last executing test programs: 3.525399291s ago: executing program 2 (id=3189): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001140)={&(0x7f0000001300)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x80, 0x0}, 0x20000090) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x13, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r2}, 0xc) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x20) (async) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000003000000000400000000000005000000000000014ab0f5b89a415dff6f953942e7850000"], &(0x7f0000000980)=""/196, 0x48, 0xc4, 0x1, 0x5}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f00000000c0), 0x42) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="da3ee0ff08000000"], &(0x7f0000000540)='GPL\x00', 0xffffff01, 0x6f, &(0x7f0000000580)=""/111, 0x41100, 0x2, '\x00', r1, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x1, 0x803, 0x1, 0x7fff}, 0x10, 0x3, 0xffffffffffffffff, 0x4, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x0, 0x3, 0x7, 0x9}, {0x1, 0x3, 0xe, 0x5}, {0x3, 0x1, 0xc, 0x4}, {0x2, 0x3, 0x6, 0xa}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000040), &(0x7f0000000440)=r8}, 0x20) 3.29329246s ago: executing program 1 (id=3193): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x10}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc634, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) sendmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x20110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="91102e000000000095"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x22, &(0x7f00000018c0), 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x22, &(0x7f00000018c0), 0x4) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 3.134578943s ago: executing program 2 (id=3194): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) socket$kcm(0x1e, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000600850000000800000085000000b200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.868416836s ago: executing program 2 (id=3197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000b0000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000414000000b7030000400100000000000057bdf9bc8500000000005509010000000000950000000000000018120000cb3bf407e3f652057d6184e79207a2618137f91507c43d294607de8240cef5ae2195a229c75fc1a1d5de81d5b2f2", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.453762332s ago: executing program 1 (id=3199): socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.452854002s ago: executing program 0 (id=3200): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb3b9}, [@call={0x85, 0x0, 0x0, 0x86}, @alu={0x7, 0x0, 0x8, 0x2, 0x9, 0x4, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x8a}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}, @ldst={0x2, 0x3, 0x2, 0x0, 0x2, 0x100}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400), &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000580)={&(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000740)="e794681c944c727eda8da65b876daa9f34ee807cdb8ecdfad2c300f2e3ce9ea011b6c7041cf39baffa07e2b4b394953ecc1b3f2687f6f1a5746d55daabb39f2e34a1bdc679223a3db64aa11f4c8682ab19dc7ce778b3f5aced6516f5e9b8cf12321ae180e680da746d753f125520b16c722f688d01be4a0e924f374a5ebd", 0x7e}, {&(0x7f0000000380)="fa604ed4ac32705947cd77d4811f3393c930bae0057c2cccbcad0e72760d90738f35812bcfae64ef2296e95587", 0x2d}, {&(0x7f00000007c0)="c48751cca69b43f33c1a85d848808acd6bc8370bd45bd49a401f4f3f8cc0e624b85ffb9760e162301b8cefe7f94481f636c78006ee65ff051984d2822cec7a80a454c2bd83da41ea571d2d2c031c6546a2c8ef3cccc1ff67d74fc62b5b25690196803ca3d7416ca1e10b1eb97478ec35deef7d339764795c92ae69c32d3a22fd6c24fff9340a43d7001e3c333f34b6650621618cabc60d3abfe129d135bbf642cf40a3dedc16092ff9feba8690df439ca8be60e797bad55a3fd6dba3d6aacd52944fbe00f7adc2b7d88718d055c794e7f3f90cc8a4e2454f85c22af940", 0xdd}, {&(0x7f00000008c0)="6b8b912eb07ca2bf4d3ef2eb0c8312dae1d47912769032911594c0b37a4d7e3a064712e26d4c97bbe943c0e6c68edc4deb481d31728be7d92fea2994256be0efc7ac0e22891646432e05d592dbf7a8488416a8ab470fd21dea0069f2a1048c5bcba2d60aba8529d10fc8237c6dddbcc55c17f63fac40a6c69c8d9ab1706a153815c096a550369674415292cbbf4fcc873e673d9ce617e55db702bd4e494e441a3c9d227945866d5d3db7b04358418ba404815fa2e3af67cbfc788cb31e931fb3aecbc7835849afb0773587b2501c4f5e5e648d155cb6a3b08b806b6525c4cec31884", 0xe2}, {&(0x7f00000009c0)="6a7dd64c23a47a44e8609557b04259aff1b4a56b8c1cad0e22e3d40e7bf0fe6d194f9a2a3175c92775c3f1a8e5adcc6b67c743de99c57497265f8fc15a886ebe63f64887ff4d8fc5ad685fbaedc8ed57dbc1d7cd3e63725339bd44dbec07683f04db1e248da8d957ec99da4f1580bb55f96f8e11a6d956b10f8a72793ef7ad2874dc8fcbf873e0ff32781b904dcda5b91e754b68f91daadd24bb804cade49cdaef34e3e02266e331fb3780014dcb6b0024d0d79491921f8ca67385e739ff9e7e484700e9a6eab793cb447be1bda310df448b86e11039dd30d3c130f9c63fe27d24", 0xe1}, {&(0x7f0000000ac0)="29a590cf84d9c27c9e07934558b086003e61e2d7ba1ee6df9b086457c85784bba93adfdd12faacb296b7e5925bc71085b5e6d2b466e5cdb956aa7763f3c9b4c3a8bf5be1c487e9f570079bc47b530f7b5302ab841eb793324cc389e27596c04199205554dac3074e22421f2894bd351e62a323399300fcae78edbf9a1a939a5ee50eb839e821b13ee8b5ab4a855460e04e87e9fb8bce0466e1443037f7b9bdcc0391e6d9c4ea6b47f2516d3e5a06f2238babee2d7e6c7f63a32f3bf250da5e8e28e0e438ba72a6c96adf5728c1c864cd09b68b4f12ebff2c106f54814767ffdc69236e1635eef89b8f", 0xe9}, {&(0x7f0000000cc0)="5066310152998cbc2027101eb8c75d9609169b4e048ca7baec981e48ef05eb2323ea364c83da15fae4bdef82124357c9dbcdf1d993092131a4425c4e1d37ee7b3c250e8779f8842d222c3649d510fd6bffb804c735f83f13400be94e19f88d26cabfc52c4f5bddee017836b4bcf460e5742ccb44030653c7d47d16f7bf62204085262140acfe461a229ddc8b9c50238aa66a0958c3dde70b9a2957acf1d29db04fbffe267a931dda1dbc2f2c2e", 0xad}], 0x7, &(0x7f0000000e00)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xc60}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4) 2.452526762s ago: executing program 3 (id=3201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x2000007}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}, {0x95, 0x0, 0xf00}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94) 2.185364945s ago: executing program 3 (id=3202): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000028dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x20000000) 1.935603341s ago: executing program 3 (id=3203): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0xa00) 1.617037285s ago: executing program 1 (id=3204): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1, 0x0, 0x20}, 0x28) 1.394251926s ago: executing program 1 (id=3205): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, r0, 0x3, 0x3, 0x2}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000480)=""/159, 0x9f}, {&(0x7f0000000540)=""/108, 0x6c}], 0x3}, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0xffffffff, 0xd, 0xc6f, 0x10041, r1, 0x9, '\x00', r2, r1, 0x4, 0x5, 0x1, 0x3, @void, @value, @value=r1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x52674331, 0x6, 0x1, 0x8, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x3, 0x3, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000440), 0x3d) 1.381097294s ago: executing program 0 (id=3206): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd, 0x10, 0x0, 0x17}, 0x48) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) 1.106807575s ago: executing program 2 (id=3207): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000800) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) (async, rerun: 32) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="ef", 0x1}], 0x1}, 0x40000) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x9) close(0x3) (async) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="c13c5e5efa4031276efc54fe714830d1ad866797f31f1572560af46c52d68dc6687ccfc2df4177d54e6acce2b2e7513eff226171a84eb6a2f3789986", 0x3c}, {&(0x7f0000000480)="d053c7e37f8e8af91b539003a096d78a3e238fbf4b3f07feb157149cd884cbc38e315918c28f8667f88cd45cfa76cb55fafb095203a944e6d3d193d589df359f949ed2f96742afa8cd297affeb3a6af03faa7e8e76c8d96c7836f787f24100", 0x5f}, {&(0x7f0000000400)="4a7c0fa6397cc259b2ae277533389d840e807ca70b0b53a79e0d00be456079c700b7eaec97922d97198bd121518bfe08ce1b3b6636779a", 0x37}], 0x3, &(0x7f0000000800)=[{0x80, 0x10c, 0x100020, "1df86b2d353a75c8a9cfb12925cd506b3319393a50817a4d55a83e677fe131fa8ac203fbd0f2c0568305e9248f073602823f4cc97663cbd1cc49961de507e38ccc5eebe612533dff0c4a418510e2bc054648bcd20b375df32eb8aa7d5d0e31d890894204ec1222e8793482ad"}, {0xf0, 0x104, 0x8, "31304b1a5c7a0c01114085e8a6b1b209a7b6a1ac6869511e31d9ad6ab5624bd223c1b313313906dbde5a3c28301c2a51ab28672ba3f192ab8562c19ba1d21d145b7a888350acb97e5d543002720067f01cb3c78343e95873f0b64df27c9d435e4824cbcfadb8eef70602e53a299fedaa01e4bd8c8818eec1f50fc19a175f3da03521b331a4bbe0caaafba72be17e742234ecf2432f1f15e79e6d7ec86ca5a9196bd3bf8a577be77e187f8264f306f02c30791e6e6eeb4d7300a06ab819eaaa6f2697590ad2002c962805acf32b8b9f3a4d207265d9b9f21867c5207f62"}, {0xe8, 0x103, 0x0, "63f8498e1576922e0bd543260255d554d25bb3798b5861d129d35e47d72fc3df4e06e6bf984e207bd48ab898e20d7b907e571b35f13a7c3e78712385638caae0266d9ca5901c9cb489d2452325bc80efa9cf56f3c2d5e77cfaa4730ce7b92debadff15656231795c5b37ea3ad3c257aa6ad571f009863ec4f52175cc8a13c95151ffc513486848f23d5a5276ce79f29fc2c99ad86e1a5f3e8149d4dd25ce38c0bbeb6f0eacd482507d4bb4b029f97d285900a1839a6de22af15a7e6901e9699bd741511ca53e9fde469e7a533c3162863a25b78c82233867"}, {0xf0, 0x112, 0x521c144c, "6a75a877f4b294710877c7c99c4148a4fef66ed5e1c6461db0be6a8484be8cac97416fc40bd8463c122929cf2b62c750c714a9592beb656ad4b685cde6757c862853927f576331fcbeca155188260b62c58447a656012e00f383730b247a20d84dcf7b787d6dc7e89c8c9c2cb3e4626328d3127d01fdcda2198e21815fe036c6c1f99fe31da78e94e1c5d51999f23dae35568d8c8305964ecf58bcaa5b5a96ba38476bacc32135f364e8832bad2fc9abb31a15ff0d66a80880ce7d1c05c3098b45b0e9aab1ff811761e3451dac0ab07ff197abf7d33700d6b2"}], 0x348}, 0x20000004) (async) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x84c01, 0x0) (rerun: 64) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000240)) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) (async) r11 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1.0225838s ago: executing program 0 (id=3208): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2000}, 0x48002) 996.282516ms ago: executing program 3 (id=3209): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x4, 0xb, 0x0, 0x8, 0x0, 0x1000, 0x10520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x800, 0x8000000000000001, 0x77d, 0x5, 0x1ff, 0x8, 0x3, 0x0, 0x29a1, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r0, 0x4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x6, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x2, 0xc8}, 0xffffffffffffffff, 0x0, r1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000900)="e027", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600), 0x1}, 0x40010040) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r4, &(0x7f0000000000)="b563c4dc2f4c", 0x0}, 0x20) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000200)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)}, {&(0x7f0000000280)="a063fc3636bc0dea6e3aad70b35a02df93ed44807c7d9f409471dc93e7d6c04b78ad6aad2710e4a1ca45ab9ecce4d8d26e8f31460d0183d7d6da29a38826b0057de7860062ca3801d4c11a3a45d3fe3aa38005a92ce08fb099ad61c0c5b119b549d19f1bd3f14c2cfa87542ea61996fd8b7902223885de9e45c1d2105ffe3269995bb3d2371e702465c4249512484b14b9f7988997fdf9adda3a10c2a363889b84dc277605731750497df73c93737fa004aad8ca9cc5ed4376979d8f2e15333e552270d1d46f2bd506cd09171b5c946bf382168be2fa007470ef9a453f3bf5", 0xdf}, {&(0x7f0000000440)="17882cb396542dc11e3ca96c0b69e97039fdbfc01b6e3376b13a2b", 0x1b}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x288}, 