 1273.061128][T27295] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8292'. [ 1273.071565][T27295] netlink: 'syz.1.8292': attribute type 4 has an invalid length. [ 1273.372170][T27298] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8293'. [ 1274.526981][T27327] netlink: 'syz.3.8309': attribute type 10 has an invalid length. [ 1274.614939][T27328] netlink: 'syz.2.8299': attribute type 1 has an invalid length. [ 1274.648199][T27327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8309'. [ 1274.671563][T27328] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.8299'. [ 1275.229830][T27342] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8306'. [ 1276.764448][T27357] netlink: 'syz.0.8315': attribute type 21 has an invalid length. [ 1276.774228][T27357] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8315'. [ 1276.789253][T27357] netlink: 'syz.0.8315': attribute type 4 has an invalid length. [ 1277.172005][T27378] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8320'. [ 1277.690664][T27394] netlink: 'syz.1.8327': attribute type 21 has an invalid length. [ 1277.700356][T27394] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8327'. [ 1277.710630][T27394] netlink: 'syz.1.8327': attribute type 4 has an invalid length. [ 1278.085508][T27406] netlink: 'syz.1.8331': attribute type 1 has an invalid length. [ 1278.133332][T27406] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8331'. [ 1278.432135][T27410] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8335'. [ 1278.643623][T27420] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8338'. [ 1278.732094][T27422] warn_alloc: 4 callbacks suppressed [ 1278.732127][T27422] syz.3.8340: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1278.786960][T27422] CPU: 0 PID: 27422 Comm: syz.3.8340 Not tainted syzkaller #0 [ 1278.794477][T27422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1278.804568][T27422] Call Trace: [ 1278.807868][T27422] [ 1278.810806][T27422] dump_stack_lvl+0x16c/0x230 [ 1278.815521][T27422] ? show_regs_print_info+0x20/0x20 [ 1278.820740][T27422] ? load_image+0x3b0/0x3b0 [ 1278.825250][T27422] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1278.831675][T27422] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1278.838182][T27422] warn_alloc+0x210/0x300 [ 1278.842519][T27422] ? stack_trace_save+0x9c/0xe0 [ 1278.847370][T27422] ? zone_watermark_ok_safe+0x230/0x230 [ 1278.852925][T27422] ? kasan_set_track+0x5f/0x70 [ 1278.857683][T27422] ? kasan_set_track+0x4e/0x70 [ 1278.862442][T27422] ? __kasan_kmalloc+0x8f/0xa0 [ 1278.867214][T27422] ? xsk_init_queue+0xb0/0x110 [ 1278.871985][T27422] ? xsk_setsockopt+0x4db/0x6f0 [ 1278.876833][T27422] ? do_sock_setsockopt+0x175/0x1a0 [ 1278.882037][T27422] ? __x64_sys_setsockopt+0x184/0x200 [ 1278.887503][T27422] __vmalloc_node_range+0x126/0x1320 [ 1278.892815][T27422] ? free_vm_area+0x50/0x50 [ 1278.897323][T27422] vmalloc_user+0x74/0x80 [ 1278.901658][T27422] ? xskq_create+0xbf/0x170 [ 1278.906159][T27422] xskq_create+0xbf/0x170 [ 1278.910504][T27422] xsk_init_queue+0xb0/0x110 [ 1278.915092][T27422] xsk_setsockopt+0x4db/0x6f0 [ 1278.919770][T27422] ? xsk_poll+0x670/0x670 [ 1278.924122][T27422] ? __fget_files+0x28/0x4d0 [ 1278.928728][T27422] ? aa_sock_opt_perm+0x74/0x100 [ 1278.933681][T27422] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1278.939236][T27422] ? security_socket_setsockopt+0x7e/0xa0 [ 1278.944955][T27422] ? xsk_poll+0x670/0x670 [ 1278.949289][T27422] do_sock_setsockopt+0x175/0x1a0 [ 1278.954317][T27422] ? __fdget+0x180/0x210 [ 1278.958563][T27422] __x64_sys_setsockopt+0x184/0x200 [ 1278.963771][T27422] do_syscall_64+0x55/0xb0 [ 1278.968188][T27422] ? clear_bhb_loop+0x40/0x90 [ 1278.972862][T27422] ? clear_bhb_loop+0x40/0x90 [ 1278.977535][T27422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1278.983424][T27422] RIP: 0033:0x7f8ff938f6c9 [ 1278.987844][T27422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.007630][T27422] RSP: 002b:00007f8ffa14b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1279.016061][T27422] RAX: ffffffffffffffda RBX: 00007f8ff95e5fa0 RCX: 00007f8ff938f6c9 [ 1279.024028][T27422] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1279.031998][T27422] RBP: 00007f8ff9411f91 R08: 0000000000000004 R09: 0000000000000000 [ 1279.039962][T27422] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1279.047926][T27422] R13: 00007f8ff95e6038 R14: 00007f8ff95e5fa0 R15: 00007fff13e82ad8 [ 1279.055914][T27422] [ 1279.075130][T27422] Mem-Info: [ 1279.079255][T27422] active_anon:12986 inactive_anon:0 isolated_anon:0 [ 1279.079255][T27422] active_file:18526 inactive_file:40343 isolated_file:0 [ 1279.079255][T27422] unevictable:768 dirty:333 writeback:0 [ 1279.079255][T27422] slab_reclaimable:10963 slab_unreclaimable:99891 [ 1279.079255][T27422] mapped:24105 shmem:1361 pagetables:708 [ 1279.079255][T27422] sec_pagetables:0 bounce:0 [ 1279.079255][T27422] kernel_misc_reclaimable:0 [ 1279.079255][T27422] free:1334124 free_pcp:7338 free_cma:0 [ 1279.261029][T27422] Node 0 active_anon:51892kB inactive_anon:0kB active_file:74104kB inactive_file:161168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96288kB dirty:1344kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11748kB pagetables:2924kB sec_pagetables:0kB all_unreclaimable? no [ 1279.295326][T27422] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1279.347501][T27422] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1279.376428][T27422] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1279.384692][T27422] Node 0 DMA32 free:1421804kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:52048kB inactive_anon:0kB active_file:74104kB inactive_file:159848kB unevictable:1536kB writepending:1344kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:14732kB local_pcp:5824kB free_cma:0kB [ 1279.427618][T27427] netlink: 'syz.2.8343': attribute type 10 has an invalid length. [ 1279.436066][T27433] netlink: 'syz.0.8345': attribute type 10 has an invalid length. [ 1279.446273][T27422] lowmem_reserve[]: 0 0 1 1 1 [ 1279.459217][T27422] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1279.489170][T27422] lowmem_reserve[]: 0 0 0 0 0 [ 1279.494969][T27422] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1279.531928][T27422] lowmem_reserve[]: 0 0 0 0 0 [ 1279.538112][T27422] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1279.561821][T27422] Node 0 DMA32: 2583*4kB (UME) 1624*8kB (UME) 831*16kB (UM) 589*32kB (UME) 513*64kB (UME) 314*128kB (UME) 168*256kB (UME) 70*512kB (UM) 60*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1421804kB [ 1279.607857][T27422] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1279.643200][T27422] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1279.664402][T27422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.688718][T27422] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1279.712228][T27422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.747224][T27422] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1279.756570][T27422] 60230 total pagecache pages [ 1279.780270][T27422] 0 pages in swap cache [ 1279.784479][T27422] Free swap = 124996kB [ 1279.807417][T27422] Total swap = 124996kB [ 1279.811623][T27422] 2097051 pages RAM [ 1279.815450][T27422] 0 pages HighMem/MovableOnly [ 1279.821788][T27444] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8348'. [ 1279.847047][T27422] 416137 pages reserved [ 1279.859741][T27422] 0 pages cma reserved [ 1281.185759][T27464] netlink: 'syz.2.8356': attribute type 29 has an invalid length. [ 1281.417484][T27464] netlink: 'syz.2.8356': attribute type 29 has an invalid length. [ 1281.453446][T27465] netlink: 'syz.2.8356': attribute type 29 has an invalid length. [ 1281.616133][T27479] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8359'. [ 1281.714871][T27485] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8363'. [ 1281.790778][T27487] validate_nla: 1 callbacks suppressed [ 1281.790813][T27487] netlink: 'syz.3.8365': attribute type 10 has an invalid length. [ 1282.408667][T27506] netlink: 'syz.3.8369': attribute type 29 has an invalid length. [ 1282.419219][T27506] netlink: 'syz.3.8369': attribute type 29 has an invalid length. [ 1282.431461][T27506] netlink: 'syz.3.8369': attribute type 29 has an invalid length. [ 1282.443604][T27506] netlink: 'syz.3.8369': attribute type 29 has an invalid length. [ 1282.587914][T27514] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8373'. [ 1282.843510][T27526] netlink: 'syz.0.8377': attribute type 10 has an invalid length. [ 1283.294898][T27540] IPv6: Can't replace route, no match found [ 1283.322188][T27540] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1283.565668][T27552] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8387'. [ 1283.694584][T27558] netlink: 'syz.0.8390': attribute type 10 has an invalid length. [ 1284.179478][T27571] netlink: 'syz.2.8402': attribute type 10 has an invalid length. [ 1284.270606][T27570] netlink: 'syz.0.8396': attribute type 29 has an invalid length. [ 1284.281011][T27570] netlink: 'syz.0.8396': attribute type 29 has an invalid length. [ 1284.406366][T27574] IPv6: Can't replace route, no match found [ 1284.429545][T27574] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1285.225429][T27607] IPv6: Can't replace route, no match found [ 1285.274621][T27607] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1286.745649][T27671] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8445'. [ 1286.858151][T27678] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8448'. [ 1287.583075][T27695] IPv6: Can't replace route, no match found [ 1287.605069][T27697] validate_nla: 12 callbacks suppressed [ 1287.605101][T27697] netlink: 'syz.1.8457': attribute type 10 has an invalid length. [ 1287.622605][T27695] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1287.683627][T27701] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8459'. [ 1287.729193][T27703] netlink: 'syz.1.8460': attribute type 10 has an invalid length. [ 1288.140784][T27713] netlink: 'syz.3.8463': attribute type 10 has an invalid length. [ 1288.384938][T27724] netlink: 'syz.3.8468': attribute type 10 has an invalid length. [ 1288.552893][T27729] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8471'. [ 1288.721129][T27737] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8473'. [ 1289.004624][T27746] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8478'. [ 1289.246726][T27748] netlink: 'syz.1.8479': attribute type 10 has an invalid length. [ 1289.452919][T27758] warn_alloc: 2 callbacks suppressed [ 1289.452957][T27758] syz.0.8484: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1289.480501][T27758] CPU: 0 PID: 27758 Comm: syz.0.8484 Not tainted syzkaller #0 [ 1289.488010][T27758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1289.498082][T27758] Call Trace: [ 1289.501368][T27758] [ 1289.504308][T27758] dump_stack_lvl+0x16c/0x230 [ 1289.508999][T27758] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1289.515163][T27758] ? show_regs_print_info+0x20/0x20 [ 1289.520365][T27758] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1289.526533][T27758] warn_alloc+0x210/0x300 [ 1289.530872][T27758] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1289.537031][T27758] ? zone_watermark_ok_safe+0x230/0x230 [ 1289.542605][T27758] ? free_vm_area+0x1/0x50 [ 1289.547015][T27758] ? __vmalloc_node_range+0xdd/0x1320 [ 1289.552385][T27758] ? kasan_check_range+0x89/0x290 [ 1289.557406][T27758] ? __x64_sys_setsockopt+0x184/0x200 [ 1289.562785][T27758] __vmalloc_node_range+0x126/0x1320 [ 1289.568099][T27758] ? free_vm_area+0x50/0x50 [ 1289.572611][T27758] vmalloc_user+0x74/0x80 [ 1289.576943][T27758] ? xskq_create+0xbf/0x170 [ 1289.581453][T27758] xskq_create+0xbf/0x170 [ 1289.585782][T27758] xsk_init_queue+0xb0/0x110 [ 1289.590395][T27758] xsk_setsockopt+0x4db/0x6f0 [ 1289.595069][T27758] ? xsk_poll+0x670/0x670 [ 1289.599398][T27758] ? __fget_files+0x28/0x4d0 [ 1289.603990][T27758] ? aa_sock_opt_perm+0x74/0x100 [ 1289.608928][T27758] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1289.614478][T27758] ? security_socket_setsockopt+0x7e/0xa0 [ 1289.620195][T27758] ? xsk_poll+0x670/0x670 [ 1289.624522][T27758] do_sock_setsockopt+0x175/0x1a0 [ 1289.629552][T27758] ? __fdget+0x180/0x210 [ 1289.633797][T27758] __x64_sys_setsockopt+0x184/0x200 [ 1289.639003][T27758] do_syscall_64+0x55/0xb0 [ 1289.643418][T27758] ? clear_bhb_loop+0x40/0x90 [ 1289.648090][T27758] ? clear_bhb_loop+0x40/0x90 [ 1289.652763][T27758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1289.658651][T27758] RIP: 0033:0x7f5384b8f6c9 [ 1289.663060][T27758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.682758][T27758] RSP: 002b:00007f5385941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1289.691258][T27758] RAX: ffffffffffffffda RBX: 00007f5384de5fa0 RCX: 00007f5384b8f6c9 [ 1289.699232][T27758] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1289.707206][T27758] RBP: 00007f5384c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1289.715172][T27758] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1289.723138][T27758] R13: 00007f5384de6038 R14: 00007f5384de5fa0 