0x44) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000008c0)={&(0x7f0000000800)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x3}}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000940)="cb713c440dc3dae9cce7b049f7d0e74d923d7e84d2dcd70a1c6d87d8621dc6aa647286335994015632ea146e86514a95d517ca398810ec2c4d2840eb7b2bd4c93218b33c666dc64708b4b2769a0f7527d2b8f2d9fde64eb36bc782b4c1cccb3da970775e031c65cfe4569932207b165b788533142f430b60a685815c08a1fe2e09a8fca26212641a385171620dcf847c9e31944aba2b51787e3306dec5e0cadd9a665b1392771a5438b8e013621d342d5e231dc287bd32d08c76075d3aaf30c826ad14a9e14eb58d0b171d94fbb44f362cba", 0xd2}, {&(0x7f0000000840)}], 0x2, &(0x7f0000000a40)="2bda7f83484b68b25e9415d9beadcac8a0f6f52c51548dac74ed79ac937d0cdde909fb637d02928dc072e0eba844aec76c57ad83bc399f0cfcc6d14b57b79fd2ca192dddd0306d675cf89eb158f16671d301e92dbba346c48a9996e81423ffe082d211334a68683130cc49b55207057cc3e96edccfa2333b36c44e518d690fa96ae1bb09cad12c6b815d6728ced2cf2fa41332108350fc177933cd9d52892f7dfa42c7356a98eb4690412aa4a22935574769b9d1ca119b065d4e8bec5e814866081468131680794ff59e267b6501eb0b66e21ef833ba879ef744a95b162b0792655eff58202c4ce33b", 0xe9, 0x4000000}, 0x840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xf) ioctl$TUNSETLINK(r8, 0x400454cd, 0x308) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000)=r9, 0x10) 901.090979ms ago: executing program 0 (id=3210): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) (async) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc72380000000001000000fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000840)="8d03cab9cbe923f2ab88", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) (async) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x1}, {0x2}], 0x10, 0xfffffffe}, 0x94) (async) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) (async) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x3000000, 0x4539}]}]}, {0x0, [0x30, 0x5f, 0x61]}}, &(0x7f0000000080)=""/70, 0x31, 0x46, 0x1, 0x42d0afbf}, 0x28) (async) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r3, 0x0, r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) (async) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=0x0], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfffffffffffffdf4) 774.454457ms ago: executing program 1 (id=3211): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x4000}, 0x80) 736.68988ms ago: executing program 0 (id=3212): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069103c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x20, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 655.041145ms ago: executing program 3 (id=3213): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff0200003b0000000000000000000001"], 0xfdef) 598.331456ms ago: executing program 1 (id=3214): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001640), 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3, 0x25c}, {0x34, 0x0, 0x9, 0xfffffffe}, {}, {0x0, 0x3}, {0x6, 0x0, 0xff, 0x8000}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000009c0)={&(0x7f0000000500)=@name, 0x10, 0x0}, 0x40045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) 597.922795ms ago: executing program 2 (id=3215): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0056, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x7}, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 541.820145ms ago: executing program 0 (id=3216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x60000000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000b0000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000414000000b7030000400100000000000057bdf9bc8500000000005509010000000000950000000000000018120000cb3bf407e3f652057d6184e79207a2618137f91507c43d294607de8240cef5ae2195a229c75fc1a1d5de81d5b2f2", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 468.468353ms ago: executing program 3 (id=3217): socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=3218): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={r2, 0x3, 0x14}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000001f7dc0d8000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000001f7dc0d8000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffecd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000380)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)=r9}, 0x20) kernel console output (not intermixed with test programs): egistering): left promiscuous mode [ 405.586311][T11987] Ÿë: port 1(ip6gretap0) entered disabled state [ 405.993726][T12636] netlink: 'syz.2.2452': attribute type 10 has an invalid length. [ 406.053514][T12636] team0: Device ipvlan1 failed to register rx_handler [ 406.254755][T12554] hsr_slave_0: entered promiscuous mode [ 406.278072][T12554] hsr_slave_1: entered promiscuous mode [ 406.369931][T12640] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2452'. [ 406.951185][T12660] -1: renamed from syzkaller0 [ 407.097634][ T5089] Bluetooth: hci2: command tx timeout [ 407.470372][T12670] netlink: 'syz.3.2456': attribute type 33 has an invalid length. [ 407.482036][T12670] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2456'. [ 407.929549][T12554] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.972826][T12554] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.031496][T12554] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 408.095098][T12554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 408.454415][T12691] warn_alloc: 8 callbacks suppressed [ 408.454448][T12691] syz.1.2461: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 408.505146][T12691] CPU: 0 PID: 12691 Comm: syz.1.2461 Not tainted syzkaller #0 [ 408.512769][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.522875][T12691] Call Trace: [ 408.526218][T12691] [ 408.529267][T12691] dump_stack_lvl+0x18c/0x250 [ 408.534016][T12691] ? show_regs_print_info+0x20/0x20 [ 408.539280][T12691] ? load_image+0x400/0x400 [ 408.543835][T12691] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.550305][T12691] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 408.556892][T12691] warn_alloc+0x246/0x340 [ 408.561281][T12691] ? stack_trace_save+0xaa/0x100 [ 408.566274][T12691] ? zone_watermark_ok_safe+0x230/0x230 [ 408.571894][T12691] ? kasan_set_track+0x5f/0x70 [ 408.576708][T12691] ? kasan_set_track+0x4e/0x70 [ 408.581554][T12691] ? __kasan_kmalloc+0x8f/0xa0 [ 408.586345][T12691] ? xsk_init_queue+0xad/0x100 [ 408.591156][T12691] ? xsk_setsockopt+0x4e5/0x760 [ 408.596039][T12691] ? do_sock_setsockopt+0x175/0x1a0 [ 408.601272][T12691] ? __x64_sys_setsockopt+0x182/0x200 [ 408.606687][T12691] __vmalloc_node_range+0x126/0x1330 [ 408.612032][T12691] ? free_vm_area+0x50/0x50 [ 408.616579][T12691] vmalloc_user+0x74/0x80 [ 408.620935][T12691] ? xskq_create+0xbf/0x170 [ 408.625494][T12691] xskq_create+0xbf/0x170 [ 408.629858][T12691] xsk_init_queue+0xad/0x100 [ 408.634484][T12691] xsk_setsockopt+0x4e5/0x760 [ 408.639194][T12691] ? xsk_poll+0x680/0x680 [ 408.643542][T12691] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.649720][T12691] ? xsk_poll+0x680/0x680 [ 408.654075][T12691] ? xsk_poll+0x680/0x680 [ 408.658424][T12691] do_sock_setsockopt+0x175/0x1a0 [ 408.663478][T12691] ? __fdget+0x180/0x210 [ 408.667838][T12691] __x64_sys_setsockopt+0x182/0x200 [ 408.673069][T12691] do_syscall_64+0x55/0xa0 [ 408.677514][T12691] ? clear_bhb_loop+0x40/0x90 [ 408.682218][T12691] ? clear_bhb_loop+0x40/0x90 [ 408.686920][T12691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.692859][T12691] RIP: 0033:0x7f0a8819c799 [ 408.697295][T12691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.716926][T12691] RSP: 002b:00007f0a8907b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.725368][T12691] RAX: ffffffffffffffda RBX: 00007f0a88415fa0 RCX: 00007f0a8819c799 [ 408.733359][T12691] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 408.741349][T12691] RBP: 00007f0a88232bd9 R08: 0000000000000004 R09: 0000000000000000 [ 408.749337][T12691] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 408.757323][T12691] R13: 00007f0a88416038 R14: 00007f0a88415fa0 R15: 00007ffd48d29d28 [ 408.765334][T12691] [ 408.784441][T12691] Mem-Info: [ 408.788615][T12691] active_anon:5431 inactive_anon:0 isolated_anon:0 [ 408.788615][T12691] active_file:18954 inactive_file:40058 isolated_file:0 [ 408.788615][T12691] unevictable:768 dirty:189 writeback:0 [ 408.788615][T12691] slab_reclaimable:10618 slab_unreclaimable:92836 [ 408.788615][T12691] mapped:24616 shmem:1361 pagetables:529 [ 408.788615][T12691] sec_pagetables:0 bounce:0 [ 408.788615][T12691] kernel_misc_reclaimable:0 [ 408.788615][T12691] free:1346643 free_pcp:8256 free_cma:0 [ 408.847464][T11987] hsr_slave_0: left promiscuous mode [ 408.861828][T12691] Node 0 active_anon:21796kB inactive_anon:0kB active_file:75816kB inactive_file:160028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98436kB dirty:756kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11308kB pagetables:2212kB sec_pagetables:0kB all_unreclaimable? no [ 408.885670][T11987] hsr_slave_1: left promiscuous mode [ 408.909617][T11987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.917280][T12691] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 408.951541][T11987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.960441][T11987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.960915][T12691] Node 0 [ 408.972964][T11987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.976731][T12691] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.014217][T12691] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 409.022884][T12691] Node 0 DMA32 free:1476432kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21560kB inactive_anon:0kB active_file:75816kB inactive_file:159192kB unevictable:1536kB writepending:752kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:13804kB local_pcp:11180kB free_cma:0kB [ 409.036418][T11987] bridge_slave_1: left allmulticast mode [ 409.075171][T12691] lowmem_reserve[]: 0 0 0 0 0 [ 409.080582][T11987] bridge_slave_1: left promiscuous mode [ 409.080784][T11987] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.107321][T12691] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.171352][T11987] veth1_macvtap: left promiscuous mode [ 409.177669][ T5089] Bluetooth: hci2: command tx timeout [ 409.211330][T12691] lowmem_reserve[]: 0 0 0 0 0 [ 409.223461][T12691] Node 1 Normal free:3894780kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19000kB local_pcp:8404kB free_cma:0kB [ 409.254736][T12691] lowmem_reserve[]: 0 0 0 0 0 [ 409.260748][T12691] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.276170][T12691] Node 0 DMA32: 344*4kB (ME) 1060*8kB (UME) 819*16kB (ME) 595*32kB (UME) 369*64kB (UME) 300*128kB (UME) 77*256kB (UME) 54*512kB (UME) 26*1024kB (UM) 10*2048kB (UM) 312*4096kB (UM) = 1476432kB [ 409.300305][T12691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 409.313902][T12691] Node 1 Normal: 183*4kB (UE) 42*8kB (UME) 33*16kB (UME) 42*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3894780kB [ 409.333943][T12691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.344289][T12691] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.354480][T12691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.364970][T12691] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.375232][T12691] 60373 total pagecache pages [ 409.380620][T12691] 0 pages in swap cache [ 409.387079][T12691] Free swap = 124996kB [ 409.392254][T12691] Total swap = 124996kB [ 409.396773][T12691] 2097051 pages RAM [ 409.401449][T12691] 0 pages HighMem/MovableOnly [ 409.406435][T12691] 416922 pages reserved [ 409.411618][T12691] 0 pages cma reserved [ 409.944456][T11987] team0 (unregistering): Port device team_slave_1 removed [ 409.989536][T11987] team0 (unregistering): Port device team_slave_0 removed [ 410.034006][T11987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.078324][T11987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.388418][T11987] bond0 (unregistering): Released all slaves [ 410.485483][T12693] netlink: 'syz.1.2461': attribute type 16 has an invalid length. [ 410.493739][T12693] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2461'. [ 410.502877][T12693] veth1_macvtap: entered allmulticast mode [ 410.732991][T12554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.786508][T12554] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.842367][T12005] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.849812][T12005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.896623][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.903842][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.247680][ T5089] Bluetooth: hci2: command tx timeout [ 411.448661][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.576112][T12554] veth0_vlan: entered promiscuous mode [ 411.617176][T12554] veth1_vlan: entered promiscuous mode [ 411.740361][T12554] veth0_macvtap: entered promiscuous mode [ 411.772211][T12554] veth1_macvtap: entered promiscuous mode [ 411.863627][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.884618][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.895647][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.906239][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.919093][T12554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.926555][T12745] netlink: 'syz.2.2473': attribute type 16 has an invalid length. [ 411.938500][T12745] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2473'. [ 411.955308][T12745] veth1_macvtap: entered allmulticast mode [ 411.997328][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.027421][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.044869][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.071614][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.084723][T12554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.159259][T12554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.168404][T12554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.177180][T12554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.186701][T12554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.599214][T11981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.607140][T11981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.697848][T11981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.706409][T11981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.856879][T12771] delete_channel: no stack [ 413.061736][T12776] netlink: 'syz.0.2483': attribute type 16 has an invalid length. [ 413.084552][T12776] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2483'. [ 413.103142][T12776] veth1_macvtap: entered allmulticast mode [ 414.057681][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 414.068779][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 414.079374][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 414.093070][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 414.105487][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 414.115105][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 414.501027][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.592519][T12800] netlink: 'syz.0.2493': attribute type 16 has an invalid length. [ 414.601327][T12800] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2493'. [ 414.653543][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.773901][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.836439][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.003036][T12789] chnl_net:caif_netlink_parms(): no params data found [ 415.230712][T12789] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.238435][T12789] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.245767][T12789] bridge_slave_0: entered allmulticast mode [ 415.253742][T12789] bridge_slave_0: entered promiscuous mode [ 415.264539][T12789] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.273035][T12789] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.284522][T12789] bridge_slave_1: entered allmulticast mode [ 415.309543][T12789] bridge_slave_1: entered promiscuous mode [ 415.448043][T12789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.536235][T12789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.381297][ T5789] Bluetooth: hci0: command tx timeout [ 416.603403][T12789] team0: Port device team_slave_0 added [ 416.646245][T12789] team0: Port device team_slave_1 added [ 416.794635][T12789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.815824][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.850459][T12789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.865238][T12789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.888667][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.922214][T12789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.047713][T12834] netlink: 'syz.1.2507': attribute type 8 has an invalid length. [ 417.056215][T12834] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2507'. [ 417.335215][T12789] hsr_slave_0: entered promiscuous mode [ 417.358130][T12789] hsr_slave_1: entered promiscuous mode [ 417.378963][T12789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.406008][T12789] Cannot create hsr debugfs directory [ 417.549121][T12850] netlink: 'syz.1.2502': attribute type 16 has an invalid length. [ 417.597505][T12850] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2502'. [ 417.910276][T12858] netlink: 'syz.0.2504': attribute type 10 has an invalid length. [ 418.013237][T12858] veth0_vlan: left promiscuous mode [ 418.084155][T12858] veth0_vlan: entered promiscuous mode [ 418.095509][T12858] team0: Device veth0_vlan failed to register rx_handler [ 418.447686][ T5789] Bluetooth: hci0: command tx timeout [ 419.435799][ T42] hsr_slave_0: left promiscuous mode [ 419.444035][ T42] hsr_slave_1: left promiscuous mode [ 419.452393][ T42] bridge_slave_1: left allmulticast mode [ 419.461371][ T42] bridge_slave_1: left promiscuous mode [ 419.467288][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.491341][ T42] veth1_vlan: left promiscuous mode [ 420.081617][ T42] team0 (unregistering): Port device macvlan0 removed [ 420.537723][ T5789] Bluetooth: hci0: command tx timeout [ 420.608593][ T42] team0 (unregistering): Port device team_slave_1 removed [ 420.664343][ T42] team0 (unregistering): Port device team_slave_0 removed [ 420.969915][ T42] team0 (unregistering): Port device dummy0 removed [ 421.093525][T12789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 421.122019][T12886] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 421.131556][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.139618][T12886] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.160213][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.167519][T12886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.175087][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.182352][T12886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.196396][T12886] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 421.442571][T12789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 421.461566][T12789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.496895][T12789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.747663][T12907] netlink: 'syz.1.2513': attribute type 16 has an invalid length. [ 421.765746][T12907] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2513'. [ 421.854072][T12789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.869706][T12910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2516'. [ 421.922757][T12789] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.982625][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.989911][T11992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.030108][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.037526][T11992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.607874][ T5789] Bluetooth: hci0: command tx timeout [ 422.803957][T12789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.005657][T12789] veth0_vlan: entered promiscuous mode [ 423.062721][T12789] veth1_vlan: entered promiscuous mode [ 423.160271][T12789] veth0_macvtap: entered promiscuous mode [ 423.175518][T12789] veth1_macvtap: entered promiscuous mode [ 423.220768][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.247561][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.279530][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.307913][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.332074][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.354128][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.373173][T12789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.423368][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.448177][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.477552][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.507567][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.528568][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.551584][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.573443][T12789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.594864][T12954] netlink: 'syz.2.2524': attribute type 16 has an invalid length. [ 423.632233][T12954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2524'. [ 423.676949][T12789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.700063][T12789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.718277][T12789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.737427][T12789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.099062][T12964] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.209687][T11987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.242248][T11987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.324404][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 424.334732][T12005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.347277][T12005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.062204][T12992] netlink: 'syz.1.2533': attribute type 16 has an invalid length. [ 425.186962][T12992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2533'. [ 425.506756][T12999] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.950301][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2539'. [ 426.040824][T13006] netlink: 'syz.0.2538': attribute type 29 has an invalid length. [ 426.226871][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2539'. [ 426.240646][T13006] netlink: 'syz.0.2538': attribute type 29 has an invalid length. [ 426.265022][T13010] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2539'. [ 428.068474][T13021] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2543'. [ 428.082185][T13024] netlink: 'syz.2.2545': attribute type 16 has an invalid length. [ 428.091370][T13024] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2545'. [ 428.463721][T13032] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.898976][T13049] FAULT_INJECTION: forcing a failure. [ 428.898976][T13049] name failslab, interval 1, probability 0, space 0, times 0 [ 428.926207][T13049] CPU: 0 PID: 13049 Comm: syz.0.2554 Not tainted syzkaller #0 [ 428.933779][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.943958][T13049] Call Trace: [ 428.947283][T13049] [ 428.950254][T13049] dump_stack_lvl+0x18c/0x250 [ 