R15: 00007fffb1a552e8 [ 1289.731119][T27758] [ 1289.740599][T27755] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8483'. [ 1289.743177][T27758] Mem-Info: [ 1289.757573][T27758] active_anon:12904 inactive_anon:0 isolated_anon:0 [ 1289.757573][T27758] active_file:18526 inactive_file:40347 isolated_file:0 [ 1289.757573][T27758] unevictable:768 dirty:343 writeback:0 [ 1289.757573][T27758] slab_reclaimable:10978 slab_unreclaimable:99678 [ 1289.757573][T27758] mapped:24112 shmem:1361 pagetables:707 [ 1289.757573][T27758] sec_pagetables:0 bounce:0 [ 1289.757573][T27758] kernel_misc_reclaimable:0 [ 1289.757573][T27758] free:1331965 free_pcp:9098 free_cma:0 [ 1289.847573][T27758] Node 0 active_anon:51716kB inactive_anon:0kB active_file:74104kB inactive_file:161184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96448kB dirty:1372kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11672kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? no [ 1289.882601][T27758] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1289.914102][T27758] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1289.944767][T27758] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1289.951994][T27758] Node 0 DMA32 free:1413040kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:51672kB inactive_anon:0kB active_file:74104kB inactive_file:159864kB unevictable:1536kB writepending:1372kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:21820kB local_pcp:3564kB free_cma:0kB [ 1289.997046][T27758] lowmem_reserve[]: 0 0 1 1 1 [ 1290.007066][T27758] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1290.037569][T27758] lowmem_reserve[]: 0 0 0 0 0 [ 1290.043521][T27758] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1290.074818][T27758] lowmem_reserve[]: 0 0 0 0 0 [ 1290.080696][T27758] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1290.095182][T27758] Node 0 DMA32: 1578*4kB (UM) 1535*8kB (UME) 1029*16kB (UME) 390*32kB (UME) 497*64kB (UME) 312*128kB (UME) 169*256kB (UME) 70*512kB (UM) 60*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1412848kB [ 1290.120692][T27758] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1290.135238][T27758] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1290.177950][T27758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1290.189041][T27758] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1290.217056][T27758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1290.244369][T27758] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1290.280957][T27758] 60234 total pagecache pages [ 1290.286087][T27758] 0 pages in swap cache [ 1290.290955][T27758] Free swap = 124996kB [ 1290.295320][T27758] Total swap = 124996kB [ 1290.310038][T27758] 2097051 pages RAM [ 1290.318044][T27758] 0 pages HighMem/MovableOnly [ 1290.336625][T27758] 416137 pages reserved [ 1290.341311][T27758] 0 pages cma reserved [ 1290.673004][T27780] netlink: 'syz.3.8492': attribute type 10 has an invalid length. [ 1290.906155][T27788] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8498'. [ 1291.225216][T27802] netlink: 'syz.2.8505': attribute type 10 has an invalid length. [ 1291.991950][T27827] netlink: 'syz.1.8516': attribute type 10 has an invalid length. [ 1292.114427][T27832] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8518'. [ 1292.289442][T27840] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8523'. [ 1292.770935][T27855] netlink: 'syz.0.8529': attribute type 10 has an invalid length. [ 1292.893763][T27859] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8531'. [ 1293.583419][T27880] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8541'. [ 1293.660721][T27884] netlink: 'syz.3.8542': attribute type 10 has an invalid length. [ 1293.740395][T27888] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8544'. [ 1293.958696][T27899] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8550'. [ 1294.421755][T27913] netlink: 'syz.2.8555': attribute type 10 has an invalid length. [ 1294.486497][T27919] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8558'. [ 1294.782361][T27931] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8563'. [ 1295.258945][T27942] netlink: 'syz.2.8567': attribute type 10 has an invalid length. [ 1295.340537][T27944] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8568'. [ 1296.435174][T27966] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8577'. [ 1296.513751][T27970] netlink: 'syz.1.8579': attribute type 10 has an invalid length. [ 1297.038447][T27998] netlink: 'syz.1.8591': attribute type 10 has an invalid length. [ 1297.052911][T27999] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8592'. [ 1297.517175][T28020] netlink: 'syz.1.8602': attribute type 10 has an invalid length. [ 1298.028869][T28045] netlink: 'syz.3.8615': attribute type 10 has an invalid length. [ 1298.242304][T28057] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8621'. [ 1298.861789][T28072] netlink: 'syz.0.8627': attribute type 10 has an invalid length. [ 1300.054802][T28099] netlink: 'syz.1.8638': attribute type 10 has an invalid length. [ 1300.181244][T28105] warn_alloc: 11 callbacks suppressed [ 1300.181285][T28105] syz.2.8641: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1300.231030][T28105] CPU: 0 PID: 28105 Comm: syz.2.8641 Not tainted syzkaller #0 [ 1300.238552][T28105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1300.248634][T28105] Call Trace: [ 1300.251944][T28105] [ 1300.254901][T28105] dump_stack_lvl+0x16c/0x230 [ 1300.259620][T28105] ? show_regs_print_info+0x20/0x20 [ 1300.264859][T28105] ? load_image+0x3b0/0x3b0 [ 1300.269394][T28105] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1300.275837][T28105] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1300.282375][T28105] warn_alloc+0x210/0x300 [ 1300.286742][T28105] ? stack_trace_save+0x9c/0xe0 [ 1300.291620][T28105] ? zone_watermark_ok_safe+0x230/0x230 [ 1300.297179][T28105] ? kasan_set_track+0x5f/0x70 [ 1300.301939][T28105] ? kasan_set_track+0x4e/0x70 [ 1300.306695][T28105] ? __kasan_kmalloc+0x8f/0xa0 [ 1300.311454][T28105] ? xsk_init_queue+0xb0/0x110 [ 1300.316210][T28105] ? xsk_setsockopt+0x4db/0x6f0 [ 1300.321054][T28105] ? do_sock_setsockopt+0x175/0x1a0 [ 1300.326276][T28105] ? __x64_sys_setsockopt+0x184/0x200 [ 1300.331651][T28105] __vmalloc_node_range+0x126/0x1320 [ 1300.336969][T28105] ? free_vm_area+0x50/0x50 [ 1300.341510][T28105] vmalloc_user+0x74/0x80 [ 1300.345861][T28105] ? xskq_create+0xbf/0x170 [ 1300.350363][T28105] xskq_create+0xbf/0x170 [ 1300.354700][T28105] xsk_init_queue+0xb0/0x110 [ 1300.359287][T28105] xsk_setsockopt+0x4db/0x6f0 [ 1300.363958][T28105] ? xsk_poll+0x670/0x670 [ 1300.368290][T28105] ? aa_sock_opt_perm+0x74/0x100 [ 1300.373227][T28105] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1300.378771][T28105] ? security_socket_setsockopt+0x7e/0xa0 [ 1300.384487][T28105] ? xsk_poll+0x670/0x670 [ 1300.388820][T28105] do_sock_setsockopt+0x175/0x1a0 [ 1300.393850][T28105] ? __fdget+0x180/0x210 [ 1300.398101][T28105] __x64_sys_setsockopt+0x184/0x200 [ 1300.403305][T28105] do_syscall_64+0x55/0xb0 [ 1300.407725][T28105] ? clear_bhb_loop+0x40/0x90 [ 1300.412398][T28105] ? clear_bhb_loop+0x40/0x90 [ 1300.417071][T28105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1300.422962][T28105] RIP: 0033:0x7f794eb8f6c9 [ 1300.427372][T28105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.446985][T28105] RSP: 002b:00007f794fa98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1300.455404][T28105] RAX: ffffffffffffffda RBX: 00007f794ede5fa0 RCX: 00007f794eb8f6c9 [ 1300.463371][T28105] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1300.471348][T28105] RBP: 00007f794ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1300.479315][T28105] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1300.487281][T28105] R13: 00007f794ede6038 R14: 00007f794ede5fa0 R15: 00007ffeaab71368 [ 1300.495276][T28105] [ 1300.503207][T28105] Mem-Info: [ 1300.506572][T28105] active_anon:12942 inactive_anon:0 isolated_anon:0 [ 1300.506572][T28105] active_file:18526 inactive_file:40351 isolated_file:0 [ 1300.506572][T28105] unevictable:768 dirty:281 writeback:0 [ 1300.506572][T28105] slab_reclaimable:11049 slab_unreclaimable:99136 [ 1300.506572][T28105] mapped:24072 shmem:1361 pagetables:703 [ 1300.506572][T28105] sec_pagetables:0 bounce:0 [ 1300.506572][T28105] kernel_misc_reclaimable:0 [ 1300.506572][T28105] free:1331937 free_pcp:8854 free_cma:0 [ 1300.514870][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.558891][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.597272][T28105] Node 0 active_anon:51868kB inactive_anon:0kB active_file:74104kB inactive_file:161200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96288kB dirty:1124kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11680kB pagetables:2912kB sec_pagetables:0kB all_unreclaimable? no [ 1300.647598][T28114] IPv6: NLM_F_CREATE should be specified when creating new route [ 1300.684332][T28105] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1300.745207][T28105] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.836910][T28105] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1300.843108][T28105] Node 0 DMA32 free:1411304kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:51924kB inactive_anon:0kB active_file:74104kB inactive_file:159880kB unevictable:1536kB writepending:924kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:13088kB local_pcp:2756kB free_cma:0kB [ 1300.947918][T28105] lowmem_reserve[]: 0 0 1 1 1 [ 1300.953022][T28105] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1301.048226][T28105] lowmem_reserve[]: 0 0 0 0 0 [ 1301.053058][T28105] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1301.102981][T28105] lowmem_reserve[]: 0 0 0 0 0 [ 1301.119884][T28105] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1301.163330][T28105] Node 0 DMA32: 1040*4kB (UME) 1531*8kB (UME) 1029*16kB (UME) 558*32kB (UME) 553*64kB (UME) 247*128kB (UME) 169*256kB (UME) 70*512kB (UM) 60*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1411304kB [ 1301.226878][T28105] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1301.266919][T28105] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1301.317031][T28105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.356995][T28105] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1301.366499][T28105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.387808][T28105] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1301.407323][T28105] 60238 total pagecache pages [ 1301.415523][T28105] 0 pages in swap cache [ 1301.454909][T28105] Free swap = 124996kB [ 1301.460068][T28105] Total swap = 124996kB [ 1301.464251][T28105] 2097051 pages RAM [ 1301.480481][T28105] 0 pages HighMem/MovableOnly [ 1301.485203][T28105] 416137 pages reserved [ 1301.502100][T28105] 0 pages cma reserved [ 1301.720357][T28130] netlink: 'syz.0.8650': attribute type 10 has an invalid length. [ 1302.353283][T28153] netlink: 'syz.3.8662': attribute type 10 has an invalid length. [ 1303.520286][T28177] netlink: 'syz.0.8672': attribute type 10 has an invalid length. [ 1303.639330][T28181] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8674'. [ 1304.603293][T28210] IPv6: Can't replace route, no match found [ 1304.619080][T28208] netlink: 'syz.0.8685': attribute type 10 has an invalid length. [ 1305.068132][T28228] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8696'. [ 1305.181174][T28233] IPv6: NLM_F_CREATE should be specified when creating new route [ 1305.634229][T28247] netlink: 'syz.2.8704': attribute type 33 has an invalid length. [ 1305.657033][T28247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8704'. [ 1307.275891][T28293] netlink: 'syz.0.8723': attribute type 10 has an invalid length. [ 1308.039121][T28311] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8730'. [ 1308.194749][T28319] netlink: 'syz.1.8734': attribute type 10 has an invalid length. [ 1308.535261][T28335] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8742'. [ 1308.612486][T28339] IPv6: NLM_F_CREATE should be specified when creating new route [ 1310.090988][T28361] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1310.256075][T28369] warn_alloc: 10 callbacks suppressed [ 1310.256112][T28369] syz.3.8757: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1310.297474][T28369] CPU: 0 PID: 28369 Comm: syz.3.8757 Not tainted syzkaller #0 [ 1310.304998][T28369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1310.315087][T28369] Call Trace: [ 1310.318382][T28369] [ 1310.321314][T28369] dump_stack_lvl+0x16c/0x230 [ 1310.326009][T28369] ? show_regs_print_info+0x20/0x20 [ 1310.331224][T28369] ? load_image+0x3b0/0x3b0 [ 1310.335737][T28369] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1310.342177][T28369] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1310.348700][T28369] warn_alloc+0x210/0x300 [ 1310.353040][T28369] ? zone_watermark_ok_safe+0x230/0x230 [ 1310.358846][T28369] ? lockdep_hardirqs_on+0x98/0x150 [ 1310.364039][T28369] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1310.370201][T28369] ? __vmalloc_node_range+0x110/0x1320 [ 1310.375676][T28369] __vmalloc_node_range+0x126/0x1320 [ 1310.380985][T28369] ? free_vm_area+0x50/0x50 [ 1310.385580][T28369] vmalloc_user+0x74/0x80 [ 1310.389923][T28369] ? xskq_create+0xbf/0x170 [ 1310.394429][T28369] xskq_create+0xbf/0x170 [ 1310.398762][T28369] xsk_init_queue+0xb0/0x110 [ 1310.403368][T28369] xsk_setsockopt+0x4db/0x6f0 [ 1310.408050][T28369] ? xsk_poll+0x670/0x670 [ 1310.412381][T28369] ? __fget_files+0x28/0x4d0 [ 1310.416968][T28369] ? aa_sock_opt_perm+0x74/0x100 [ 1310.421904][T28369] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1310.427450][T28369] ? security_socket_setsockopt+0x7e/0xa0 [ 1310.433169][T28369] ? xsk_poll+0x670/0x670 [ 1310.437499][T28369] do_sock_setsockopt+0x175/0x1a0 [ 1310.442543][T28369] ? __fdget+0x180/0x210 [ 1310.446787][T28369] __x64_sys_setsockopt+0x184/0x200 [ 1310.451997][T28369] do_syscall_64+0x55/0xb0 [ 1310.456414][T28369] ? clear_bhb_loop+0x40/0x90 [ 1310.461102][T28369] ? clear_bhb_loop+0x40/0x90 [ 1310.465774][T28369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1310.471663][T28369] RIP: 0033:0x7f8ff938f6c9 [ 1310.476086][T28369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1310.495716][T28369] RSP: 002b:00007f8ffa14b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1310.504129][T28369] RAX: ffffffffffffffda RBX: 00007f8ff95e5fa0 RCX: 00007f8ff938f6c9 [ 1310.512095][T28369] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1310.520063][T28369] RBP: 00007f8ff9411f91 R08: 0000000000000004 R09: 0000000000000000 [ 1310.528033][T28369] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1310.535996][T28369] R13: 00007f8ff95e6038 R14: 00007f8ff95e5fa0 R15: 00007fff13e82ad8 [ 1310.544080][T28369] [ 1310.576413][T28369] Mem-Info: [ 1310.580304][T28369] active_anon:13018 inactive_anon:0 isolated_anon:0 [ 1310.580304][T28369] active_file:18526 inactive_file:40355 isolated_file:0 [ 1310.580304][T28369] unevictable:768 dirty:313 writeback:0 [ 1310.580304][T28369] slab_reclaimable:11081 slab_unreclaimable:98982 [ 1310.580304][T28369] mapped:24083 shmem:1361 pagetables:736 [ 1310.580304][T28369] sec_pagetables:0 bounce:0 [ 1310.580304][T28369] kernel_misc_reclaimable:0 [ 1310.580304][T28369] free:1332926 free_pcp:8936 free_cma:0 [ 1310.629859][T28369] Node 0 active_anon:52172kB inactive_anon:0kB active_file:74104kB inactive_file:161216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96332kB dirty:1252kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11688kB pagetables:2944kB sec_pagetables:0kB all_unreclaimable? no [ 1310.681707][T28369] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1310.719784][T28369] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.752116][T28369] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1310.759419][T28369] Node 0 DMA32 free:1416436kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:52128kB inactive_anon:0kB active_file:74104kB inactive_file:159896kB unevictable:1536kB writepending:1252kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:20636kB local_pcp:19260kB free_cma:0kB [ 1310.797871][T28369] lowmem_reserve[]: 0 0 1 1 1 [ 1310.803578][T28369] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1310.832782][T28369] lowmem_reserve[]: 0 0 0 0 0 [ 1310.864130][T28369] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:10144kB free_cma:0kB [ 1310.896517][T28369] lowmem_reserve[]: 0 0 0 0 0 [ 1310.902257][T28369] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1310.922334][T28369] Node 0 DMA32: 483*4kB (UME) 1493*8kB (UME) 892*16kB (UME) 681*32kB (UME) 607*64kB (UME) 254*128kB (UME) 171*256kB (UME) 70*512kB (UM) 60*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1415380kB [ 1310.945111][T28369] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1310.960655][T28369] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1310.982442][T28369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.993877][T28369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1311.004147][T28369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1311.015185][T28369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1311.025682][T28369] 60242 total pagecache pages [ 1311.035066][T28369] 0 pages in swap cache [ 1311.044314][T28369] Free swap = 124996kB [ 1311.049020][T28369] Total swap = 124996kB [ 1311.053672][T28369] 2097051 pages RAM [ 1311.059559][T28369] 0 pages HighMem/MovableOnly [ 1311.064546][T28369] 416137 pages reserved [ 1311.072925][T28369] 0 pages cma reserved [ 1311.340638][T28386] netlink: 'syz.2.8766': attribute type 10 has an invalid length. [ 1311.367571][T28387] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8765'. [ 1311.911951][T28415] IPv6: NLM_F_CREATE should be specified when creating new route [ 1311.918097][T28414] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8779'. [ 1311.932431][T28411] netlink: 'syz.1.8778': attribute type 10 has an invalid length. [ 1313.166356][T28441] netlink: 'syz.0.8792': attribute type 10 has an invalid length. [ 1313.196617][T28443] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8791'. [ 1313.434892][T28453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8797'. [ 1313.459444][T28453] caif0: entered promiscuous mode [ 1313.464719][T28453] caif0: entered allmulticast mode [ 1314.557318][T28472] netlink: 'syz.3.8803': attribute type 10 has an invalid length. [ 1316.157011][T28502] netlink: 'syz.2.8815': attribute type 10 has an invalid length. [ 1316.665923][T28508] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8818'. [ 1317.727036][T28527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8824'. [ 1317.782728][T28527] caif0: entered promiscuous mode [ 1317.792356][T28527] caif0: entered allmulticast mode [ 1318.068068][T28533] netlink: 'syz.3.8826': attribute type 10 has an invalid length. [ 1318.667415][T28542] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1320.285552][T28570] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8842'. [ 1320.594542][T28567] netlink: 'syz.3.8840': attribute type 10 has an invalid length. [ 1321.257458][T28582] warn_alloc: 10 callbacks suppressed [ 1321.257491][T28582] syz.2.8847: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1321.309638][T28582] CPU: 1 PID: 28582 Comm: syz.2.8847 Not tainted syzkaller #0 [ 1321.317172][T28582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1321.327254][T28582] Call Trace: [ 1321.330559][T28582] [ 1321.333521][T28582] dump_stack_lvl+0x16c/0x230 [ 1321.338236][T28582] ? show_regs_print_info+0x20/0x20 [ 1321.343469][T28582] ? load_image+0x3b0/0x3b0 [ 1321.348012][T28582] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1321.354460][T28582] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1321.360995][T28582] warn_alloc+0x210/0x300 [ 1321.365363][T28582] ? stack_trace_save+0x9c/0xe0 [ 1321.370257][T28582] ? zone_watermark_ok_safe+0x230/0x230 [ 1321.375854][T28582] ? kasan_set_track+0x5f/0x70 [ 1321.380640][T28582] ? kasan_set_track+0x4e/0x70 [ 1321.385437][T28582] ? __kasan_kmalloc+0x8f/0xa0 [ 1321.390232][T28582] ? xsk_init_queue+0xb0/0x110 [ 1321.395038][T28582] ? xsk_setsockopt+0x4db/0x6f0 [ 1321.399916][T28582] ? do_sock_setsockopt+0x175/0x1a0 [ 1321.405146][T28582] ? __x64_sys_setsockopt+0x184/0x200 [ 1321.410553][T28582] __vmalloc_node_range+0x126/0x1320 [ 1321.415905][T28582] ? free_vm_area+0x50/0x50 [ 1321.420453][T28582] vmalloc_user+0x74/0x80 [ 1321.424818][T28582] ? xskq_create+0xbf/0x170 [ 1321.429345][T28582] xskq_create+0xbf/0x170 [ 1321.433726][T28582] xsk_init_queue+0xb0/0x110 [ 1321.438403][T28582] xsk_setsockopt+0x4db/0x6f0 [ 1321.443115][T28582] ? xsk_poll+0x670/0x670 [ 1321.447475][T28582] ? __fget_files+0x28/0x4d0 [ 1321.452096][T28582] ? aa_sock_opt_perm+0x74/0x100 [ 1321.457059][T28582] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1321.462632][T28582] ? security_socket_setsockopt+0x7e/0xa0 [ 1321.468464][T28582] ? xsk_poll+0x670/0x670 [ 1321.472818][T28582] do_sock_setsockopt+0x175/0x1a0 [ 1321.477876][T28582] ? __fdget+0x180/0x210 [ 1321.482147][T28582] __x64_sys_setsockopt+0x184/0x200 [ 1321.487392][T28582] do_syscall_64+0x55/0xb0 [ 1321.491832][T28582] ? clear_bhb_loop+0x40/0x90 [ 1321.496530][T28582] ? clear_bhb_loop+0x40/0x90 [ 1321.501231][T28582] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1321.507147][T28582] RIP: 0033:0x7f794eb8f6c9 [ 1321.511592][T28582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1321.531222][T28582] RSP: 002b:00007f794fa98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1321.539670][T28582] RAX: ffffffffffffffda RBX: 00007f794ede5fa0 RCX: 00007f794eb8f6c9 [ 1321.547670][T28582] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1321.555675][T28582] RBP: 00007f794ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1321.564210][T28582] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1321.572216][T28582] R13: 00007f794ede6038 R14: 00007f794ede5fa0 R15: 00007ffeaab71368 [ 1321.580237][T28582] [ 1321.606360][T28582] Mem-Info: [ 1321.647316][T28582] active_anon:24570 inactive_anon:0 isolated_anon:0 [ 1321.647316][T28582] active_file:18526 inactive_file:40359 isolated_file:0 [ 1321.647316][T28582] unevictable:768 dirty:182 writeback:0 [ 1321.647316][T28582] slab_reclaimable:11155 slab_unreclaimable:98999 [ 1321.647316][T28582] mapped:24077 shmem:12924 pagetables:727 [ 1321.647316][T28582] sec_pagetables:0 bounce:0 [ 1321.647316][T28582] kernel_misc_reclaimable:0 [ 1321.647316][T28582] free:1324993 free_pcp:4821 free_cma:0 [ 1321.703863][T28582] Node 0 active_anon:96180kB inactive_anon:0kB active_file:74104kB inactive_file:161232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96308kB dirty:728kB writeback:0kB shmem:48160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11748kB pagetables:2908kB sec_pagetables:0kB all_unreclaimable? no [ 1321.739014][T28582] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1321.770587][T28582] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.800083][T28582] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1321.813645][T28582] Node 0 DMA32 free:1385152kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:91836kB inactive_anon:0kB active_file:74104kB inactive_file:159912kB unevictable:1536kB writepending:728kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:11088kB local_pcp:3556kB free_cma:0kB [ 1321.903343][T28582] lowmem_reserve[]: 0 0 1 1 1 [ 1321.944670][T28582] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1321.992266][T28582] lowmem_reserve[]: 0 0 0 0 0 [ 1321.997633][T28582] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1322.067071][T28582] lowmem_reserve[]: 0 0 0 0 0 [ 1322.072149][T28582] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1322.102768][T28582] Node 0 DMA32: 1727*4kB (UME) 1670*8kB (UME) 1100*16kB (UME) 935*32kB (UME) 361*64kB (UME) 166*128kB (UME) 170*256kB (UME) 71*512kB (UM) 60*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1406476kB [ 1322.135414][T28582] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1322.153835][T28582] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1322.177184][T28595] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8852'. [ 1322.216876][T28582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.236667][T28582] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1322.258634][T28582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1322.275393][T28582] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1322.288801][T28582] 62994 total pagecache pages [ 1322.293617][T28582] 0 pages in swap cache [ 1322.308352][T28582] Free swap = 124996kB [ 1322.315168][T28582] Total swap = 124996kB [ 1322.323323][T28599] netlink: 'syz.0.8853': attribute type 10 has an invalid length. [ 1322.326934][T28582] 2097051 pages RAM [ 1322.345227][T28582] 0 pages HighMem/MovableOnly [ 1322.354389][T28582] 416137 pages reserved [ 1322.361623][T28582] 0 pages cma reserved [ 1322.752777][T28610] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8857'. [ 1322.763684][T28610] caif0: entered promiscuous mode [ 1322.769157][T28610] caif0: entered allmulticast mode [ 1323.051324][T28623] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8862'. [ 1324.101225][T28646] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8873'. [ 1325.041501][T28673] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8885'. [ 1325.511504][T28691] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8894'. [ 1326.296449][T28714] netlink: 'syz.3.8902': attribute type 10 has an invalid length. [ 1326.298351][T28716] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1326.792694][T28739] netlink: 'syz.2.8915': attribute type 10 has an invalid length. [ 1326.820436][T28741] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8916'. [ 1327.291527][T28763] netlink: 'syz.0.8927': attribute type 10 has an invalid length. [ 1327.308452][T28761] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8926'. [ 1327.890449][T28784] netlink: 'syz.0.8937': attribute type 10 has an invalid length. [ 1328.066126][T28788] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8938'. [ 1328.573359][T28813] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8950'. [ 1328.988631][T28833] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8960'. [ 1329.919057][T28856] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8971'. [ 1330.581838][T28880] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8982'. [ 1331.309480][T28899] warn_alloc: 14 callbacks suppressed [ 1331.309517][T28899] syz.1.8990: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1331.367251][T28899] CPU: 0 PID: 28899 Comm: syz.1.8990 Not tainted syzkaller #0 [ 1331.374768][T28899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1331.384847][T28899] Call Trace: [ 1331.388146][T28899] [ 1331.391096][T28899] dump_stack_lvl+0x16c/0x230 [ 1331.395828][T28899] ? show_regs_print_info+0x20/0x20 [ 1331.401059][T28899] ? load_image+0x3b0/0x3b0 [ 1331.405594][T28899] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1331.412035][T28899] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1331.418563][T28899] warn_alloc+0x210/0x300 [ 1331.422931][T28899] ? stack_trace_save+0x9c/0xe0 [ 1331.427903][T28899] ? zone_watermark_ok_safe+0x230/0x230 [ 1331.433622][T28899] ? kasan_set_track+0x5f/0x70 [ 1331.438496][T28899] ? kasan_set_track+0x4e/0x70 [ 1331.443281][T28899] ? __kasan_kmalloc+0x8f/0xa0 [ 1331.448064][T28899] ? xsk_init_queue+0xb0/0x110 [ 1331.452851][T28899] ? xsk_setsockopt+0x4db/0x6f0 [ 1331.457728][T28899] ? do_sock_setsockopt+0x175/0x1a0 [ 1331.463045][T28899] ? __x64_sys_setsockopt+0x184/0x200 [ 1331.468446][T28899] __vmalloc_node_range+0x126/0x1320 [ 1331.473765][T28899] ? free_vm_area+0x50/0x50 [ 1331.478277][T28899] vmalloc_user+0x74/0x80 [ 1331.482619][T28899] ? xskq_create+0xbf/0x170 [ 1331.487132][T28899] xskq_create+0xbf/0x170 [ 1331.491553][T28899] xsk_init_queue+0xb0/0x110 [ 1331.496142][T28899] xsk_setsockopt+0x4db/0x6f0 [ 1331.500822][T28899] ? xsk_poll+0x670/0x670 [ 1331.505155][T28899] ? __fget_files+0x28/0x4d0 [ 1331.509743][T28899] ? aa_sock_opt_perm+0x74/0x100 [ 1331.514681][T28899] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1331.520237][T28899] ? security_socket_setsockopt+0x7e/0xa0 [ 1331.525955][T28899] ? xsk_poll+0x670/0x670 [ 1331.530280][T28899] do_sock_setsockopt+0x175/0x1a0 [ 1331.535310][T28899] ? __fdget+0x180/0x210 [ 1331.539577][T28899] __x64_sys_setsockopt+0x184/0x200 [ 1331.544786][T28899] do_syscall_64+0x55/0xb0 [ 1331.549199][T28899] ? clear_bhb_loop+0x40/0x90 [ 1331.553873][T28899] ? clear_bhb_loop+0x40/0x90 [ 1331.558548][T28899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1331.564436][T28899] RIP: 0033:0x7fb9ced8f6c9 [ 1331.568850][T28899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1331.588630][T28899] RSP: 002b:00007fb9cfb73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1331.597042][T28899] RAX: ffffffffffffffda RBX: 00007fb9cefe5fa0 RCX: 00007fb9ced8f6c9 [ 1331.605009][T28899] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1331.612975][T28899] RBP: 00007fb9cee11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1331.620947][T28899] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1331.628915][T28899] R13: 00007fb9cefe6038 R14: 00007fb9cefe5fa0 R15: 00007ffcd03b3998 [ 1331.636898][T28899] [ 1331.655720][T28902] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8992'. [ 1331.756625][T28899] Mem-Info: [ 1331.762161][T28899] active_anon:12953 inactive_anon:0 isolated_anon:0 [ 1331.762161][T28899] active_file:18526 inactive_file:40363 isolated_file:0 [ 1331.762161][T28899] unevictable:768 dirty:227 writeback:0 [ 1331.762161][T28899] slab_reclaimable:11177 slab_unreclaimable:98092 [ 1331.762161][T28899] mapped:24087 shmem:1361 pagetables:719 [ 1331.762161][T28899] sec_pagetables:0 bounce:0 [ 1331.762161][T28899] kernel_misc_reclaimable:0 [ 1331.762161][T28899] free:1332913 free_pcp:8831 free_cma:0 [ 1331.810307][T28899] Node 0 active_anon:51812kB inactive_anon:0kB active_file:74104kB inactive_file:161248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96348kB dirty:908kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11660kB pagetables:2876kB sec_pagetables:0kB all_unreclaimable? no [ 1331.845050][T28899] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1331.878778][T28899] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.946653][T28899] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1332.008309][T28899] Node 0 DMA32 free:1416580kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:51768kB inactive_anon:0kB active_file:74104kB inactive_file:159928kB unevictable:1536kB writepending:908kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:21304kB local_pcp:10056kB free_cma:0kB [ 1332.066993][T28899] lowmem_reserve[]: 0 0 1 1 1 [ 1332.072121][T28899] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1332.107030][T28899] lowmem_reserve[]: 0 0 0 0 0 [ 1332.112570][T28899] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1332.166960][T28899] lowmem_reserve[]: 0 0 0 0 0 [ 1332.172062][T28899] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1332.202015][T28899] Node 0 DMA32: 881*4kB (UME) 1632*8kB (UME) 1116*16kB (UME) 632*32kB (UME) 630*64kB (UME) 245*128kB (UME) 170*256kB (UME) 71*512kB (UM) 60*1024kB (UME) 5*2048kB (M) 278*4096kB (UM) = 1416580kB [ 1332.230821][T28899] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1332.243693][T28899] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1332.261978][T28899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.271762][T28899] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1332.281915][T28899] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.291728][T28899] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1332.301511][T28899] 60250 total pagecache pages [ 1332.306326][T28899] 0 pages in swap cache [ 1332.311151][T28899] Free swap = 124996kB [ 1332.315471][T28899] Total swap = 124996kB [ 1332.320249][T28899] 2097051 pages RAM [ 1332.327574][T28899] 0 pages HighMem/MovableOnly [ 1332.337135][T28899] 416137 pages reserved [ 1332.341326][T28899] 0 pages cma reserved [ 1332.654381][T28920] netlink: 'syz.1.8999': attribute type 10 has an invalid length. [ 1332.665946][T28920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8999'. [ 1334.900125][T28990] netlink: 'syz.1.9031': attribute type 10 has an invalid length. [ 1336.639862][T29047] tun0: tun_chr_ioctl cmd 1074025677 [ 1336.646114][T29047] tun0: linktype set to 776 [ 1337.503032][T29076] netlink: 'syz.3.9070': attribute type 10 has an invalid length. [ 1337.515524][T29076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9070'. [ 1338.046478][T29101] netlink: 'syz.1.9082': attribute type 10 has an invalid length. [ 1338.410280][T29105] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9091'. [ 1338.599041][T29107] netlink: 'syz.0.9084': attribute type 10 has an invalid length. [ 1338.608989][T29107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9084'. [ 1338.948252][T29124] netlink: 'syz.1.9092': attribute type 10 has an invalid length. [ 1339.059810][T29129] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9095'. [ 1339.465675][T29137] netlink: 'syz.2.9098': attribute type 10 has an invalid length. [ 1339.500907][T29137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9098'. [ 1339.773811][T29146] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9101'. [ 1339.909657][T29153] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9105'. [ 1340.206378][T29163] tun0: tun_chr_ioctl cmd 1074025677 [ 1340.228520][T29163] tun0: linktype set to 776 [ 1340.669315][T29175] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9116'. [ 1341.318903][T29196] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9124'. [ 1341.611420][T29200] netlink: 'syz.2.9125': attribute type 10 has an invalid length. [ 1341.644929][T29200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9125'. [ 1341.719328][T29203] warn_alloc: 11 callbacks suppressed [ 1341.719365][T29203] syz.1.9127: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1341.773511][T29205] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9128'. [ 1341.799266][T29203] CPU: 0 PID: 29203 Comm: syz.1.9127 Not tainted syzkaller #0 [ 1341.806778][T29203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1341.816850][T29203] Call Trace: [ 1341.820140][T29203] [ 1341.823090][T29203] dump_stack_lvl+0x16c/0x230 [ 1341.827801][T29203] ? show_regs_print_info+0x20/0x20 [ 1341.833028][T29203] ? load_image+0x3b0/0x3b0 [ 1341.837558][T29203] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1341.843990][T29203] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1341.850511][T29203] warn_alloc+0x210/0x300 [ 1341.854865][T29203] ? stack_trace_save+0x9c/0xe0 [ 1341.859742][T29203] ? zone_watermark_ok_safe+0x230/0x230 [ 1341.865331][T29203] ? kasan_set_track+0x5f/0x70 [ 1341.870107][T29203] ? kasan_set_track+0x4e/0x70 [ 1341.874885][T29203] ? __kasan_kmalloc+0x8f/0xa0 [ 1341.879662][T29203] ? xsk_init_queue+0xb0/0x110 [ 1341.884454][T29203] ? xsk_setsockopt+0x4db/0x6f0 [ 1341.889316][T29203] ? do_sock_setsockopt+0x175/0x1a0 [ 1341.894725][T29203] ? __x64_sys_setsockopt+0x184/0x200 [ 1341.900245][T29203] __vmalloc_node_range+0x126/0x1320 [ 1341.905593][T29203] ? free_vm_area+0x50/0x50 [ 1341.910129][T29203] vmalloc_user+0x74/0x80 [ 1341.914482][T29203] ? xskq_create+0xbf/0x170 [ 1341.918999][T29203] xskq_create+0xbf/0x170 [ 1341.923346][T29203] xsk_init_queue+0xb0/0x110 [ 1341.927959][T29203] xsk_setsockopt+0x4db/0x6f0 [ 1341.932669][T29203] ? xsk_poll+0x670/0x670 [ 1341.937020][T29203] ? __fget_files+0x28/0x4d0 [ 1341.941626][T29203] ? aa_sock_opt_perm+0x74/0x100 [ 1341.946584][T29203] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1341.952147][T29203] ? security_socket_setsockopt+0x7e/0xa0 [ 1341.957884][T29203] ? xsk_poll+0x670/0x670 [ 1341.962231][T29203] do_sock_setsockopt+0x175/0x1a0 [ 1341.967281][T29203] ? __fdget+0x180/0x210 [ 1341.971548][T29203] __x64_sys_setsockopt+0x184/0x200 [ 1341.976779][T29203] do_syscall_64+0x55/0xb0 [ 1341.981216][T29203] ? clear_bhb_loop+0x40/0x90 [ 1341.986437][T29203] ? clear_bhb_loop+0x40/0x90 [ 1341.991134][T29203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1341.997050][T29203] RIP: 0033:0x7fb9ced8f6c9 [ 1342.001485][T29203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1342.021121][T29203] RSP: 002b:00007fb9cfb73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1342.029575][T29203] RAX: ffffffffffffffda RBX: 00007fb9cefe5fa0 RCX: 00007fb9ced8f6c9 [ 1342.037574][T29203] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1342.045564][T29203] RBP: 00007fb9cee11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1342.053575][T29203] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1342.061564][T29203] R13: 00007fb9cefe6038 R14: 00007fb9cefe5fa0 R15: 00007ffcd03b3998 [ 1342.069663][T29203] [ 1342.268126][T29203] Mem-Info: [ 1342.297376][T29203] active_anon:12949 inactive_anon:0 isolated_anon:0 [ 1342.297376][T29203] active_file:18526 inactive_file:40367 isolated_file:0 [ 1342.297376][T29203] unevictable:768 dirty:245 writeback:0 [ 1342.297376][T29203] slab_reclaimable:11076 slab_unreclaimable:99992 [ 1342.297376][T29203] mapped:24072 shmem:1361 pagetables:718 [ 1342.297376][T29203] sec_pagetables:0 bounce:0 [ 1342.297376][T29203] kernel_misc_reclaimable:0 [ 1342.297376][T29203] free:1333657 free_pcp:7342 free_cma:0 [ 1342.351075][T29203] Node 0 active_anon:51796kB inactive_anon:0kB active_file:74104kB inactive_file:161264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96288kB dirty:980kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11780kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no [ 1342.434308][T29203] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1342.557225][T29203] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.648588][T29203] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1342.654745][T29203] Node 0 DMA32 free:1419396kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:51852kB inactive_anon:0kB active_file:74104kB inactive_file:159944kB unevictable:1536kB writepending:980kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:15172kB local_pcp:1780kB free_cma:0kB [ 1342.720734][T29203] lowmem_reserve[]: 0 0 1 1 1 [ 1342.725550][T29203] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1342.755146][T29203] lowmem_reserve[]: 0 0 0 0 0 [ 1342.760193][T29203] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1342.795332][T29203] lowmem_reserve[]: 0 0 0 0 0 [ 1342.800730][T29203] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1342.816989][T29203] Node 0 DMA32: 505*4kB (ME) 1516*8kB (UME) 1068*16kB (UME) 770*32kB (UME) 639*64kB (UME) 253*128kB (UME) 170*256kB (UME) 71*512kB (UM) 60*1024kB (UME) 5*2048kB (M) 278*4096kB (UM) = 1419396kB [ 1342.850193][T29203] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1342.863932][T29203] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1342.889411][T29203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.899191][T29203] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1342.908739][T29203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.918711][T29203] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1342.935144][T29203] 60254 total pagecache pages [ 1342.942167][T29203] 0 pages in swap cache [ 1342.946552][T29203] Free swap = 124996kB [ 1342.952312][T29203] Total swap = 124996kB [ 1342.960424][T29203] 2097051 