428.954957][T13049] ? show_regs_print_info+0x20/0x20 [ 428.960174][T13049] ? load_image+0x400/0x400 [ 428.964691][T13049] ? verify_lock_unused+0x140/0x140 [ 428.969914][T13049] should_fail_ex+0x39d/0x4d0 [ 428.974634][T13049] should_failslab+0x9/0x20 [ 428.979159][T13049] slab_pre_alloc_hook+0x59/0x310 [ 428.984209][T13049] kmem_cache_alloc+0x5a/0x2d0 [ 428.988992][T13049] ? skb_clone+0x1eb/0x370 [ 428.993531][T13049] skb_clone+0x1eb/0x370 [ 428.997829][T13049] __netlink_deliver_tap+0x41c/0x830 [ 429.003189][T13049] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.008436][T13049] netlink_deliver_tap+0x19c/0x1b0 [ 429.013574][T13049] netlink_unicast+0x72c/0x8d0 [ 429.018368][T13049] netlink_sendmsg+0x8d0/0xbf0 [ 429.023156][T13049] ? netlink_getsockopt+0x590/0x590 [ 429.028382][T13049] ? aa_sock_msg_perm+0x94/0x150 [ 429.033349][T13049] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.038656][T13049] ? security_socket_sendmsg+0x80/0xa0 [ 429.044163][T13049] ? netlink_getsockopt+0x590/0x590 [ 429.049415][T13049] ____sys_sendmsg+0x5ba/0x960 [ 429.054205][T13049] ? __asan_memset+0x22/0x40 [ 429.058903][T13049] ? __sys_sendmsg_sock+0x30/0x30 [ 429.063944][T13049] ? __import_iovec+0x5f2/0x850 [ 429.068846][T13049] ? import_iovec+0x73/0xa0 [ 429.073389][T13049] ___sys_sendmsg+0x2a6/0x360 [ 429.078087][T13049] ? get_pid_task+0x20/0x1e0 [ 429.082731][T13049] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.087542][T13049] ? __lock_acquire+0x7d40/0x7d40 [ 429.092669][T13049] __se_sys_sendmsg+0x1c2/0x2b0 [ 429.097547][T13049] ? __x64_sys_sendmsg+0x80/0x80 [ 429.102514][T13049] ? lockdep_hardirqs_on+0x98/0x150 [ 429.107761][T13049] do_syscall_64+0x55/0xa0 [ 429.112209][T13049] ? clear_bhb_loop+0x40/0x90 [ 429.116913][T13049] ? clear_bhb_loop+0x40/0x90 [ 429.121618][T13049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.127551][T13049] RIP: 0033:0x7f18cc59c799 [ 429.131994][T13049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.151628][T13049] RSP: 002b:00007f18ca7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.160068][T13049] RAX: ffffffffffffffda RBX: 00007f18cc815fa0 RCX: 00007f18cc59c799 [ 429.168065][T13049] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 429.176057][T13049] RBP: 00007f18ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.184060][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.192049][T13049] R13: 00007f18cc816038 R14: 00007f18cc815fa0 R15: 00007ffd857423d8 [ 429.200065][T13049] [ 429.231171][T13051] FAULT_INJECTION: forcing a failure. [ 429.231171][T13051] name failslab, interval 1, probability 0, space 0, times 0 [ 429.244127][T13051] CPU: 0 PID: 13051 Comm: syz.2.2552 Not tainted syzkaller #0 [ 429.251631][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.261723][T13051] Call Trace: [ 429.265033][T13051] [ 429.267996][T13051] dump_stack_lvl+0x18c/0x250 [ 429.272718][T13051] ? show_regs_print_info+0x20/0x20 [ 429.277957][T13051] ? load_image+0x400/0x400 [ 429.282534][T13051] should_fail_ex+0x39d/0x4d0 [ 429.287295][T13051] should_failslab+0x9/0x20 [ 429.291858][T13051] slab_pre_alloc_hook+0x59/0x310 [ 429.296936][T13051] kmem_cache_alloc+0x5a/0x2d0 [ 429.301748][T13051] ? skb_clone+0x1eb/0x370 [ 429.306215][T13051] skb_clone+0x1eb/0x370 [ 429.310535][T13051] bpf_clone_redirect+0x167/0x4a0 [ 429.315631][T13051] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 429.321137][T13051] ? __static_call_text_end+0x114530/0x114530 [ 429.327258][T13051] ? lockdep_hardirqs_on+0x98/0x150 [ 429.332498][T13051] ? preempt_schedule+0xc0/0xd0 [ 429.337392][T13051] ? bpf_test_run+0x174/0x870 [ 429.342106][T13051] ? preempt_schedule_common+0x82/0xc0 [ 429.347598][T13051] ? schedule_preempt_disabled+0x20/0x20 [ 429.353274][T13051] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 429.359348][T13051] ? lockdep_softirqs_on+0x580/0x580 [ 429.364673][T13051] ? lock_chain_count+0x20/0x20 [ 429.369556][T13051] ? preempt_schedule_thunk+0x1a/0x30 [ 429.374976][T13051] ? __local_bh_disable_ip+0x108/0x1a0 [ 429.380465][T13051] ? __cant_sleep+0x220/0x220 [ 429.385172][T13051] ? __local_bh_enable_ip+0x14b/0x1c0 [ 429.390574][T13051] ? _local_bh_enable+0xa0/0xa0 [ 429.395449][T13051] ? bpf_test_timer_continue+0x135/0x380 [ 429.401129][T13051] ? bpf_test_run+0x174/0x870 [ 429.405837][T13051] bpf_test_run+0x2df/0x870 [ 429.410379][T13051] ? bpf_test_run+0x174/0x870 [ 429.415092][T13051] ? convert___skb_to_skb+0x590/0x590 [ 429.420509][T13051] ? eth_get_headlen+0x210/0x210 [ 429.425485][T13051] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 429.431055][T13051] ? convert___skb_to_skb+0x3d/0x590 [ 429.436363][T13051] bpf_prog_test_run_skb+0xad2/0x12b0 [ 429.441783][T13051] ? cpu_online+0x60/0x60 [ 429.446133][T13051] bpf_prog_test_run+0x321/0x390 [ 429.451096][T13051] __sys_bpf+0x49d/0x890 [ 429.455377][T13051] ? bpf_link_show_fdinfo+0x390/0x390 [ 429.460776][T13051] ? lock_chain_count+0x20/0x20 [ 429.465642][T13051] __x64_sys_bpf+0x7c/0x90 [ 429.470089][T13051] do_syscall_64+0x55/0xa0 [ 429.474545][T13051] ? clear_bhb_loop+0x40/0x90 [ 429.479240][T13051] ? clear_bhb_loop+0x40/0x90 [ 429.483942][T13051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.489859][T13051] RIP: 0033:0x7ff95ab9c799 [ 429.494302][T13051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.513925][T13051] RSP: 002b:00007ff95b980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.522367][T13051] RAX: ffffffffffffffda RBX: 00007ff95ae16090 RCX: 00007ff95ab9c799 [ 429.530359][T13051] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 429.538370][T13051] RBP: 00007ff95b980090 R08: 0000000000000000 R09: 0000000000000000 [ 429.546369][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.554370][T13051] R13: 00007ff95ae16128 R14: 00007ff95ae16090 R15: 00007ffe420975c8 [ 429.562387][T13051] [ 429.764879][T13054] netlink: 'syz.0.2555': attribute type 16 has an invalid length. [ 429.779851][T13054] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2555'. [ 430.089658][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2561'. [ 430.115344][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2561'. [ 430.135228][T13068] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2561'. [ 430.232186][T13075] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2565'. [ 430.516690][T13085] netlink: 'syz.0.2569': attribute type 16 has an invalid length. [ 430.526898][T13085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2569'. [ 431.543073][T13111] netlink: 'syz.2.2578': attribute type 9 has an invalid length. [ 431.577940][T13111] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2578'. [ 431.642496][T13116] netlink: 'syz.1.2580': attribute type 16 has an invalid length. [ 431.654374][T13116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2580'. [ 431.728169][T13118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.141827][T13135] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2587'. [ 432.245687][T13135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.449747][T13141] netlink: 'syz.3.2590': attribute type 16 has an invalid length. [ 432.466138][T13141] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2590'. [ 432.476989][T13141] veth1_macvtap: entered allmulticast mode [ 432.908349][T13162] netlink: 'syz.2.2598': attribute type 6 has an invalid length. [ 433.462202][T13170] netlink: 'syz.0.2602': attribute type 10 has an invalid length. [ 433.472360][T13170] veth0_macvtap: left promiscuous mode [ 433.614450][T13176] netlink: 'syz.3.2604': attribute type 16 has an invalid length. [ 434.080999][T13196] netlink: 'syz.1.2610': attribute type 10 has an invalid length. [ 434.307816][T13196] veth0_vlan: left promiscuous mode [ 434.357042][T13196] veth0_vlan: entered promiscuous mode [ 434.374367][T13196] team0: Device veth0_vlan failed to register rx_handler [ 434.579498][T13207] tc_dump_action: action bad kind [ 434.585269][T13208] netlink: 'syz.2.2615': attribute type 16 has an invalid length. [ 434.976357][T13217] FAULT_INJECTION: forcing a failure. [ 434.976357][T13217] name failslab, interval 1, probability 0, space 0, times 0 [ 434.989551][T13217] CPU: 1 PID: 13217 Comm: syz.1.2619 Not tainted syzkaller #0 [ 434.997064][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.007167][T13217] Call Trace: [ 435.010495][T13217] [ 435.013465][T13217] dump_stack_lvl+0x18c/0x250 [ 435.018211][T13217] ? show_regs_print_info+0x20/0x20 [ 435.023485][T13217] ? load_image+0x400/0x400 [ 435.028043][T13217] ? perf_tp_event+0x132d/0x1450 [ 435.033132][T13217] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 435.039002][T13217] should_fail_ex+0x39d/0x4d0 [ 435.043742][T13217] should_failslab+0x9/0x20 [ 435.048304][T13217] slab_pre_alloc_hook+0x59/0x310 [ 435.053406][T13217] kmem_cache_alloc+0x5a/0x2d0 [ 435.058230][T13217] ? skb_clone+0x1eb/0x370 [ 435.062700][T13217] skb_clone+0x1eb/0x370 [ 435.067000][T13217] bpf_clone_redirect+0x167/0x4a0 [ 435.072106][T13217] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 435.077632][T13217] ? perf_output_read+0xa20/0x14c0 [ 435.082807][T13217] ? perf_trace_preemptirq_template+0x269/0x330 [ 435.089130][T13217] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 435.095174][T13217] ? lockdep_softirqs_on+0x580/0x580 [ 435.100507][T13217] ? lock_chain_count+0x20/0x20 [ 435.105406][T13217] ? __local_bh_disable_ip+0x108/0x1a0 [ 435.110930][T13217] ? __cant_sleep+0x220/0x220 [ 435.115637][T13217] ? __local_bh_enable_ip+0x13a/0x1c0 [ 435.121048][T13217] ? _local_bh_enable+0xa0/0xa0 [ 435.125931][T13217] ? bpf_test_timer_continue+0x135/0x380 [ 435.131597][T13217] ? bpf_test_run+0x174/0x870 [ 435.136303][T13217] bpf_test_run+0x2df/0x870 [ 435.140914][T13217] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 435.147097][T13217] ? bpf_test_run+0x174/0x870 [ 435.151852][T13217] ? convert___skb_to_skb+0x590/0x590 [ 435.157269][T13217] ? eth_get_headlen+0x210/0x210 [ 435.162317][T13217] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 435.167915][T13217] ? convert___skb_to_skb+0x3d/0x590 [ 435.173257][T13217] bpf_prog_test_run_skb+0xad2/0x12b0 [ 435.178698][T13217] ? cpu_online+0x60/0x60 [ 435.183072][T13217] bpf_prog_test_run+0x321/0x390 [ 435.188058][T13217] __sys_bpf+0x49d/0x890 [ 435.192344][T13217] ? bpf_link_show_fdinfo+0x390/0x390 [ 435.197773][T13217] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 435.204010][T13217] __x64_sys_bpf+0x7c/0x90 [ 435.208483][T13217] do_syscall_64+0x55/0xa0 [ 435.212984][T13217] ? clear_bhb_loop+0x40/0x90 [ 435.217711][T13217] ? clear_bhb_loop+0x40/0x90 [ 435.222438][T13217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.228360][T13217] RIP: 0033:0x7f0a8819c799 [ 435.232800][T13217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.252435][T13217] RSP: 002b:00007f0a8907b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.260885][T13217] RAX: ffffffffffffffda RBX: 00007f0a88415fa0 RCX: 00007f0a8819c799 [ 435.268883][T13217] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 435.276876][T13217] RBP: 00007f0a8907b090 R08: 0000000000000000 R09: 0000000000000000 [ 435.284876][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.292873][T13217] R13: 00007f0a88416038 R14: 00007f0a88415fa0 R15: 00007ffd48d29d28 [ 435.300879][T13217] [ 435.832940][T13236] netlink: 'syz.2.2627': attribute type 16 has an invalid length. [ 435.849515][T13238] __nla_validate_parse: 3 callbacks suppressed [ 435.849534][T13238] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2628'. [ 435.858225][T13236] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2627'. [ 436.875372][T13258] FAULT_INJECTION: forcing a failure. [ 436.875372][T13258] name failslab, interval 1, probability 0, space 0, times 