pages RAM [ 1342.964386][T29203] 0 pages HighMem/MovableOnly [ 1342.969820][T29203] 416137 pages reserved [ 1342.974019][T29203] 0 pages cma reserved [ 1343.300801][T29239] tun0: tun_chr_ioctl cmd 1074025677 [ 1343.310370][T29239] tun0: linktype set to 776 [ 1343.803505][T29261] __nla_validate_parse: 1 callbacks suppressed [ 1343.803542][T29261] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9152'. [ 1343.979958][T29264] netlink: 'syz.3.9154': attribute type 10 has an invalid length. [ 1344.224112][T29272] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9158'. [ 1344.806500][T29285] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9164'. [ 1345.032364][T29294] netlink: 'syz.0.9167': attribute type 10 has an invalid length. [ 1345.192827][T29304] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9172'. [ 1345.415644][T29314] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9177'. [ 1345.560216][T29319] netlink: 'syz.0.9179': attribute type 10 has an invalid length. [ 1346.712604][T29339] netlink: 'syz.2.9187': attribute type 9 has an invalid length. [ 1346.729869][T29339] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.9187'. [ 1346.870469][T29337] tun0: tun_chr_ioctl cmd 1074025677 [ 1346.888776][T29337] tun0: linktype set to 776 [ 1346.896585][T29345] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9188'. [ 1346.945391][T29336] delete_channel: no stack [ 1346.986123][T29349] netlink: 'syz.0.9189': attribute type 10 has an invalid length. [ 1348.098963][T29369] netlink: 'syz.1.9201': attribute type 10 has an invalid length. [ 1348.132124][T29369] : (slave geneve0): Releasing backup interface [ 1348.369387][T29371] netlink: 'syz.2.9202': attribute type 10 has an invalid length. [ 1348.967789][T29403] netlink: 'syz.2.9214': attribute type 10 has an invalid length. [ 1348.981643][T29401] tun0: tun_chr_ioctl cmd 1074025677 [ 1348.988622][T29401] tun0: linktype set to 776 [ 1349.553546][T29426] netlink: 'syz.3.9224': attribute type 10 has an invalid length. [ 1350.000976][T29447] netlink: 'syz.3.9235': attribute type 10 has an invalid length. [ 1350.139275][T29451] tun0: tun_chr_ioctl cmd 1074025677 [ 1350.145372][T29451] tun0: linktype set to 776 [ 1350.190458][T29455] netlink: 'syz.1.9245': attribute type 10 has an invalid length. [ 1350.595984][T29473] netlink: 'syz.3.9248': attribute type 10 has an invalid length. [ 1350.693102][T29477] netlink: 'syz.0.9249': attribute type 10 has an invalid length. [ 1350.724728][T29477] : (slave geneve0): Releasing backup interface [ 1351.243267][T29499] netlink: 'syz.2.9259': attribute type 10 has an invalid length. [ 1351.425561][T29509] netlink: 'syz.1.9264': attribute type 10 has an invalid length. [ 1351.781323][T29522] netlink: 'syz.0.9270': attribute type 10 has an invalid length. [ 1351.800005][T29520] netlink: 'syz.3.9268': attribute type 10 has an invalid length. [ 1351.926200][T29525] tun0: tun_chr_ioctl cmd 1074025677 [ 1351.943171][T29525] tun0: linktype set to 776 [ 1352.193931][T29537] warn_alloc: 14 callbacks suppressed [ 1352.193965][T29537] syz.0.9277: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1352.230049][T29537] CPU: 0 PID: 29537 Comm: syz.0.9277 Not tainted syzkaller #0 [ 1352.237571][T29537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1352.247656][T29537] Call Trace: [ 1352.250971][T29537] [ 1352.253959][T29537] dump_stack_lvl+0x16c/0x230 [ 1352.258668][T29537] ? show_regs_print_info+0x20/0x20 [ 1352.263876][T29537] ? load_image+0x3b0/0x3b0 [ 1352.268384][T29537] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1352.274800][T29537] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1352.281302][T29537] warn_alloc+0x210/0x300 [ 1352.285632][T29537] ? stack_trace_save+0x9c/0xe0 [ 1352.290488][T29537] ? zone_watermark_ok_safe+0x230/0x230 [ 1352.296048][T29537] ? kasan_set_track+0x5f/0x70 [ 1352.300807][T29537] ? kasan_set_track+0x4e/0x70 [ 1352.305562][T29537] ? __kasan_kmalloc+0x8f/0xa0 [ 1352.310324][T29537] ? xsk_init_queue+0xb0/0x110 [ 1352.315174][T29537] ? xsk_setsockopt+0x4db/0x6f0 [ 1352.320023][T29537] ? do_sock_setsockopt+0x175/0x1a0 [ 1352.325218][T29537] ? __x64_sys_setsockopt+0x184/0x200 [ 1352.330596][T29537] __vmalloc_node_range+0x126/0x1320 [ 1352.335903][T29537] ? free_vm_area+0x50/0x50 [ 1352.340413][T29537] vmalloc_user+0x74/0x80 [ 1352.344748][T29537] ? xskq_create+0xbf/0x170 [ 1352.349248][T29537] xskq_create+0xbf/0x170 [ 1352.353576][T29537] xsk_init_queue+0xb0/0x110 [ 1352.358167][T29537] xsk_setsockopt+0x4db/0x6f0 [ 1352.362841][T29537] ? xsk_poll+0x670/0x670 [ 1352.367169][T29537] ? __fget_files+0x28/0x4d0 [ 1352.371759][T29537] ? aa_sock_opt_perm+0x74/0x100 [ 1352.376721][T29537] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1352.382267][T29537] ? security_socket_setsockopt+0x7e/0xa0 [ 1352.387983][T29537] ? xsk_poll+0x670/0x670 [ 1352.392314][T29537] do_sock_setsockopt+0x175/0x1a0 [ 1352.397342][T29537] ? __fdget+0x180/0x210 [ 1352.401586][T29537] __x64_sys_setsockopt+0x184/0x200 [ 1352.406792][T29537] do_syscall_64+0x55/0xb0 [ 1352.411212][T29537] ? clear_bhb_loop+0x40/0x90 [ 1352.415884][T29537] ? clear_bhb_loop+0x40/0x90 [ 1352.420563][T29537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.426467][T29537] RIP: 0033:0x7f5384b8f6c9 [ 1352.430880][T29537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.450573][T29537] RSP: 002b:00007f5385941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1352.458988][T29537] RAX: ffffffffffffffda RBX: 00007f5384de5fa0 RCX: 00007f5384b8f6c9 [ 1352.467138][T29537] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1352.475106][T29537] RBP: 00007f5384c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1352.483070][T29537] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1352.491036][T29537] R13: 00007f5384de6038 R14: 00007f5384de5fa0 R15: 00007fffb1a552e8 [ 1352.499021][T29537] [ 1352.521828][T29537] Mem-Info: [ 1352.525217][T29537] active_anon:12941 inactive_anon:0 isolated_anon:0 [ 1352.525217][T29537] active_file:18526 inactive_file:40371 isolated_file:0 [ 1352.525217][T29537] unevictable:768 dirty:259 writeback:0 [ 1352.525217][T29537] slab_reclaimable:11423 slab_unreclaimable:98077 [ 1352.525217][T29537] mapped:24061 shmem:1361 pagetables:714 [ 1352.525217][T29537] sec_pagetables:0 bounce:0 [ 1352.525217][T29537] kernel_misc_reclaimable:0 [ 1352.525217][T29537] free:1331208 free_pcp:10882 free_cma:0 [ 1352.574315][T29537] Node 0 active_anon:51764kB inactive_anon:0kB active_file:74104kB inactive_file:161280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96244kB dirty:1036kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11636kB pagetables:2856kB sec_pagetables:0kB all_unreclaimable? no [ 1352.609026][T29537] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1352.653573][T29537] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.689868][T29546] netlink: 'syz.2.9281': attribute type 10 has an invalid length. [ 1352.701140][T29537] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1352.708115][T29537] Node 0 DMA32 free:1410012kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:51820kB inactive_anon:0kB active_file:74104kB inactive_file:159960kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:28508kB local_pcp:17696kB free_cma:0kB [ 1352.743654][T29537] lowmem_reserve[]: 0 0 1 1 1 [ 1352.750010][T29537] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1352.779389][T29537] lowmem_reserve[]: 0 0 0 0 0 [ 1352.784664][T29537] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1352.814776][T29537] lowmem_reserve[]: 0 0 0 0 0 [ 1352.821121][T29537] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1352.860968][T29537] Node 0 DMA32: 433*4kB (UM) 1173*8kB (UM) 1041*16kB (UME) 747*32kB (UM) 632*64kB (UME) 252*128kB (UME) 170*256kB (UME) 70*512kB (UM) 60*1024kB (UME) 5*2048kB (M) 277*4096kB (UM) = 1410012kB [ 1352.890122][T29537] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1352.907478][T29537] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1352.927760][T29537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1352.939077][T29537] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1352.965028][T29537] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1352.997790][T29537] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1353.008151][T29537] 60258 total pagecache pages [ 1353.012861][T29537] 0 pages in swap cache [ 1353.017360][T29537] Free swap = 124996kB [ 1353.021762][T29537] Total swap = 124996kB [ 1353.025932][T29537] 2097051 pages RAM [ 1353.029881][T29537] 0 pages HighMem/MovableOnly [ 1353.034740][T29537] 416137 pages reserved [ 1353.039443][T29537] 0 pages cma reserved [ 1353.297589][T29566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9286'. [ 1354.110112][T29594] tun0: tun_chr_ioctl cmd 1074025677 [ 1354.116493][T29594] tun0: linktype set to 776 [ 1354.374067][T29607] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1354.415497][T29607] O3c: mtu less than device minimum [ 1354.437284][T29607] : (slave O3c): Error -22 calling dev_set_mtu [ 1354.638230][T29617] validate_nla: 4 callbacks suppressed [ 1354.638261][T29617] netlink: 'syz.0.9312': attribute type 10 has an invalid length. [ 1354.930269][T29631] tun0: tun_chr_ioctl cmd 1074025677 [ 1354.936567][T29631] tun0: linktype set to 776 [ 1355.207552][T29642] netlink: 'syz.1.9322': attribute type 10 has an invalid length. [ 1355.248008][T29642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9322'. [ 1355.335519][T29646] netlink: 'syz.3.9326': attribute type 10 has an invalid length. [ 1355.381132][T29646] bond0: (slave geneve0): Releasing backup interface [ 1355.902537][T29670] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9337'. [ 1356.311112][T29689] netlink: 'syz.3.9344': attribute type 10 has an invalid length. [ 1356.332567][T29689] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9344'. [ 1356.435379][T29696] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9349'. [ 1356.925739][T29717] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9359'. [ 1356.972495][T29718] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1357.215765][T29718] netlink: 'syz.1.9361': attribute type 10 has an invalid length. [ 1357.238965][T29718] wlan1: mtu less than device minimum [ 1357.244765][T29718] : (slave wlan1): Error -22 calling dev_set_mtu [ 1357.593874][T29746] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9371'. [ 1357.780304][T29754] netlink: 'syz.0.9383': attribute type 10 has an invalid length. [ 1357.892616][T29758] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1358.000949][T29758] netlink: 'syz.3.9376': attribute type 10 has an invalid length. [ 1358.020099][T29758] bond0: (slave O3c): Opening slave failed [ 1358.051039][T29756] netlink: 'syz.2.9375': attribute type 10 has an invalid length. [ 1358.059720][T29756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9375'. [ 1358.364968][T29775] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9382'. [ 1358.683582][T29787] netlink: 'syz.1.9387': attribute type 10 has an invalid length. [ 1358.859953][T29791] netlink: 'syz.2.9390': attribute type 10 has an invalid length. [ 1358.873248][T29791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1358.984975][T29802] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9395'. [ 1359.094408][T29798] tun0: tun_chr_ioctl cmd 1074025677 [ 1359.118372][T29798] tun0: linktype set to 776 [ 1359.435203][T29822] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9404'. [ 1359.635769][T29828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9405'. [ 1359.749731][T29833] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1359.790393][T29835] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9416'. [ 1359.825712][T29833] validate_nla: 2 callbacks suppressed [ 1359.825752][T29833] netlink: 'syz.2.9408': attribute type 10 has an invalid length. [ 1359.856558][T29833] O3c: mtu less than device minimum [ 1359.877246][T29833] : (slave O3c): Error -22 calling dev_set_mtu [ 1359.954742][T29841] netlink: 'syz.1.9412': attribute type 10 has an invalid length. [ 1360.288039][T29861] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9422'. [ 1360.433392][T29863] netlink: 'syz.1.9424': attribute type 10 has an invalid length. [ 1360.751842][T29881] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.9432'. [ 1360.893800][T29887] netlink: 'syz.1.9435': attribute type 10 has an invalid length. [ 1361.243409][T29905] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9444'. [ 1361.269196][T29907] IPv6: Can't replace route, no match found [ 1361.277889][T29907] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1361.299057][T29907] netlink: 'syz.1.9445': attribute type 10 has an invalid length. [ 1361.308296][T29907] wlan1: mtu less than device minimum [ 1361.314216][T29907] : (slave wlan1): Error -22 calling dev_set_mtu [ 1361.467788][T29915] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1361.524240][T29915] netlink: 'syz.1.9449': attribute type 10 has an invalid length. [ 1361.538594][T29915] wlan1: mtu less than device minimum [ 1361.544368][T29915] : (slave wlan1): Error -22 calling dev_set_mtu [ 