0 [ 436.932323][T13258] CPU: 1 PID: 13258 Comm: syz.1.2635 Not tainted syzkaller #0 [ 436.939868][T13258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.949959][T13258] Call Trace: [ 436.953271][T13258] [ 436.956239][T13258] dump_stack_lvl+0x18c/0x250 [ 436.961003][T13258] ? show_regs_print_info+0x20/0x20 [ 436.966260][T13258] ? load_image+0x400/0x400 [ 436.970818][T13258] ? __might_sleep+0xe0/0xe0 [ 436.975454][T13258] ? __lock_acquire+0x7d40/0x7d40 [ 436.980538][T13258] should_fail_ex+0x39d/0x4d0 [ 436.985308][T13258] should_failslab+0x9/0x20 [ 436.989912][T13258] slab_pre_alloc_hook+0x59/0x310 [ 436.995008][T13258] kmem_cache_alloc+0x5a/0x2d0 [ 436.999840][T13258] ? skb_clone+0x1eb/0x370 [ 437.004315][T13258] skb_clone+0x1eb/0x370 [ 437.008600][T13258] ? pfkey_broadcast_one+0x7d/0x340 [ 437.013933][T13258] pfkey_broadcast_one+0x9b/0x340 [ 437.019053][T13258] ? pfkey_broadcast+0x39c/0x3e0 [ 437.024051][T13258] pfkey_broadcast+0x3a9/0x3e0 [ 437.028877][T13258] ? pfkey_broadcast+0x48/0x3e0 [ 437.033786][T13258] pfkey_sendmsg+0xe92/0x10e0 [ 437.038532][T13258] ? __might_sleep+0xe0/0xe0 [ 437.043183][T13258] ? aa_sk_perm+0xb4/0x970 [ 437.047654][T13258] ? pfkey_release+0x320/0x320 [ 437.052514][T13258] ? aa_sock_msg_perm+0x94/0x150 [ 437.057517][T13258] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 437.062846][T13258] ? security_socket_sendmsg+0x80/0xa0 [ 437.068351][T13258] ? pfkey_release+0x320/0x320 [ 437.073163][T13258] ____sys_sendmsg+0x5ba/0x960 [ 437.077977][T13258] ? __asan_memset+0x22/0x40 [ 437.082618][T13258] ? __sys_sendmsg_sock+0x30/0x30 [ 437.087686][T13258] ? __import_iovec+0x5f2/0x850 [ 437.092609][T13258] ? import_iovec+0x73/0xa0 [ 437.097170][T13258] ___sys_sendmsg+0x2a6/0x360 [ 437.101893][T13258] ? __sys_sendmsg+0x2a0/0x2a0 [ 437.106768][T13258] __se_sys_sendmsg+0x1c2/0x2b0 [ 437.111666][T13258] ? __x64_sys_sendmsg+0x80/0x80 [ 437.116659][T13258] ? lockdep_hardirqs_on+0x98/0x150 [ 437.121914][T13258] do_syscall_64+0x55/0xa0 [ 437.126375][T13258] ? clear_bhb_loop+0x40/0x90 [ 437.131099][T13258] ? clear_bhb_loop+0x40/0x90 [ 437.135822][T13258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.141757][T13258] RIP: 0033:0x7f0a8819c799 [ 437.146230][T13258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.165877][T13258] RSP: 002b:00007f0a8907b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.174337][T13258] RAX: ffffffffffffffda RBX: 00007f0a88415fa0 RCX: 00007f0a8819c799 [ 437.182350][T13258] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 437.190361][T13258] RBP: 00007f0a8907b090 R08: 0000000000000000 R09: 0000000000000000 [ 437.198368][T13258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.206381][T13258] R13: 00007f0a88416038 R14: 00007f0a88415fa0 R15: 00007ffd48d29d28 [ 437.214418][T13258] [ 437.817021][T13271] netlink: 'syz.1.2640': attribute type 16 has an invalid length. [ 437.874710][T13271] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2640'. [ 438.190094][T13279] delete_channel: no stack [ 438.430091][T13291] netlink: 'syz.0.2646': attribute type 29 has an invalid length. [ 438.482483][T13288] syzkaller0: entered promiscuous mode [ 438.500609][T13288] syzkaller0: entered allmulticast mode [ 438.526867][T13291] netlink: 'syz.0.2646': attribute type 29 has an invalid length. [ 438.550590][T13293] netlink: 'syz.0.2646': attribute type 29 has an invalid length. [ 441.332550][T13311] FAULT_INJECTION: forcing a failure. [ 441.332550][T13311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.372434][T13311] CPU: 0 PID: 13311 Comm: syz.1.2653 Not tainted syzkaller #0 [ 441.379977][T13311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.390146][T13311] Call Trace: [ 441.393455][T13311] [ 441.396437][T13311] dump_stack_lvl+0x18c/0x250 [ 441.401170][T13311] ? show_regs_print_info+0x20/0x20 [ 441.406414][T13311] ? load_image+0x400/0x400 [ 441.410963][T13311] ? __might_fault+0xaa/0x120 [ 441.415684][T13311] ? __lock_acquire+0x7d40/0x7d40 [ 441.420762][T13311] should_fail_ex+0x39d/0x4d0 [ 441.425498][T13311] _copy_from_user+0x2f/0xe0 [ 441.430147][T13311] ___sys_recvmsg+0x176/0x590 [ 441.434874][T13311] ? __sys_recvmsg+0x2a0/0x2a0 [ 441.439691][T13311] ? ksys_write+0x1c4/0x260 [ 441.444254][T13311] ? __fget_files+0x43d/0x4b0 [ 441.449000][T13311] __x64_sys_recvmsg+0x20c/0x2e0 [ 441.453984][T13311] ? ___sys_recvmsg+0x590/0x590 [ 441.458897][T13311] ? lockdep_hardirqs_on+0x98/0x150 [ 441.464141][T13311] do_syscall_64+0x55/0xa0 [ 441.468601][T13311] ? clear_bhb_loop+0x40/0x90 [ 441.473315][T13311] ? clear_bhb_loop+0x40/0x90 [ 441.478038][T13311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.483987][T13311] RIP: 0033:0x7f0a8819c799 [ 441.488534][T13311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.508185][T13311] RSP: 002b:00007f0a8907b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 441.516632][T13311] RAX: ffffffffffffffda RBX: 00007f0a88415fa0 RCX: 00007f0a8819c799 [ 441.524629][T13311] RDX: 0000000040012102 RSI: 00002000000002c0 RDI: 0000000000000003 [ 441.532634][T13311] RBP: 00007f0a8907b090 R08: 0000000000000000 R09: 0000000000000000 [ 441.540638][T13311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.548640][T13311] R13: 00007f0a88416038 R14: 00007f0a88415fa0 R15: 00007ffd48d29d28 [ 441.556651][T13311] [ 441.812188][T13317] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2657'. [ 441.852958][T13322] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 441.881887][T13322] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 441.921749][T13329] FAULT_INJECTION: forcing a failure. [ 441.921749][T13329] name failslab, interval 1, probability 0, space 0, times 0 [ 441.946140][T13329] CPU: 0 PID: 13329 Comm: syz.3.2662 Not tainted syzkaller #0 [ 441.953749][T13329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.963844][T13329] Call Trace: [ 441.967156][T13329] [ 441.970121][T13329] dump_stack_lvl+0x18c/0x250 [ 441.974862][T13329] ? show_regs_print_info+0x20/0x20 [ 441.980113][T13329] ? load_image+0x400/0x400 [ 441.984666][T13329] ? __might_sleep+0xe0/0xe0 [ 441.989308][T13329] ? __lock_acquire+0x7d40/0x7d40 [ 441.994394][T13329] should_fail_ex+0x39d/0x4d0 [ 441.999138][T13329] should_failslab+0x9/0x20 [ 442.003699][T13329] slab_pre_alloc_hook+0x59/0x310 [ 442.008783][T13329] ? kasan_set_track+0x5f/0x70 [ 442.013605][T13329] kmem_cache_alloc_node+0x60/0x320 [ 442.018922][T13329] ? genl_rcv+0x28/0x40 [ 442.023112][T13329] ? __alloc_skb+0x103/0x2c0 [ 442.027738][T13329] __alloc_skb+0x103/0x2c0 [ 442.032217][T13329] netlink_dump+0x1ec/0xe50 [ 442.036785][T13329] ? netlink_lookup+0x200/0x200 [ 442.041716][T13329] ? __asan_memset+0x22/0x40 [ 442.046372][T13329] ? genl_start+0x493/0x6b0 [ 442.050921][T13329] __netlink_dump_start+0x5f1/0x810 [ 442.056174][T13329] genl_family_rcv_msg_dumpit+0x214/0x310 [ 442.061942][T13329] ? genl_rcv_msg+0x7a0/0x7a0 [ 442.066654][T13329] ? genl_get_cmd+0x7f1/0x920 [ 442.071373][T13329] ? genl_family_rcv_msg_doit+0x310/0x310 [ 442.077130][T13329] ? genl_start+0x6b0/0x6b0 [ 442.081657][T13329] ? genl_dumpit+0x1a0/0x1a0 [ 442.086283][T13329] genl_rcv_msg+0x5e5/0x7a0 [ 442.090832][T13329] ? genl_bind+0x360/0x360 [ 442.095307][T13329] ? ovs_vport_cmd_get+0x4b0/0x4b0 [ 442.100446][T13329] ? ref_tracker_free+0x690/0x840 [ 442.105505][T13329] netlink_rcv_skb+0x241/0x4d0 [ 442.110300][T13329] ? genl_bind+0x360/0x360 [ 442.114772][T13329] ? netlink_ack+0x1180/0x1180 [ 442.119602][T13329] ? __lock_acquire+0x7d40/0x7d40 [ 442.124681][T13329] ? down_read+0x1ac/0x2e0 [ 442.129135][T13329] genl_rcv+0x28/0x40 [ 442.133150][T13329] netlink_unicast+0x751/0x8d0 [ 442.137976][T13329] netlink_sendmsg+0x8d0/0xbf0 [ 442.142795][T13329] ? netlink_getsockopt+0x590/0x590 [ 442.148026][T13329] ? aa_sock_msg_perm+0x94/0x150 [ 442.153002][T13329] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 442.158316][T13329] ? security_socket_sendmsg+0x80/0xa0 [ 442.163810][T13329] ? netlink_getsockopt+0x590/0x590 [ 442.169073][T13329] ____sys_sendmsg+0x5ba/0x960 [ 442.173878][T13329] ? __asan_memset+0x22/0x40 [ 442.178496][T13329] ? __sys_sendmsg_sock+0x30/0x30 [ 442.183559][T13329] ? __import_iovec+0x5f2/0x850 [ 442.188523][T13329] ? import_iovec+0x73/0xa0 [ 442.193066][T13329] ___sys_sendmsg+0x2a6/0x360 [ 442.197769][T13329] ? get_pid_task+0x20/0x1e0 [ 442.202401][T13329] ? __sys_sendmsg+0x2a0/0x2a0 [ 442.207217][T13329] ? __lock_acquire+0x7d40/0x7d40 [ 442.212292][T13329] __se_sys_sendmsg+0x1c2/0x2b0 [ 442.217176][T13329] ? __x64_sys_sendmsg+0x80/0x80 [ 442.222158][T13329] ? lockdep_hardirqs_on+0x98/0x150 [ 442.227392][T13329] do_syscall_64+0x55/0xa0 [ 442.231862][T13329] ? clear_bhb_loop+0x40/0x90 [ 442.236578][T13329] ? clear_bhb_loop+0x40/0x90 [ 442.241371][T13329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.247309][T13329] RIP: 0033:0x7fbe00d9c799 [ 442.251768][T13329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.271409][T13329] RSP: 002b:00007fbe01bbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.279882][T13329] RAX: ffffffffffffffda RBX: 00007fbe01015fa0 RCX: 00007fbe00d9c799 [ 442.287890][T13329] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 442.296038][T13329] RBP: 00007fbe01bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 442.304039][T13329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.312040][T13329] R13: 00007fbe01016038 R14: 00007fbe01015fa0 R15: 00007ffd62dfe2c8 [ 442.320060][T13329] [ 442.621313][T13338] FAULT_INJECTION: forcing a failure. [ 442.621313][T13338] name failslab, interval 1, probability 0, space 0, times 0 [ 442.634412][T13338] CPU: 0 PID: 13338 Comm: syz.0.2665 Not tainted syzkaller #0 [ 442.641927][T13338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.652029][T13338] Call Trace: [ 442.655344][T13338] [ 442.658309][T13338] dump_stack_lvl+0x18c/0x250 [ 442.663043][T13338] ? show_regs_print_info+0x20/0x20 [ 442.668302][T13338] ? load_image+0x400/0x400 [ 442.672851][T13338] should_fail_ex+0x39d/0x4d0 [ 442.677569][T13338] should_failslab+0x9/0x20 [ 442.682109][T13338] slab_pre_alloc_hook+0x59/0x310 [ 442.687176][T13338] kmem_cache_alloc+0x5a/0x2d0 [ 442.691970][T13338] ? skb_clone+0x1eb/0x370 [ 442.696446][T13338] skb_clone+0x1eb/0x370 [ 442.700722][T13338] bpf_clone_redirect+0x167/0x4a0 [ 442.705798][T13338] ? perf_trace_preemptirq_template+0x269/0x330 [ 442.712103][T13338] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 442.717599][T13338] ? lock_chain_count+0x20/0x20 [ 442.722494][T13338] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 442.728683][T13338] ? lockdep_hardirqs_on+0x98/0x150 [ 442.733926][T13338] ? lockdep_softirqs_on+0x580/0x580 [ 442.739236][T13338] ? bpf_test_run+0x174/0x870 [ 442.743943][T13338] ? __local_bh_disable_ip+0x108/0x1a0 [ 442.749430][T13338] ? __cant_sleep+0x220/0x220 [ 442.754138][T13338] ? _local_bh_enable+0xa0/0xa0 [ 442.759023][T13338] ? bpf_test_timer_continue+0x135/0x380 [ 442.764678][T13338] ? bpf_test_run+0x174/0x870 [ 442.769397][T13338] bpf_test_run+0x2df/0x870 [ 442.773937][T13338] ? bpf_test_run+0x174/0x870 [ 442.778637][T13338] ? convert___skb_to_skb+0x590/0x590 [ 442.784038][T13338] ? bpf_test_run+0xc/0x870 [ 442.788618][T13338] bpf_prog_test_run_skb+0xad2/0x12b0 [ 442.794035][T13338] ? cpu_online+0x60/0x60 [ 442.798386][T13338] bpf_prog_test_run+0x321/0x390 [ 442.803358][T13338] __sys_bpf+0x49d/0x890 [ 442.807627][T13338] ? bpf_link_show_fdinfo+0x390/0x390 [ 442.813034][T13338] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 442.819302][T13338] __x64_sys_bpf+0x7c/0x90 [ 442.823739][T13338] do_syscall_64+0x55/0xa0 [ 442.828186][T13338] ? clear_bhb_loop+0x40/0x90 [ 442.832883][T13338] ? clear_bhb_loop+0x40/0x90 [ 