1361.776607][T29929] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9456'. [ 1361.872114][T29933] netlink: 'syz.1.9458': attribute type 10 has an invalid length. [ 1361.910424][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.918973][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.094121][T29956] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1363.149082][T29956] netlink: 'syz.3.9469': attribute type 10 has an invalid length. [ 1363.163446][T29956] bond0: (slave O3c): Opening slave failed [ 1363.363710][T29968] netlink: 'syz.3.9474': attribute type 9 has an invalid length. [ 1363.390235][T29968] __nla_validate_parse: 1 callbacks suppressed [ 1363.390251][T29968] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9474'. [ 1363.542190][T29966] delete_channel: no stack [ 1363.641582][T29979] warn_alloc: 10 callbacks suppressed [ 1363.641617][T29979] syz.2.9478: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1363.695053][T29979] CPU: 1 PID: 29979 Comm: syz.2.9478 Not tainted syzkaller #0 [ 1363.702581][T29979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1363.712663][T29979] Call Trace: [ 1363.715965][T29979] [ 1363.718906][T29979] dump_stack_lvl+0x16c/0x230 [ 1363.723709][T29979] ? show_regs_print_info+0x20/0x20 [ 1363.728943][T29979] ? load_image+0x3b0/0x3b0 [ 1363.733484][T29979] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1363.739930][T29979] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1363.746463][T29979] warn_alloc+0x210/0x300 [ 1363.750834][T29979] ? stack_trace_save+0x9c/0xe0 [ 1363.755721][T29979] ? zone_watermark_ok_safe+0x230/0x230 [ 1363.761320][T29979] ? kasan_set_track+0x5f/0x70 [ 1363.766139][T29979] ? kasan_set_track+0x4e/0x70 [ 1363.770934][T29979] ? __kasan_kmalloc+0x8f/0xa0 [ 1363.775731][T29979] ? xsk_init_queue+0xb0/0x110 [ 1363.780535][T29979] ? xsk_setsockopt+0x4db/0x6f0 [ 1363.785424][T29979] ? do_sock_setsockopt+0x175/0x1a0 [ 1363.790683][T29979] ? __x64_sys_setsockopt+0x184/0x200 [ 1363.796102][T29979] __vmalloc_node_range+0x126/0x1320 [ 1363.801466][T29979] ? free_vm_area+0x50/0x50 [ 1363.806023][T29979] vmalloc_user+0x74/0x80 [ 1363.810415][T29979] ? xskq_create+0xbf/0x170 [ 1363.814972][T29979] xskq_create+0xbf/0x170 [ 1363.819428][T29979] xsk_init_queue+0xb0/0x110 [ 1363.824064][T29979] xsk_setsockopt+0x4db/0x6f0 [ 1363.828779][T29979] ? xsk_poll+0x670/0x670 [ 1363.833148][T29979] ? __fget_files+0x28/0x4d0 [ 1363.837777][T29979] ? aa_sock_opt_perm+0x74/0x100 [ 1363.842760][T29979] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1363.848342][T29979] ? security_socket_setsockopt+0x7e/0xa0 [ 1363.854082][T29979] ? xsk_poll+0x670/0x670 [ 1363.858452][T29979] do_sock_setsockopt+0x175/0x1a0 [ 1363.863526][T29979] ? __fdget+0x180/0x210 [ 1363.867802][T29979] __x64_sys_setsockopt+0x184/0x200 [ 1363.873050][T29979] do_syscall_64+0x55/0xb0 [ 1363.877502][T29979] ? clear_bhb_loop+0x40/0x90 [ 1363.882210][T29979] ? clear_bhb_loop+0x40/0x90 [ 1363.886917][T29979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1363.892854][T29979] RIP: 0033:0x7f794eb8f6c9 [ 1363.897293][T29979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.916929][T29979] RSP: 002b:00007f794fa98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1363.925373][T29979] RAX: ffffffffffffffda RBX: 00007f794ede5fa0 RCX: 00007f794eb8f6c9 [ 1363.933381][T29979] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1363.941397][T29979] RBP: 00007f794ec11f91 R08: 0000000000000004 R09: 0000000000000000 [ 1363.949484][T29979] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1363.957504][T29979] R13: 00007f794ede6038 R14: 00007f794ede5fa0 R15: 00007ffeaab71368 [ 1363.965523][T29979] [ 1363.988683][T29979] Mem-Info: [ 1363.992356][T29979] active_anon:13092 inactive_anon:0 isolated_anon:0 [ 1363.992356][T29979] active_file:18526 inactive_file:40375 isolated_file:0 [ 1363.992356][T29979] unevictable:768 dirty:273 writeback:0 [ 1363.992356][T29979] slab_reclaimable:11992 slab_unreclaimable:97065 [ 1363.992356][T29979] mapped:24094 shmem:1361 pagetables:751 [ 1363.992356][T29979] sec_pagetables:0 bounce:0 [ 1363.992356][T29979] kernel_misc_reclaimable:0 [ 1363.992356][T29979] free:1327748 free_pcp:9779 free_cma:0 [ 1364.040687][T29979] Node 0 active_anon:52368kB inactive_anon:0kB active_file:74104kB inactive_file:161296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96376kB dirty:1092kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11768kB pagetables:3004kB sec_pagetables:0kB all_unreclaimable? no [ 1364.046579][T29983] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1364.076013][T29979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1364.172581][T29979] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1364.228997][T29979] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1364.235582][T29979] Node 0 DMA32 free:1416208kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:52136kB inactive_anon:0kB active_file:74104kB inactive_file:159976kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:19892kB local_pcp:16608kB free_cma:0kB [ 1364.290083][T29979] lowmem_reserve[]: 0 0 1 1 1 [ 1364.295628][T29979] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1364.323675][T29979] lowmem_reserve[]: 0 0 0 0 0 [ 1364.330034][T29979] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:10144kB free_cma:0kB [ 1364.361219][T29979] lowmem_reserve[]: 0 0 0 0 0 [ 1364.397048][T29979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1364.454172][T29979] Node 0 DMA32: 705*4kB (UME) 726*8kB (UME) 1012*16kB (UME) 950*32kB (UM) 647*64kB (UM) 246*128kB (UME) 168*256kB (UME) 69*512kB (UM) 59*1024kB (UM) 7*2048kB (UM) 277*4096kB (UM) = 1415796kB [ 1364.475248][T29979] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1364.489150][T29979] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1364.510406][T29979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.520593][T29979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1364.531974][T29979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.542112][T29979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1364.563525][T29979] 60264 total pagecache pages [ 1364.568887][T29979] 0 pages in swap cache [ 1364.573076][T29979] Free swap = 124996kB [ 1364.578410][T29979] Total swap = 124996kB [ 1364.582837][T29979] 2097051 pages RAM [ 1364.586712][T29979] 0 pages HighMem/MovableOnly [ 1364.592069][T29979] 416137 pages reserved [ 1364.596361][T29979] 0 pages cma reserved [ 1364.725379][T29994] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1364.754463][T29994] netlink: 'syz.3.9485': attribute type 10 has an invalid length. [ 1364.778600][T29994] bond0: (slave O3c): Opening slave failed [ 1364.931082][T30004] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9489'. [ 1365.125357][T30011] netlink: 'syz.2.9492': attribute type 10 has an invalid length. [ 1365.453652][T30023] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9499'. [ 1365.613670][T30027] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1365.675369][T30027] netlink: 'syz.3.9500': attribute type 10 has an invalid length. [ 1365.703436][T30027] bond0: (slave O3c): Opening slave failed [ 1366.845289][T30061] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1366.878459][T30061] netlink: 'syz.1.9517': attribute type 10 has an invalid length. [ 1366.905138][T30061] wlan1: mtu less than device minimum [ 1366.913105][T30061] : (slave wlan1): Error -22 calling dev_set_mtu [ 1367.469736][T30087] netlink: 'syz.0.9527': attribute type 9 has an invalid length. [ 1367.488630][T30087] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9527'. [ 1367.587922][T30082] netlink: 'syz.3.9525': attribute type 10 has an invalid length. [ 1367.728694][T30086] delete_channel: no stack [ 1368.841145][T30117] netlink: 'syz.1.9539': attribute type 9 has an invalid length. [ 1368.876908][T30117] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.9539'. [ 1369.070691][T30116] delete_channel: no stack [ 1370.468360][T30164] netlink: 'syz.2.9560': attribute type 9 has an invalid length. [ 1370.476149][T30164] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.9560'. [ 1370.563702][T30163] delete_channel: no stack [ 1371.029181][T30185] netlink: 'syz.2.9572': attribute type 10 has an invalid length. [ 1371.062975][T30184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1371.239953][T30196] netlink: 'syz.0.9574': attribute type 9 has an invalid length. [ 1371.248458][T30196] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9574'. [ 1371.684539][T30195] delete_channel: no stack [ 1372.685625][T30231] netlink: 'syz.2.9590': attribute type 4 has an invalid length. [ 1372.701855][T30231] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1372.788672][T30233] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 1372.795757][T30233] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 1372.859643][T30237] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1372.887060][T30237] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1373.596060][T30261] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9600'. [ 1374.452469][T30282] netlink: 'syz.3.9610': attribute type 4 has an invalid length. [ 1374.463276][T30282] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9610'. [ 1374.728541][T30298] warn_alloc: 4 callbacks suppressed [ 1374.728557][T30298] syz.3.9614: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1374.795441][T30298] CPU: 1 PID: 30298 Comm: syz.3.9614 Not tainted syzkaller #0 [ 1374.802963][T30298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1374.813053][T30298] Call Trace: [ 1374.816362][T30298] [ 1374.819326][T30298] dump_stack_lvl+0x16c/0x230 [ 1374.824223][T30298] ? show_regs_print_info+0x20/0x20 [ 1374.829434][T30298] ? load_image+0x3b0/0x3b0 [ 1374.833939][T30298] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1374.840357][T30298] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1374.846876][T30298] warn_alloc+0x210/0x300 [ 1374.851226][T30298] ? stack_trace_save+0x9c/0xe0 [ 1374.856086][T30298] ? zone_watermark_ok_safe+0x230/0x230 [ 1374.861649][T30298] ? kasan_set_track+0x5f/0x70 [ 1374.866412][T30298] ? kasan_set_track+0x4e/0x70 [ 1374.871171][T30298] ? __kasan_kmalloc+0x8f/0xa0 [ 1374.875956][T30298] ? xsk_init_queue+0xb0/0x110 [ 1374.880737][T30298] ? xsk_setsockopt+0x4db/0x6f0 [ 1374.885598][T30298] ? do_sock_setsockopt+0x175/0x1a0 [ 1374.890833][T30298] ? __x64_sys_setsockopt+0x184/0x200 [ 1374.896246][T30298] __vmalloc_node_range+0x126/0x1320 [ 1374.901572][T30298] ? free_vm_area+0x50/0x50 [ 1374.906089][T30298] vmalloc_user+0x74/0x80 [ 1374.910426][T30298] ? xskq_create+0xbf/0x170 [ 1374.915048][T30298] xskq_create+0xbf/0x170 [ 1374.919403][T30298] xsk_init_queue+0xb0/0x110 [ 1374.924009][T30298] xsk_setsockopt+0x4db/0x6f0 [ 1374.928779][T30298] ? xsk_poll+0x670/0x670 [ 1374.933111][T30298] ? __fget_files+0x28/0x4d0 [ 1374.937736][T30298] ? aa_sock_opt_perm+0x74/0x100 [ 1374.942680][T30298] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1374.948228][T30298] ? security_socket_setsockopt+0x7e/0xa0 [ 1374.953977][T30298] ? xsk_poll+0x670/0x670 [ 1374.958310][T30298] do_sock_setsockopt+0x175/0x1a0 [ 1374.963338][T30298] ? __fdget+0x180/0x210 [ 1374.967591][T30298] __x64_sys_setsockopt+0x184/0x200 [ 1374.972804][T30298] do_syscall_64+0x55/0xb0 [ 1374.977222][T30298] ? clear_bhb_loop+0x40/0x90 [ 1374.981896][T30298] ? clear_bhb_loop+0x40/0x90 [ 1374.986575][T30298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1374.992472][T30298] RIP: 0033:0x7f8ff938f6c9 [ 1374.996972][T30298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1375.016587][T30298] RSP: 002b:00007f8ff75f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1375.025007][T30298] RAX: ffffffffffffffda RBX: 00007f8ff95e6090 RCX: 00007f8ff938f6c9 [ 1375.032973][T30298] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1375.040937][T30298] RBP: 00007f8ff9411f91 R08: 0000000000000004 R09: 0000000000000000 [ 1375.048905][T30298] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1375.056873][T30298] R13: 00007f8ff95e6128 R14: 00007f8ff95e6090 R15: 00007fff13e82ad8 [ 1375.064860][T30298] [ 1375.134852][T30298] Mem-Info: [ 1375.138287][T30298] active_anon:21234 inactive_anon:0 isolated_anon:0 [ 1375.138287][T30298] active_file:18526 inactive_file:40379 isolated_file:0 [ 1375.138287][T30298] unevictable:768 dirty:132 writeback:0 [ 1375.138287][T30298] slab_reclaimable:12128 slab_unreclaimable:98206 [ 1375.138287][T30298] mapped:31890 shmem:9468 pagetables:776 [ 1375.138287][T30298] sec_pagetables:0 bounce:0 [ 1375.138287][T30298] kernel_misc_reclaimable:0 [ 1375.138287][T30298] free:1324439 free_pcp:8769 free_cma:0 [ 1375.185147][T30298] Node 0 active_anon:84936kB inactive_anon:0kB active_file:74104kB inactive_file:161312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127560kB dirty:528kB writeback:0kB shmem:36336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11680kB pagetables:3104kB sec_pagetables:0kB all_unreclaimable? no [ 1375.222976][T30298] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1375.310131][T30298] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.350623][T30298] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1375.358552][T30298] Node 0 DMA32 free:1379912kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:87564kB inactive_anon:0kB active_file:74104kB inactive_file:160000kB unevictable:1536kB writepending:580kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:20684kB local_pcp:1980kB free_cma:0kB [ 1375.405777][T30298] lowmem_reserve[]: 0 0 1 1 1 [ 1375.419872][T30298] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1375.519118][T30298] lowmem_reserve[]: 0 0 0 0 0 [ 1375.543486][T30298] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1375.611006][T30305] netlink: 'syz.0.9619': attribute type 10 has an invalid length. [ 1375.626573][T30298] lowmem_reserve[]: 0 0 0 0 0 [ 1375.644076][T30298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1375.671571][T30298] Node 0 DMA32: 1211*4kB (UE) 405*8kB (UME) 568*16kB (U) 350*32kB (UE) 437*64kB (UME) 241*128kB (UME) 166*256kB (UME) 68*512kB (UME) 60*1024kB (UME) 8*2048kB (UME) 277*4096kB (UM) = 1376916kB [ 1375.716955][T30298] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1375.743678][T30298] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1375.789401][T30298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.815007][T30298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1375.834899][T30298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.855916][T30298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1375.876935][T30298] 70980 total pagecache pages [ 1375.886859][T30298] 0 pages in swap cache [ 1375.896030][T30298] Free swap = 124996kB [ 1375.906208][T30298] Total swap = 124996kB [ 1375.919252][T30298] 2097051 pages RAM [ 1375.927756][T30298] 0 pages HighMem/MovableOnly [ 1375.938205][T30298] 416137 pages reserved [ 1375.946712][T30298] 0 pages cma reserved [ 1376.617854][T30323] netlink: 'syz.0.9627': attribute type 4 has an invalid length. [ 1376.641314][T30323] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9627'. [ 1377.635471][T30367] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9648'. [ 1380.512370][T30473] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9696'. [ 1382.672388][T30558] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9732'. [ 1383.544406][T30580] netlink: 'syz.3.9744': attribute type 4 has an invalid length. [ 1383.567225][T30580] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9744'. [ 1384.189857][T30609] IPv6: Can't replace route, no match found [ 1384.204157][T30609] netlink: 'syz.0.9756': attribute type 10 has an invalid length. [ 1384.229453][T30609] O3c: mtu less than device minimum [ 1384.235147][T30609] : (slave O3c): Error -22 calling dev_set_mtu [ 1385.071185][T30646] warn_alloc: 8 callbacks suppressed [ 1385.071223][T30646] syz.3.9774: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1385.139611][T30646] CPU: 1 PID: 30646 Comm: syz.3.9774 Not tainted syzkaller #0 [ 1385.147124][T30646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1385.157195][T30646] Call Trace: [ 1385.160491][T30646] [ 1385.163433][T30646] dump_stack_lvl+0x16c/0x230 [ 1385.168195][T30646] ? show_regs_print_info+0x20/0x20 [ 1385.173411][T30646] ? load_image+0x3b0/0x3b0 [ 1385.177934][T30646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1385.184365][T30646] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1385.190890][T30646] warn_alloc+0x210/0x300 [ 1385.195288][T30646] ? zone_watermark_ok_safe+0x230/0x230 [ 1385.200873][T30646] ? kasan_set_track+0x5f/0x70 [ 1385.205660][T30646] ? kasan_set_track+0x4e/0x70 [ 1385.210457][T30646] ? __kasan_kmalloc+0x8f/0xa0 [ 1385.215249][T30646] ? xsk_init_queue+0xb0/0x110 [ 1385.220023][T30646] ? xsk_setsockopt+0x4db/0x6f0 [ 1385.224891][T30646] ? do_sock_setsockopt+0x175/0x1a0 [ 1385.230125][T30646] ? __x64_sys_setsockopt+0x184/0x200 [ 1385.235521][T30646] __vmalloc_node_range+0x126/0x1320 [ 1385.240854][T30646] ? free_vm_area+0x50/0x50 [ 1385.245384][T30646] vmalloc_user+0x74/0x80 [ 1385.249733][T30646] ? xskq_create+0xbf/0x170 [ 1385.254257][T30646] xskq_create+0xbf/0x170 [ 1385.258604][T30646] xsk_init_queue+0xb0/0x110 [ 1385.263212][T30646] xsk_setsockopt+0x4db/0x6f0 [ 1385.267922][T30646] ? xsk_poll+0x670/0x670 [ 1385.272270][T30646] ? __fget_files+0x28/0x4d0 [ 1385.276879][T30646] ? aa_sock_opt_perm+0x74/0x100 [ 1385.281837][T30646] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1385.287397][T30646] ? security_socket_setsockopt+0x7e/0xa0 [ 1385.293135][T30646] ? xsk_poll+0x670/0x670 [ 1385.297484][T30646] do_sock_setsockopt+0x175/0x1a0 [ 1385.302528][T30646] ? __fdget+0x180/0x210 [ 1385.306786][T30646] __x64_sys_setsockopt+0x184/0x200 [ 1385.312009][T30646] do_syscall_64+0x55/0xb0 [ 1385.316533][T30646] ? clear_bhb_loop+0x40/0x90 [ 1385.321226][T30646] ? clear_bhb_loop+0x40/0x90 [ 1385.325922][T30646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1385.331833][T30646] RIP: 0033:0x7f8ff938f6c9 [ 1385.336257][T30646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1385.355885][T30646] RSP: 002b:00007f8ffa14b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1385.364320][T30646] RAX: ffffffffffffffda RBX: 00007f8ff95e5fa0 RCX: 00007f8ff938f6c9 [ 1385.372301][T30646] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1385.380284][T30646] RBP: 00007f8ff9411f91 R08: 0000000000000004 R09: 0000000000000000 [ 1385.388273][T30646] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1385.396273][T30646] R13: 00007f8ff95e6038 R14: 00007f8ff95e5fa0 R15: 00007fff13e82ad8 [ 1385.404278][T30646] [ 1385.457007][T30646] Mem-Info: [ 1385.471699][T30646] active_anon:12962 inactive_anon:0 isolated_anon:0 [ 1385.471699][T30646] active_file:18526 inactive_file:40385 isolated_file:0 [ 1385.471699][T30646] unevictable:768 dirty:226 writeback:0 [ 1385.471699][T30646] slab_reclaimable:12081 slab_unreclaimable:97717 [ 1385.471699][T30646] mapped:24087 shmem:1361 pagetables:730 [ 1385.471699][T30646] sec_pagetables:0 bounce:0 [ 1385.471699][T30646] kernel_misc_reclaimable:0 [ 1385.471699][T30646] free:1336642 free_pcp:4959 free_cma:0 [ 1385.570471][T30646] Node 0 active_anon:51948kB inactive_anon:0kB active_file:74104kB inactive_file:161336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96348kB dirty:904kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11468kB pagetables:2920kB sec_pagetables:0kB all_unreclaimable? no [ 1385.666450][T30646] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1385.781151][T30646] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.856523][T30646] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1385.873667][T30646] Node 0 DMA32 free:1431300kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:51904kB inactive_anon:0kB active_file:74104kB inactive_file:160016kB unevictable:1536kB writepending:904kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:5444kB local_pcp:1808kB free_cma:0kB [ 1385.964220][T30646] lowmem_reserve[]: 0 0 1 1 1 [ 1385.970028][T30646] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1386.003485][T30646] lowmem_reserve[]: 0 0 0 0 0 [ 1386.011150][T30646] Node 1 Normal free:3899448kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:4544kB free_cma:0kB [ 1386.044273][T30646] lowmem_reserve[]: 0 0 0 0 0 [ 1386.094813][T30646] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1386.118411][T30646] Node 0 DMA32: 1176*4kB (UME) 1059*8kB (UME) 949*16kB (UME) 1319*32kB (UME) 656*64kB (UME) 219*128kB (UME) 166*256kB (UME) 67*512kB (UME) 61*1024kB (UME) 8*2048kB (UME) 277*4096kB (UM) = 1430824kB [ 1386.144991][T30646] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1386.165235][T30646] Node 1 Normal: 238*4kB (UME) 50*8kB (UME) 47*16kB (UME) 226*32kB (UME) 55*64kB (UE) 8*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3899448kB [ 1386.183493][T30646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.193126][T30646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1386.202804][T30646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.212598][T30646] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1386.248839][T30646] 60272 total pagecache pages [ 1386.253571][T30646] 0 pages in swap cache [ 1386.258143][T30646] Free swap = 124996kB [ 1386.262325][T30646] Total swap = 124996kB [ 1386.280830][T30646] 2097051 pages RAM [ 1386.284687][T30646] 0 pages HighMem/MovableOnly [ 1386.290038][T30646] 416137 pages reserved [ 1386.294226][T30646] 0 pages cma reserved [ 1387.094443][T30692] netlink: 'syz.2.9795': attribute type 4 has an invalid length. [ 1387.122699][T30692] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9795'. [ 1387.684871][T30723] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.9810'. [ 1388.096590][T30744] syzkaller0: entered promiscuous mode [ 1388.102547][T30744] syzkaller0: entered allmulticast mode [ 1388.689942][T30768] netlink: 'syz.1.9832': attribute type 4 has an invalid length. [ 1388.713443][T30768] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9832'. [ 1389.064599][T30783] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.9838'. [ 1390.748364][T30828] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.9859'. [ 1391.071606][T30840] netlink: 'syz.0.9864': attribute type 4 has an invalid length. [ 1391.095869][T30840] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9864'. [ 1391.651153][T30867] netlink: 'syz.3.9878': attribute type 4 has an invalid length. [ 1391.667229][T30867] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9878'. [ 1392.766339][T30925] syzkaller0: entered promiscuous mode [ 1392.772932][T30925] syzkaller0: entered allmulticast mode [ 1394.171444][T30960] netlink: 'syz.0.9922': attribute type 4 has an invalid length. [ 1394.206639][T30960] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9922'. [ 1394.880880][T30980] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.9931'. [ 1395.351842][T30994] netlink: 'syz.2.9936': attribute type 4 has an invalid length. [ 1395.360240][T30994] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9936'. [ 1395.771222][T31010] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.9945'. [ 1396.249151][T31019] netlink: 'syz.3.9948': attribute type 4 has an invalid length. [ 1396.283278][T31019] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9948'. [ 1397.324605][T31050] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.9959'. [ 1402.081713][T31169] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.10009'. [ 1402.979585][T31192] : port 1(vlan0) entered blocking state [ 1402.985504][T31192] : port 1(vlan0) entered disabled state [ 1402.997155][T31192] vlan0: entered allmulticast mode [ 1403.019191][T31192] vlan0: entered promiscuous mode [ 1410.347335][T31341] : port 1() entered blocking state [ 1410.369981][T31341] : port 1() entered disabled state [ 1410.394694][T31341] : entered promiscuous mode [ 1413.120476][T31387] : port 1(vlan0) entered blocking state [ 1413.126465][T31387] : port 1(vlan0) entered disabled state [ 1413.146405][T31387] vlan0: entered promiscuous mode [ 1423.396081][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.402686][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.636355][T31550] : port 1(vlan0) entered blocking state [ 1423.707018][T31550] : port 1(vlan0) entered disabled state [ 1423.717846][T31550] vlan0: entered promiscuous mode [ 1426.195445][T31609] netlink: 'syz.0.10171': attribute type 3 has an invalid length. [ 1426.206032][T31609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10171'. [ 1426.239093][T31609] netlink: 'syz.0.10171': attribute type 27 has an invalid length. [ 1429.868980][T31688] netlink: 'syz.1.10206': attribute type 3 has an invalid length. [ 1429.887952][T31688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10206'. [ 1430.029668][T31688] netlink: 'syz.1.10206': attribute type 27 has an invalid length. [ 1431.082239][T31718] netlink: 'syz.2.10219': attribute type 3 has an invalid length. [ 1431.117133][T31718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10219'. [ 1434.237100][T31781] netlink: 'syz.2.10243': attribute type 3 has an invalid length. [ 1434.255434][T31781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10243'. [ 1434.318970][T31781] netlink: 'syz.2.10243': attribute type 27 has an invalid length. [ 1434.984456][T31803] netlink: 'syz.3.10251': attribute type 3 has an invalid length. [ 1434.993322][T31803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10251'. [ 1435.499998][T31817] netlink: 'syz.3.10257': attribute type 3 has an invalid length. [ 1435.541349][T31817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10257'. [ 1435.818110][T31817] netlink: 'syz.3.10257': attribute type 27 has an invalid length. [ 1437.739748][T31846] netlink: 'syz.1.10268': attribute type 3 has an invalid length. [ 1437.767055][T31846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10268'. [ 1438.187407][T31854] netlink: 'syz.0.10271': attribute type 3 has an invalid length. [ 1438.215857][T31854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10271'. [ 1438.288953][T31853] tap0: tun_chr_ioctl cmd 1074025675 [ 1438.294395][T31853] tap0: persist enabled [ 1438.340123][T31853] tap0: tun_chr_ioctl cmd 1074025675 [ 1438.348821][T31853] tap0: persist enabled [ 1438.360181][T31854] netlink: 'syz.0.10271': attribute