442.837583][T13338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.843498][T13338] RIP: 0033:0x7f18cc59c799 [ 442.847947][T13338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.867584][T13338] RSP: 002b:00007f18ca7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.876042][T13338] RAX: ffffffffffffffda RBX: 00007f18cc815fa0 RCX: 00007f18cc59c799 [ 442.884041][T13338] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 442.892032][T13338] RBP: 00007f18ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.900027][T13338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.908016][T13338] R13: 00007f18cc816038 R14: 00007f18cc815fa0 R15: 00007ffd857423d8 [ 442.916018][T13338] [ 442.966401][T13340] netlink: 'syz.1.2667': attribute type 3 has an invalid length. [ 442.997728][T13340] netlink: 'syz.1.2667': attribute type 1 has an invalid length. [ 443.005564][T13340] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.2667'. [ 443.066512][T13340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2667'. [ 443.791615][T13366] netlink: 'syz.3.2678': attribute type 10 has an invalid length. [ 444.456857][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.490509][T13366] bridge_slave_1: left allmulticast mode [ 444.496267][T13366] bridge_slave_1: left promiscuous mode [ 444.502448][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.551628][T13366] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 445.195974][T13396] warn_alloc: 2 callbacks suppressed [ 445.196002][T13396] syz.2.2690: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 445.228798][T13396] CPU: 0 PID: 13396 Comm: syz.2.2690 Not tainted syzkaller #0 [ 445.236429][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.246619][T13396] Call Trace: [ 445.249942][T13396] [ 445.252913][T13396] dump_stack_lvl+0x18c/0x250 [ 445.257657][T13396] ? show_regs_print_info+0x20/0x20 [ 445.262913][T13396] ? load_image+0x400/0x400 [ 445.267473][T13396] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 445.273957][T13396] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 445.280559][T13396] warn_alloc+0x246/0x340 [ 445.284947][T13396] ? stack_trace_save+0xaa/0x100 [ 445.289941][T13396] ? zone_watermark_ok_safe+0x230/0x230 [ 445.295575][T13396] ? kasan_set_track+0x5f/0x70 [ 445.300395][T13396] ? kasan_set_track+0x4e/0x70 [ 445.305217][T13396] ? __kasan_kmalloc+0x8f/0xa0 [ 445.310028][T13396] ? xsk_init_queue+0xad/0x100 [ 445.314875][T13396] ? xsk_setsockopt+0x4e5/0x760 [ 445.319776][T13396] ? do_sock_setsockopt+0x175/0x1a0 [ 445.325055][T13396] ? __x64_sys_setsockopt+0x182/0x200 [ 445.330587][T13396] __vmalloc_node_range+0x126/0x1330 [ 445.335953][T13396] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 445.341990][T13396] ? lock_chain_count+0x20/0x20 [ 445.346888][T13396] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.353097][T13396] ? lockdep_hardirqs_on+0x98/0x150 [ 445.358441][T13396] ? free_vm_area+0x50/0x50 [ 445.362989][T13396] vmalloc_user+0x74/0x80 [ 445.367366][T13396] ? xskq_create+0xbf/0x170 [ 445.371910][T13396] xskq_create+0xbf/0x170 [ 445.376365][T13396] xsk_init_queue+0xad/0x100 [ 445.380992][T13396] xsk_setsockopt+0x4e5/0x760 [ 445.385721][T13396] ? xsk_poll+0x680/0x680 [ 445.390101][T13396] ? __fget_files+0x28/0x4b0 [ 445.394728][T13396] ? __fget_files+0x28/0x4b0 [ 445.399359][T13396] ? aa_sock_opt_perm+0x74/0x100 [ 445.404327][T13396] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 445.409936][T13396] ? security_socket_setsockopt+0x7e/0xa0 [ 445.415687][T13396] ? xsk_poll+0x680/0x680 [ 445.420048][T13396] do_sock_setsockopt+0x175/0x1a0 [ 445.425121][T13396] ? __fdget+0x180/0x210 [ 445.429402][T13396] __x64_sys_setsockopt+0x182/0x200 [ 445.434662][T13396] do_syscall_64+0x55/0xa0 [ 445.439115][T13396] ? clear_bhb_loop+0x40/0x90 [ 445.443837][T13396] ? clear_bhb_loop+0x40/0x90 [ 445.448569][T13396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.454486][T13396] RIP: 0033:0x7ff95ab9c799 [ 445.458951][T13396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.478590][T13396] RSP: 002b:00007ff95b9a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 445.487040][T13396] RAX: ffffffffffffffda RBX: 00007ff95ae15fa0 RCX: 00007ff95ab9c799 [ 445.495056][T13396] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 445.503065][T13396] RBP: 00007ff95ac32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 445.511058][T13396] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 445.519050][T13396] R13: 00007ff95ae16038 R14: 00007ff95ae15fa0 R15: 00007ffe420975c8 [ 445.527068][T13396] [ 445.536679][T13398] netlink: 'syz.2.2690': attribute type 16 has an invalid length. [ 445.544959][T13398] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2690'. [ 445.588408][T13396] Mem-Info: [ 445.597587][T13396] active_anon:5408 inactive_anon:0 isolated_anon:0 [ 445.597587][T13396] active_file:18954 inactive_file:40076 isolated_file:0 [ 445.597587][T13396] unevictable:768 dirty:74 writeback:0 [ 445.597587][T13396] slab_reclaimable:10461 slab_unreclaimable:93251 [ 445.597587][T13396] mapped:24584 shmem:1361 pagetables:566 [ 445.597587][T13396] sec_pagetables:0 bounce:0 [ 445.597587][T13396] kernel_misc_reclaimable:0 [ 445.597587][T13396] free:1348531 free_pcp:6932 free_cma:0 [ 445.695233][T13399] delete_channel: no stack [ 445.700086][T13396] Node 0 active_anon:21432kB inactive_anon:0kB active_file:75816kB inactive_file:160100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98336kB dirty:296kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11136kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no [ 445.750045][T13396] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 445.781277][T13396] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.810772][T13396] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 445.817226][T13396] Node 0 DMA32 free:1483984kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21396kB inactive_anon:0kB active_file:75816kB inactive_file:159264kB unevictable:1536kB writepending:296kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:9468kB local_pcp:3268kB free_cma:0kB [ 445.854902][T13396] lowmem_reserve[]: 0 0 0 0 0 [ 445.860718][T13396] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 445.897955][T13396] lowmem_reserve[]: 0 0 0 0 0 [ 445.906363][T13396] Node 1 Normal free:3894780kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19004kB local_pcp:10600kB free_cma:0kB [ 445.942953][T13396] lowmem_reserve[]: 0 0 0 0 0 [ 445.950675][T13396] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 445.965317][T13396] Node 0 DMA32: 1038*4kB (UM) 1713*8kB (UME) 1221*16kB (UME) 758*32kB (UME) 456*64kB (UME) 202*128kB (UME) 93*256kB (UME) 62*512kB (UME) 25*1024kB (UM) 8*2048kB (UM) 310*4096kB (UM) = 1483984kB [ 446.065792][T13396] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.098290][T13396] Node 1 Normal: 183*4kB (UE) 42*8kB (UME) 33*16kB (UME) 42*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3894780kB [ 446.136206][T13396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.154802][T13396] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.181495][T13396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.201388][T13396] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.229049][T13396] 60391 total pagecache pages [ 446.233803][T13396] 0 pages in swap cache [ 446.276659][T13396] Free swap = 124996kB [ 446.285680][T13396] Total swap = 124996kB [ 446.297791][T13396] 2097051 pages RAM [ 446.301668][T13396] 0 pages HighMem/MovableOnly [ 446.308262][T13396] 416922 pages reserved [ 446.312470][T13396] 0 pages cma reserved [ 448.783428][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.799494][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.958177][T13472] FAULT_INJECTION: forcing a failure. [ 450.958177][T13472] name failslab, interval 1, probability 0, space 0, times 0 [ 451.027651][T13472] CPU: 1 PID: 13472 Comm: syz.0.2713 Not tainted syzkaller #0 [ 451.035219][T13472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.045335][T13472] Call Trace: [ 451.048664][T13472] [ 451.051643][T13472] dump_stack_lvl+0x18c/0x250 [ 451.056393][T13472] ? show_regs_print_info+0x20/0x20 [ 451.061653][T13472] ? load_image+0x400/0x400 [ 451.066221][T13472] ? __might_sleep+0xe0/0xe0 [ 451.070968][T13472] ? __lock_acquire+0x7d40/0x7d40 [ 451.076055][T13472] ? rcu_is_watching+0x15/0xb0 [ 451.080885][T13472] should_fail_ex+0x39d/0x4d0 [ 451.085625][T13472] should_failslab+0x9/0x20 [ 451.090185][T13472] slab_pre_alloc_hook+0x59/0x310 [ 451.095281][T13472] kmem_cache_alloc_node+0x60/0x320 [ 451.100540][T13472] ? __might_fault+0xc6/0x120 [ 451.105265][T13472] ? __alloc_skb+0x103/0x2c0 [ 451.109936][T13472] __alloc_skb+0x103/0x2c0 [ 451.114424][T13472] netlink_dump+0x1ec/0xe50 [ 451.118996][T13472] ? _raw_spin_unlock+0x40/0x40 [ 451.123902][T13472] ? iov_iter_init+0x1e0/0x1e0 [ 451.128728][T13472] ? __skb_try_recv_from_queue+0x58f/0x730 [ 451.134611][T13472] ? netlink_lookup+0x200/0x200 [ 451.139527][T13472] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 451.145241][T13472] ? skb_copy_datagram_iter+0x200/0x200 [ 451.150862][T13472] ? refcount_dec_and_test+0x4f/0x70 [ 451.156215][T13472] netlink_recvmsg+0x693/0xe60 [ 451.161125][T13472] ? netlink_sendmsg+0xbf0/0xbf0 [ 451.166150][T13472] ? aa_af_perm+0x330/0x330 [ 451.170736][T13472] ? verify_lock_unused+0x140/0x140 [ 451.176016][T13472] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 451.181376][T13472] ? security_socket_recvmsg+0x89/0xb0 [ 451.186909][T13472] ? netlink_sendmsg+0xbf0/0xbf0 [ 451.191934][T13472] ____sys_recvmsg+0x2ce/0x5e0 [ 451.196949][T13472] ? __sys_recvmsg_sock+0x50/0x50 [ 451.202043][T13472] ? import_iovec+0x73/0xa0 [ 451.206638][T13472] ___sys_recvmsg+0x216/0x590 [ 451.211379][T13472] ? __sys_recvmsg+0x2a0/0x2a0 [ 451.216219][T13472] ? ksys_write+0x1c4/0x260 [ 451.220800][T13472] ? __fget_files+0x43d/0x4b0 [ 451.225560][T13472] __x64_sys_recvmsg+0x20c/0x2e0 [ 451.230562][T13472] ? ___sys_recvmsg+0x590/0x590 [ 451.235560][T13472] ? lockdep_hardirqs_on+0x98/0x150 [ 451.240828][T13472] do_syscall_64+0x55/0xa0 [ 451.245302][T13472] ? clear_bhb_loop+0x40/0x90 [ 451.250032][T13472] ? clear_bhb_loop+0x40/0x90 [ 451.254949][T13472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.260896][T13472] RIP: 0033:0x7f18cc59c799 [ 451.265362][T13472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.285035][T13472] RSP: 002b:00007f18ca7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 451.293589][T13472] RAX: ffffffffffffffda RBX: 00007f18cc815fa0 RCX: 00007f18cc59c799 [ 451.301602][T13472] RDX: 0000000040012102 RSI: 00002000000002c0 RDI: 0000000000000003 [ 451.309629][T13472] RBP: 00007f18ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.317633][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.325633][T13472] R13: 00007f18cc816038 R14: 00007f18cc815fa0 R15: 00007ffd857423d8 [ 451.333654][T13472] [ 454.574275][T13505] netlink: 'syz.2.2726': attribute type 16 has an invalid length. [ 454.592874][T13505] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2726'. [ 454.959030][T13511] syzkaller0: entered promiscuous mode [ 454.987427][T13511] syzkaller0: entered allmulticast mode [ 455.050690][T13518] netlink: 'syz.1.2731': attribute type 16 has an invalid length. [ 455.079847][T13518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2731'. [ 458.014611][T13536] IPv6: pim6reg1: Disabled Multicast RS [ 458.342501][T13558] warn_alloc: 2 callbacks suppressed [ 458.342520][T13558] syz.1.2744: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 458.418698][T13562] netlink: 'syz.1.2744': attribute type 16 has an invalid length. [ 458.426600][T13562] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2744'. [ 