type 27 has an invalid length. [ 1439.397792][T31876] netlink: 'syz.0.10279': attribute type 3 has an invalid length. [ 1439.477070][T31876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10279'. [ 1440.788555][T31909] netlink: 'syz.0.10294': attribute type 3 has an invalid length. [ 1440.819128][T31909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10294'. [ 1442.161638][T31947] tap0: tun_chr_ioctl cmd 1074025675 [ 1442.171153][T31947] tap0: persist enabled [ 1442.189180][T31945] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 1442.196339][T31945] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 1442.256578][T31948] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1442.270524][T31948] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1442.289164][T31949] tap0: tun_chr_ioctl cmd 1074025675 [ 1442.294633][T31949] tap0: persist enabled [ 1443.342575][T31968] netlink: 'syz.3.10316': attribute type 3 has an invalid length. [ 1443.392209][T31968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10316'. [ 1447.869522][T32061] tap0: tun_chr_ioctl cmd 1074025675 [ 1447.889211][T32061] tap0: persist enabled [ 1447.907172][T32061] tap0: tun_chr_ioctl cmd 1074025675 [ 1447.913017][T32061] tap0: persist enabled [ 1450.953367][T32103] netlink: 'syz.1.10365': attribute type 9 has an invalid length. [ 1450.966876][T32103] netlink: 399 bytes leftover after parsing attributes in process `syz.1.10365'. [ 1451.012019][T32096] tun0: tun_chr_ioctl cmd 1074025677 [ 1451.029322][T32096] tun0: linktype set to 776 [ 1451.347160][T32110] netlink: 'syz.1.10368': attribute type 10 has an invalid length. [ 1451.404978][T32110] hsr_slave_1: left promiscuous mode [ 1453.343533][T32150] tun0: tun_chr_ioctl cmd 1074025677 [ 1453.377064][T32150] tun0: linktype set to 776 [ 1454.134158][T32167] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 1454.158044][T32167] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 1456.107429][T32201] netlink: 'syz.2.10407': attribute type 9 has an invalid length. [ 1456.115362][T32201] netlink: 399 bytes leftover after parsing attributes in process `syz.2.10407'. [ 1462.096492][T32301] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1462.127709][T32301] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1465.139032][T32403] tun0: tun_chr_ioctl cmd 1074025677 [ 1465.152235][T32403] tun0: linktype set to 776 [ 1466.732213][T32438] tun0: tun_chr_ioctl cmd 1074025677 [ 1466.738806][T32438] tun0: linktype set to 776 [ 1470.857155][T32515] sit0: left promiscuous mode [ 1475.382299][T32614] sit0: left promiscuous mode [ 1478.035316][T32673] sit0: left promiscuous mode [ 1480.236119][T32702] netlink: 'syz.2.10609': attribute type 10 has an invalid length. [ 1483.392800][T32758] netlink: 'syz.1.10630': attribute type 10 has an invalid length. [ 1483.900721][ T302] sit0: left promiscuous mode [ 1484.678129][ T326] bridge_slave_0: left promiscuous mode [ 1484.696071][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.827618][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.834036][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.257250][ T326] : (slave bridge0): Releasing backup interface [ 1485.376100][ T326] bridge0 (unregistering): left promiscuous mode [ 1503.945666][ T755] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1503.998027][ T755] netlink: 'syz.2.10810': attribute type 10 has an invalid length. [ 1504.022172][ T755] O3c: mtu less than device minimum [ 1504.034353][ T755] : (slave O3c): Error -22 calling dev_set_mtu [ 1504.801846][ T785] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10823'. [ 1504.921319][ T786] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1505.023818][ T785] netlink: 'syz.2.10823': attribute type 4 has an invalid length. [ 1505.076374][ T785] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10823'. [ 1505.148052][ T785] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10823'. [ 1505.158860][ T785] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1505.205380][ T786] netlink: 'syz.1.10822': attribute type 10 has an invalid length. [ 1505.286396][ T786] wlan1: mtu less than device minimum [ 1505.316941][ T786] : (slave wlan1): Error -22 calling dev_set_mtu [ 1507.637752][ T835] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1507.690834][ T835] netlink: 'syz.0.10841': attribute type 10 has an invalid length. [ 1507.700956][ T835] O3c: mtu less than device minimum [ 1507.706573][ T835] : (slave O3c): Error -22 calling dev_set_mtu [ 1509.040308][ T873] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1509.075989][ T873] netlink: 'syz.3.10856': attribute type 10 has an invalid length. [ 1509.106259][ T873] bond0: (slave O3c): Opening slave failed [ 1510.342438][ T911] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1510.407823][ T911] netlink: 'syz.0.10869': attribute type 10 has an invalid length. [ 1510.441106][ T911] O3c: mtu less than device minimum [ 1510.462796][ T911] : (slave O3c): Error -22 calling dev_set_mtu [ 1510.848875][ T941] netlink: 'syz.2.10879': attribute type 9 has an invalid length. [ 1510.857464][ T941] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10879'. [ 1511.001863][ T941] netlink: 'syz.2.10879': attribute type 9 has an invalid length. [ 1511.017200][ T941] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10879'. [ 1511.038930][ T940] delete_channel: no stack [ 1514.517896][ T1054] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.10921'. [ 1514.528190][ T1054] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1515.446107][ T1083] netlink: 'syz.3.10932': attribute type 3 has an invalid length. [ 1515.458169][ T1083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10932'. [ 1515.894677][ T1083] netlink: 'syz.3.10932': attribute type 27 has an invalid length. [ 1519.461081][ T1136] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10951'. [ 1519.481193][ T1136] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1520.609263][ T1172] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10968'. [ 1520.636950][ T1172] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1522.026607][ T1226] netlink: 'syz.3.10988': attribute type 6 has an invalid length. [ 1523.669535][ T1273] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11004'. [ 1523.691011][ T1273] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 1523.857287][ T1281] netlink: 'syz.2.11007': attribute type 6 has an invalid length. [ 1526.679635][ T1352] netlink: 'syz.0.11034': attribute type 6 has an invalid length. [ 1530.972764][ T1443] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.11069'. [ 1534.052380][ T1499] netlink: 'syz.2.11090': attribute type 10 has an invalid length. [ 1534.063728][ T1499] macvlan0: entered promiscuous mode [ 1534.080657][ T1499] macvlan0: entered allmulticast mode [ 1534.124855][ T1499] veth1_vlan: entered allmulticast mode [ 1534.145937][ T1499] : (slave macvlan0): Enslaving as an active interface with an up link [ 1536.072725][ T1534] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1536.190520][ T1534] netlink: 'syz.3.11103': attribute type 10 has an invalid length. [ 1536.228592][ T1534] bond0: (slave O3c): Opening slave failed [ 1536.553977][ T1544] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.11105'. [ 1537.232240][ T1557] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.11110'. [ 1538.649679][ T1589] netlink: 'syz.3.11123': attribute type 10 has an invalid length. [ 1539.157491][ T1607] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1539.262642][ T1607] netlink: 'syz.1.11131': attribute type 10 has an invalid length. [ 1539.276361][ T1607] wlan1: mtu less than device minimum [ 1539.282760][ T1607] : (slave wlan1): Error -22 calling dev_set_mtu [ 1539.421312][ T1613] netlink: 'syz.2.11133': attribute type 10 has an invalid length. [ 1540.540465][ T1648] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1540.600922][ T1648] netlink: 'syz.2.11145': attribute type 10 has an invalid length. [ 1540.611090][ T1648] O3c: mtu less than device minimum [ 1540.631420][ T1648] : (slave O3c): Error -22 calling dev_set_mtu [ 1541.677128][ T1683] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1541.751351][ T1682] netlink: 'syz.0.11160': attribute type 10 has an invalid length. [ 1541.778819][ T1682] O3c: mtu less than device minimum [ 1541.784868][ T1682] : (slave O3c): Error -22 calling dev_set_mtu [ 1542.356934][ T1709] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1542.447528][ T1709] netlink: 'syz.3.11172': attribute type 10 has an invalid length. [ 1542.476406][ T1709] bond0: (slave O3c): Opening slave failed [ 1544.244086][ T1753] netlink: 'syz.0.11188': attribute type 10 has an invalid length. [ 1544.525437][ T1752] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.11189'. [ 1545.587910][ T1776] netlink: 'syz.1.11198': attribute type 10 has an invalid length. [ 1545.618169][ T1776] macvlan0: entered promiscuous mode [ 1545.623760][ T1776] macvlan0: entered allmulticast mode [ 1545.664307][ T1776] veth1_vlan: entered allmulticast mode [ 1545.690625][ T1776] : (slave macvlan0): Enslaving as an active interface with an up link [ 1546.458163][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.473573][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.593682][ T1829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11217'. [ 1551.634536][ T1867] netlink: 'syz.3.11230': attribute type 10 has an invalid length. [ 1551.767182][ T1867] macvlan0: entered promiscuous mode [ 1551.777999][ T1867] macvlan0: entered allmulticast mode [ 1551.820557][ T1867] veth1_vlan: entered allmulticast mode [ 1551.843701][ T1867] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1554.937580][ T1918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11247'. [ 1556.204826][ T1932] netlink: 'syz.0.11252': attribute type 10 has an invalid length. [ 1556.225909][ T1932] macvlan0: entered promiscuous mode [ 1556.247167][ T1932] macvlan0: entered allmulticast mode [ 1556.329794][ T1932] veth1_vlan: entered allmulticast mode [ 1556.364863][ T1932] : (slave macvlan0): Enslaving as an active interface with an up link [ 1558.925916][ T1968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11263'. [ 1562.582220][T24777] vlan0: left allmulticast mode [ 1562.595002][T24777] vlan0: left promiscuous mode [ 1562.601523][T24777] : port 1(vlan0) entered disabled state [ 1562.613796][T24777] veth0_to_bridge: left allmulticast mode [ 1562.620081][T24777] veth0_to_bridge: left promiscuous mode [ 1562.625901][T24777] : port 2(veth0_to_bridge) entered disabled state [ 1562.634099][T24777] veth0_to_team: left allmulticast mode [ 1562.639976][T24777] veth0_to_team: left promiscuous mode [ 1562.645576][T24777] : port 1(veth0_to_team) entered disabled state [ 1562.681258][T24777] veth1_vlan: left allmulticast mode [ 1562.686906][T24777] veth1_vlan: left promiscuous mode [ 1564.812947][T24777]  (unregistering): (slave macvlan0): Releasing backup interface [ 1565.069799][T24777]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.078608][T24777] bond_slave_1 (unregistering): left promiscuous mode [ 1565.119967][T24777]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1565.128850][T24777] bridge_slave_1 (unregistering): left promiscuous mode [ 1565.360108][T24777]  (unregistering): Released all slaves [ 1565.918493][T24777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.003617][T24777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.092424][T24777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.141369][T24777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.256176][T24777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.337002][T24777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.392490][T24777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.461684][T24777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.580632][T24777] : left promiscuous mode [ 1569.585807][T24777] : port 1() entered disabled state [ 1569.596151][T24777] veth0_to_bridge: left allmulticast mode [ 1569.602287][T24777] veth0_to_bridge: left promiscuous mode [ 1569.608147][T24777] : port 2(veth0_to_bridge) entered disabled state [ 1569.615978][T24777] veth0_to_team: left allmulticast mode [ 1569.621790][T24777] veth0_to_team: left promiscuous mode [ 1569.628390][T24777] : port 1(veth0_to_team) entered disabled state [ 1569.642040][T24777] hsr_slave_0: left promiscuous mode [ 1569.650902][T24777] hsr_slave_1: left promiscuous mode [ 1569.658342][T24777] vlan0: left promiscuous mode [ 1569.663426][T24777] : port 1(vlan0) entered disabled state [ 1569.679783][T24777] hsr_slave_1: left promiscuous mode [ 1569.685645][T24777] vlan0: left promiscuous mode [ 1569.691159][T24777] : port 1(vlan0) entered disabled state [ 1569.713126][T24777] hsr_slave_1: left promiscuous mode [ 1569.782663][T24777] veth1_vlan: left allmulticast mode [ 1569.788293][T24777] veth1_vlan: left promiscuous mode [ 1569.794332][T24777] veth1_vlan: left allmulticast mode [ 1569.799980][T24777] veth1_vlan: left promiscuous mode [ 1569.807830][T24777] veth1_vlan: left allmulticast mode [ 1569.813297][T24777] veth1_vlan: left promiscuous mode