458.455715][T13558] CPU: 1 PID: 13558 Comm: syz.1.2744 Not tainted syzkaller #0 [ 458.463265][T13558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.473383][T13558] Call Trace: [ 458.476716][T13558] [ 458.479693][T13558] dump_stack_lvl+0x18c/0x250 [ 458.484447][T13558] ? show_regs_print_info+0x20/0x20 [ 458.489803][T13558] ? load_image+0x400/0x400 [ 458.494373][T13558] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 458.500847][T13558] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 458.507398][T13558] warn_alloc+0x246/0x340 [ 458.511774][T13558] ? stack_trace_save+0xaa/0x100 [ 458.516745][T13558] ? zone_watermark_ok_safe+0x230/0x230 [ 458.522358][T13558] ? kasan_set_track+0x5f/0x70 [ 458.527156][T13558] ? kasan_set_track+0x4e/0x70 [ 458.531951][T13558] ? __kasan_kmalloc+0x8f/0xa0 [ 458.536759][T13558] ? xsk_init_queue+0xad/0x100 [ 458.541593][T13558] ? xsk_setsockopt+0x4e5/0x760 [ 458.546478][T13558] ? do_sock_setsockopt+0x175/0x1a0 [ 458.551715][T13558] ? __x64_sys_setsockopt+0x182/0x200 [ 458.557125][T13558] __vmalloc_node_range+0x126/0x1330 [ 458.562473][T13558] ? free_vm_area+0x50/0x50 [ 458.567030][T13558] vmalloc_user+0x74/0x80 [ 458.571467][T13558] ? xskq_create+0xbf/0x170 [ 458.576026][T13558] xskq_create+0xbf/0x170 [ 458.580390][T13558] xsk_init_queue+0xad/0x100 [ 458.585019][T13558] xsk_setsockopt+0x4e5/0x760 [ 458.589727][T13558] ? xsk_poll+0x680/0x680 [ 458.594100][T13558] ? __fget_files+0x28/0x4b0 [ 458.598719][T13558] ? __fget_files+0x28/0x4b0 [ 458.603340][T13558] ? aa_sock_opt_perm+0x74/0x100 [ 458.608309][T13558] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 458.613886][T13558] ? security_socket_setsockopt+0x7e/0xa0 [ 458.619638][T13558] ? xsk_poll+0x680/0x680 [ 458.624001][T13558] do_sock_setsockopt+0x175/0x1a0 [ 458.629066][T13558] ? __fdget+0x180/0x210 [ 458.633344][T13558] __x64_sys_setsockopt+0x182/0x200 [ 458.638588][T13558] do_syscall_64+0x55/0xa0 [ 458.643041][T13558] ? clear_bhb_loop+0x40/0x90 [ 458.647743][T13558] ? clear_bhb_loop+0x40/0x90 [ 458.652444][T13558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.658367][T13558] RIP: 0033:0x7f0a8819c799 [ 458.662805][T13558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.682439][T13558] RSP: 002b:00007f0a8907b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 458.690883][T13558] RAX: ffffffffffffffda RBX: 00007f0a88415fa0 RCX: 00007f0a8819c799 [ 458.698896][T13558] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 458.706888][T13558] RBP: 00007f0a88232bd9 R08: 0000000000000004 R09: 0000000000000000 [ 458.714889][T13558] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 458.722917][T13558] R13: 00007f0a88416038 R14: 00007f0a88415fa0 R15: 00007ffd48d29d28 [ 458.730937][T13558] [ 458.765151][T13558] Mem-Info: [ 458.771809][T13558] active_anon:5388 inactive_anon:0 isolated_anon:0 [ 458.771809][T13558] active_file:18954 inactive_file:40082 isolated_file:0 [ 458.771809][T13558] unevictable:768 dirty:152 writeback:0 [ 458.771809][T13558] slab_reclaimable:10511 slab_unreclaimable:94080 [ 458.771809][T13558] mapped:24645 shmem:1361 pagetables:565 [ 458.771809][T13558] sec_pagetables:0 bounce:0 [ 458.771809][T13558] kernel_misc_reclaimable:0 [ 458.771809][T13558] free:1344029 free_pcp:10279 free_cma:0 [ 458.817953][T13558] Node 0 active_anon:21552kB inactive_anon:0kB active_file:75816kB inactive_file:160124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98580kB dirty:608kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11180kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no [ 458.852375][T13558] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 458.887126][T13558] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.915530][T13558] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 458.921582][T13558] Node 0 DMA32 free:1465976kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21516kB inactive_anon:0kB active_file:75816kB inactive_file:159288kB unevictable:1536kB writepending:608kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:22180kB local_pcp:19744kB free_cma:0kB [ 458.953446][T13558] lowmem_reserve[]: 0 0 0 0 0 [ 458.958938][T13558] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 458.988718][T13558] lowmem_reserve[]: 0 0 0 0 0 [ 458.993732][T13558] Node 1 Normal free:3894780kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19004kB local_pcp:8404kB free_cma:0kB [ 459.057532][T13558] lowmem_reserve[]: 0 0 0 0 0 [ 459.062462][T13558] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 459.106361][T13558] Node 0 DMA32: 888*4kB (UM) 1791*8kB (UME) 1294*16kB (UME) 646*32kB (UME) 420*64kB (UME) 224*128kB (UME) 108*256kB (UME) 69*512kB (UME) 32*1024kB (UM) 9*2048kB (UM) 302*4096kB (UM) = 1465976kB [ 459.191663][T13558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 459.236050][T13571] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2748'. [ 459.264113][T13571] netlink: 'syz.2.2748': attribute type 1 has an invalid length. [ 459.267706][T13558] Node 1 Normal: 183*4kB (UE) 42*8kB (UME) 33*16kB (UME) 42*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3894780kB [ 459.478938][T13558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.521494][T13558] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.560129][T13558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.576853][T13568] IPv6: pim6reg1: Disabled Multicast RS [ 459.584621][T13558] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.689604][T13558] 60397 total pagecache pages [ 459.701107][T13558] 0 pages in swap cache [ 459.713308][T13558] Free swap = 124996kB [ 459.722336][T13558] Total swap = 124996kB [ 459.738263][T13558] 2097051 pages RAM [ 459.751129][T13558] 0 pages HighMem/MovableOnly [ 459.766524][T13558] 416922 pages reserved [ 459.781063][T13558] 0 pages cma reserved [ 460.185407][T13587] sctp: [Deprecated]: syz.3.2752 (pid 13587) Use of int in maxseg socket option. [ 460.185407][T13587] Use struct sctp_assoc_value instead [ 460.300499][T13591] netlink: 'syz.3.2754': attribute type 10 has an invalid length. [ 460.337745][T13591] macvlan0: entered promiscuous mode [ 460.346527][T13591] macvlan0: entered allmulticast mode [ 460.409115][T13591] veth1_vlan: entered allmulticast mode [ 460.460051][T13591] team0: Port device macvlan0 added [ 462.808338][T13667] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2786'. [ 463.222523][T13678] delete_channel: no stack [ 465.020767][T13728] FAULT_INJECTION: forcing a failure. [ 465.020767][T13728] name failslab, interval 1, probability 0, space 0, times 0 [ 465.034931][T13728] CPU: 1 PID: 13728 Comm: syz.0.2807 Not tainted syzkaller #0 [ 465.042459][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.052562][T13728] Call Trace: [ 465.055894][T13728] [ 465.058863][T13728] dump_stack_lvl+0x18c/0x250 [ 465.063589][T13728] ? show_regs_print_info+0x20/0x20 [ 465.068836][T13728] ? load_image+0x400/0x400 [ 465.073400][T13728] should_fail_ex+0x39d/0x4d0 [ 465.078141][T13728] should_failslab+0x9/0x20 [ 465.082776][T13728] slab_pre_alloc_hook+0x59/0x310 [ 465.087856][T13728] kmem_cache_alloc+0x5a/0x2d0 [ 465.092685][T13728] ? skb_clone+0x1eb/0x370 [ 465.097183][T13728] skb_clone+0x1eb/0x370 [ 465.101556][T13728] __netlink_deliver_tap+0x41c/0x830 [ 465.106911][T13728] ? netlink_deliver_tap+0x2e/0x1b0 [ 465.112158][T13728] netlink_deliver_tap+0x19c/0x1b0 [ 465.117412][T13728] netlink_dump+0x94b/0xe50 [ 465.121981][T13728] ? netlink_lookup+0x200/0x200 [ 465.126880][T13728] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 465.132581][T13728] ? skb_copy_datagram_iter+0x200/0x200 [ 465.138190][T13728] ? refcount_dec_and_test+0x4f/0x70 [ 465.143525][T13728] netlink_recvmsg+0x693/0xe60 [ 465.148347][T13728] ? netlink_sendmsg+0xbf0/0xbf0 [ 465.153345][T13728] ? aa_af_perm+0x330/0x330 [ 465.157895][T13728] ? __lock_acquire+0x1273/0x7d40 [ 465.162959][T13728] ? verify_lock_unused+0x140/0x140 [ 465.168203][T13728] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 465.173536][T13728] ? security_socket_recvmsg+0x89/0xb0 [ 465.179039][T13728] ? netlink_sendmsg+0xbf0/0xbf0 [ 465.184042][T13728] ____sys_recvmsg+0x2ce/0x5e0 [ 465.188855][T13728] ? __sys_recvmsg_sock+0x50/0x50 [ 465.193927][T13728] ? import_iovec+0x73/0xa0 [ 465.198475][T13728] ___sys_recvmsg+0x216/0x590 [ 465.203217][T13728] ? __sys_recvmsg+0x2a0/0x2a0 [ 465.208051][T13728] ? ksys_write+0x1c4/0x260 [ 465.212630][T13728] ? __fget_files+0x43d/0x4b0 [ 465.217388][T13728] __x64_sys_recvmsg+0x20c/0x2e0 [ 465.222383][T13728] ? ___sys_recvmsg+0x590/0x590 [ 465.227336][T13728] ? lockdep_hardirqs_on+0x98/0x150 [ 465.232587][T13728] do_syscall_64+0x55/0xa0 [ 465.237072][T13728] ? clear_bhb_loop+0x40/0x90 [ 465.241796][T13728] ? clear_bhb_loop+0x40/0x90 [ 465.246526][T13728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.252470][T13728] RIP: 0033:0x7f18cc59c799 [ 465.256935][T13728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.276591][T13728] RSP: 002b:00007f18ca7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 465.285059][T13728] RAX: ffffffffffffffda RBX: 00007f18cc815fa0 RCX: 00007f18cc59c799 [ 465.293086][T13728] RDX: 0000000040012102 RSI: 00002000000002c0 RDI: 0000000000000003 [ 465.301101][T13728] RBP: 00007f18ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 465.309115][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.317121][T13728] R13: 00007f18cc816038 R14: 00007f18cc815fa0 R15: 00007ffd857423d8 [ 465.325150][T13728] [ 465.863318][T13749] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2816'. [ 466.494479][T13762] FAULT_INJECTION: forcing a failure. [ 466.494479][T13762] name failslab, interval 1, probability 0, space 0, times 0 [ 466.507845][T13762] CPU: 0 PID: 13762 Comm: syz.0.2820 Not tainted syzkaller #0 [ 466.515351][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.525541][T13762] Call Trace: [ 466.528862][T13762] [ 466.531835][T13762] dump_stack_lvl+0x18c/0x250 [ 466.536575][T13762] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.542794][T13762] ? show_regs_print_info+0x20/0x20 [ 466.548060][T13762] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.554285][T13762] should_fail_ex+0x39d/0x4d0 [ 466.559020][T13762] should_failslab+0x9/0x20 [ 466.563592][T13762] slab_pre_alloc_hook+0x59/0x310 [ 466.568694][T13762] kmem_cache_alloc+0x5a/0x2d0 [ 466.573525][T13762] ? skb_clone+0x1eb/0x370 [ 466.577987][T13762] skb_clone+0x1eb/0x370 [ 466.582286][T13762] bpf_clone_redirect+0x167/0x4a0 [ 466.587372][T13762] ? perf_trace_preemptirq_template+0x269/0x330 [ 466.593682][T13762] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 466.599191][T13762] ? lock_chain_count+0x20/0x20 [ 466.604104][T13762] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.610314][T13762] ? lockdep_hardirqs_on+0x98/0x150 [ 466.615569][T13762] ? lockdep_softirqs_on+0x580/0x580 [ 466.620903][T13762] ? bpf_test_run+0x174/0x870 [ 466.625633][T13762] ? __local_bh_disable_ip+0x108/0x1a0 [ 466.631143][T13762] ? __cant_sleep+0x220/0x220 [ 466.635871][T13762] ? _local_bh_enable+0xa0/0xa0 [ 466.640789][T13762] ? bpf_test_timer_continue+0x135/0x380 [ 466.646477][T13762] ? bpf_test_run+0x174/0x870 [ 466.651216][T13762] bpf_test_run+0x2df/0x870 [ 466.655775][T13762] ? bpf_test_run+0x174/0x870 [ 466.660497][T13762] ? convert___skb_to_skb+0x590/0x590 [ 466.665925][T13762] ? eth_get_headlen+0x210/0x210 [ 466.670949][T13762] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 466.676536][T13762] ? convert___skb_to_skb+0x3d/0x590 [ 466.681872][T13762] bpf_prog_test_run_skb+0xad2/0x12b0 [ 466.687311][T13762] ? cpu_online+0x60/0x60 [ 466.691686][T13762] bpf_prog_test_run+0x321/0x390 [ 466.696673][T13762] __sys_bpf+0x49d/0x890 [ 466.700962][T13762] ? bpf_link_show_fdinfo+0x390/0x390 [ 466.706387][T13762] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.712608][T13762] __x64_sys_bpf+0x7c/0x90 [ 466.717072][T13762] do_syscall_64+0x55/0xa0 [ 466.721566][T13762] ? clear_bhb_loop+0x40/0x90 [ 466.726298][T13762] ? clear_bhb_loop+0x40/0x90 [ 466.731035][T13762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.736978][T13762] RIP: 0033:0x7f18cc59c799 [ 466.741437][T13762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.761125][T13762] RSP: 002b:00007f18ca7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.769594][T13762] RAX: ffffffffffffffda RBX: 00007f18cc815fa0 RCX: 00007f18cc59c799 [ 466.777679][T13762] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 466.785698][T13762] RBP: 00007f18ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 466.793713][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.801725][T13762] R13: 00007f18cc816038 R14: 00007f18cc815fa0 R15: 00007ffd857423d8 [ 466.809772][T13762] [ 467.140721][T13764] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2822'. [ 467.303831][T13774] netlink: 'syz.1.2827': attribute type 16 has an invalid length. [ 467.324188][T13774] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2827'. [ 467.552859][T13783] netlink: 'syz.0.2836': attribute type 16 has an invalid length. [ 467.564953][T13783] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2836'. [ 467.806670][T13789] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2831'. [ 467.826114][T13791] netlink: 'syz.0.2832': attribute type 10 has an invalid length. [ 468.369128][T13805] delete_channel: no stack [ 468.640430][T13816] warn_alloc: 7 callbacks suppressed [ 468.640469][T13816] syz.2.2841: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 468.673290][T13816] CPU: 1 PID: 13816 Comm: syz.2.2841 Not tainted syzkaller #0 [ 468.680833][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.690934][T13816] Call Trace: [ 468.694255][T13816] [ 468.697237][T13816] dump_stack_lvl+0x18c/0x250 [ 468.701997][T13816] ? show_regs_print_info+0x20/0x20 [ 468.707260][T13816] ? load_image+0x400/0x400 [ 468.711828][T13816] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 468.718309][T13816] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 468.724870][T13816] warn_alloc+0x246/0x340 [ 468.729262][T13816] ? stack_trace_save+0xaa/0x100 [ 468.734259][T13816] ? zone_watermark_ok_safe+0x230/0x230 [ 468.739874][T13816] ? kasan_set_track+0x5f/0x70 [ 468.744682][T13816] ? kasan_set_track+0x4e/0x70 [ 468.749491][T13816] ? __kasan_kmalloc+0x8f/0xa0 [ 468.754306][T13816] ? xsk_init_queue+0xad/0x100 [ 468.759133][T13816] ? xsk_setsockopt+0x4e5/0x760 [ 468.764041][T13816] ? do_sock_setsockopt+0x175/0x1a0 [ 468.769301][T13816] ? __x64_sys_setsockopt+0x182/0x200 [ 468.774747][T13816] __vmalloc_node_range+0x126/0x1330 [ 468.780128][T13816] ? free_vm_area+0x50/0x50 [ 468.784694][T13816] vmalloc_user+0x74/0x80 [ 468.789078][T13816] ? xskq_create+0xbf/0x170 [ 468.793632][T13816] xskq_create+0xbf/0x170 [ 468.798014][T13816] xsk_init_queue+0xad/0x100 [ 468.802672][T13816] xsk_setsockopt+0x4e5/0x760 [ 468.807400][T13816] ? xsk_poll+0x680/0x680 [ 468.811760][T13816] ? __fget_files+0x28/0x4b0 [ 468.816374][T13816] ? __fget_files+0x28/0x4b0 [ 468.820989][T13816] ? aa_sock_opt_perm+0x74/0x100 [ 468.825971][T13816] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 468.831604][T13816] ? security_socket_setsockopt+0x7e/0xa0 [ 468.837372][T13816] ? xsk_poll+0x680/0x680 [ 468.841747][T13816] do_sock_setsockopt+0x175/0x1a0 [ 468.846849][T13816] ? __fdget+0x180/0x210 [ 468.851221][T13816] __x64_sys_setsockopt+0x182/0x200 [ 468.856467][T13816] do_syscall_64+0x55/0xa0 [ 468.860917][T13816] ? clear_bhb_loop+0x40/0x90 [ 468.865624][T13816] ? clear_bhb_loop+0x40/0x90 [ 468.870339][T13816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.876261][T13816] RIP: 0033:0x7ff95ab9c799 [ 468.880718][T13816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.900370][T13816] RSP: 002b:00007ff95b9a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 468.908805][T13816] RAX: ffffffffffffffda RBX: 00007ff95ae15fa0 RCX: 00007ff95ab9c799 [ 468.916800][T13816] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 468.924821][T13816] RBP: 00007ff95ac32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 468.932827][T13816] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 468.940857][T13816] R13: 00007ff95ae16038 R14: 00007ff95ae15fa0 R15: 00007ffe420975c8 [ 468.948874][T13816] [ 468.979579][T13816] Mem-Info: [ 468.983366][T13816] active_anon:5361 inactive_anon:0 isolated_anon:0 [ 468.983366][T13816] active_file:18954 inactive_file:40086 isolated_file:0 [ 468.983366][T13816] unevictable:768 dirty:176 writeback:0 [ 468.983366][T13816] slab_reclaimable:10561 slab_unreclaimable:92617 [ 468.983366][T13816] mapped:24564 shmem:1361 pagetables:562 [ 468.983366][T13816] sec_pagetables:0 bounce:0 [ 468.983366][T13816] kernel_misc_reclaimable:0 [ 468.983366][T13816] free:1346868 free_pcp:8209 free_cma:0 [ 469.099558][T13823] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2844'. [ 469.121475][T13823] veth0_to_bond: entered promiscuous mode [ 469.128513][T13816] Node 0 active_anon:21544kB inactive_anon:0kB active_file:75816kB inactive_file:160140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98256kB dirty:704kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11280kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no [ 469.207503][T13827] netlink: 'syz.2.2841': attribute type 16 has an invalid length. [ 469.235133][T13816] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 469.289635][T13827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2841'. [ 469.304216][T13816] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.356001][T13816] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 469.363758][T13816] Node 0 DMA32 free:1477332kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21508kB inactive_anon:0kB active_file:75816kB inactive_file:159304kB unevictable:1536kB writepending:704kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:14248kB local_pcp:12056kB free_cma:0kB [ 469.404845][T13816] lowmem_reserve[]: 0 0 0 0 0 [ 469.411019][T13816] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 469.477954][T13816] lowmem_reserve[]: 0 0 0 0 0 [ 469.483430][T13816] Node 1 Normal free:3894780kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19004kB local_pcp:8404kB free_cma:0kB [ 469.538886][T13816] lowmem_reserve[]: 0 0 0 0 0 [ 469.546703][T13816] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 469.562171][T13816] Node 0 DMA32: 907*4kB (UME) 1669*8kB (UM) 1232*16kB (UME) 834*32kB (UME) 371*64kB (UME) 153*128kB (UME) 88*256kB (UME) 65*512kB (UME) 36*1024kB (UM) 14*2048kB (UM) 305*4096kB (UM) = 1477332kB [ 469.607735][T13816] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 469.651972][T13816] Node 1 Normal: 183*4kB (UE) 42*8kB (UME) 33*16kB (UME) 42*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3894780kB [ 469.698892][T13816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.708705][T13816] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.718165][T13816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.727890][T13816] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.737291][T13816] 60401 total pagecache pages [ 469.742137][T13816] 0 pages in swap cache [ 469.747059][T13816] Free swap = 124996kB [ 469.785302][T13816] Total swap = 124996kB [ 469.797582][T13816] 2097051 pages RAM [ 469.817536][T13816] 0 pages HighMem/MovableOnly [ 469.828790][T13816] 416922 pages reserved [ 469.833053][T13816] 0 pages cma reserved [ 469.880329][T13844] netlink: 'syz.1.2848': attribute type 10 has an invalid length. [ 470.242992][T13856] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.250128][T13856] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 470.275078][T13856] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.2850'. [ 470.292882][T13844] veth0_macvtap: left promiscuous mode [ 470.559176][T13858] netlink: 'syz.0.2851': attribute type 3 has an invalid length. [ 470.567012][T13858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2851'. [ 470.747979][T13858] netlink: 'syz.0.2851': attribute type 3 has an invalid length. [ 470.755883][T13858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2851'. [ 470.799226][T13868] netlink: 'syz.2.2854': attribute type 10 has an invalid length. [ 470.814318][T13868] veth0_vlan: left promiscuous mode [ 470.840288][T13868] veth0_vlan: entered promiscuous mode [ 470.862384][T13868] team0: Device veth0_vlan failed to register rx_handler [ 470.983926][T13872] netlink: 'syz.1.2856': attribute type 6 has an invalid length. [ 471.007621][T13872] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2856'. [ 471.105046][T13876] netlink: 'syz.3.2857': attribute type 1 has an invalid length. [ 471.129652][T13876] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2857'. [ 471.190077][T13880] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2858'. [ 471.407858][T13882] FAULT_INJECTION: forcing a failure. [ 471.407858][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 471.420928][T13882] CPU: 1 PID: 13882 Comm: syz.1.2860 Not tainted syzkaller #0 [ 471.428433][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.438536][T13882] Call Trace: [ 471.441867][T13882] [ 471.444843][T13882] dump_stack_lvl+0x18c/0x250 [ 471.449579][T13882] ? show_regs_print_info+0x20/0x20 [ 471.454832][T13882] ? load_image+0x400/0x400 [ 471.459384][T13882] ? skb_network_protocol+0x51f/0x780 [ 471.464818][T13882] should_fail_ex+0x39d/0x4d0 [ 471.469556][T13882] should_failslab+0x9/0x20 [ 471.474134][T13882] slab_pre_alloc_hook+0x59/0x310 [ 471.479234][T13882] kmem_cache_alloc+0x5a/0x2d0 [ 471.484064][T13882] ? skb_clone+0x1eb/0x370 [ 471.488532][T13882] skb_clone+0x1eb/0x370 [ 471.492828][T13882] ? dev_queue_xmit_nit+0x212/0xbb0 [ 471.498067][T13882] dev_queue_xmit_nit+0x24d/0xbb0 [ 471.503139][T13882] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 471.508297][T13882] ? validate_xmit_skb+0x949/0xf60 [ 471.513484][T13882] dev_hard_start_xmit+0x148/0x740 [ 471.518692][T13882] __dev_queue_xmit+0x1ac2/0x36b0 [ 471.523777][T13882] ? __dev_queue_xmit+0x26b/0x36b0 [ 471.528958][T13882] ? netdev_core_pick_tx+0x340/0x340 [ 471.534308][T13882] ? __copy_skb_header+0xa3/0x4a0 [ 471.539391][T13882] ? __asan_memcpy+0x40/0x70 [ 471.544097][T13882] ? __skb_clone+0x63/0x790 [ 471.548640][T13882] ? __skb_clone+0x480/0x790 [ 471.553296][T13882] ? skb_clone+0x21f/0x370 [ 471.557780][T13882] __netlink_deliver_tap+0x5ab/0x830 [ 471.563138][T13882] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.568403][T13882] netlink_deliver_tap+0x19c/0x1b0 [ 471.573598][T13882] netlink_dump+0x94b/0xe50 [ 471.578190][T13882] ? netlink_lookup+0x200/0x200 [ 471.583097][T13882] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 471.588797][T13882] ? skb_copy_datagram_iter+0x200/0x200 [ 471.594405][T13882] ? refcount_dec_and_test+0x4f/0x70 [ 471.599742][T13882] netlink_recvmsg+0x693/0xe60 [ 471.604580][T13882] ? netlink_sendmsg+0xbf0/0xbf0 [ 471.609586][T13882] ? aa_af_perm+0x330/0x330 [ 471.614141][T13882] ? __lock_acquire+0x1273/0x7d40 [ 471.619219][T13882] ? verify_lock_unused+0x140/0x140 [ 471.624493][T13882] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 471.629830][T13882] ? security_socket_recvmsg+0x89/0xb0 [ 471.635338][T13882] ? netlink_sendmsg+0xbf0/0xbf0 [ 471.640334][T13882] ____sys_recvmsg+0x2ce/0x5e0 [ 471.645159][T13882] ? __sys_recvmsg_sock+0x50/0x50 [ 471.650249][T13882] ? import_iovec+0x73/0xa0 [ 471.654821][T13882] ___sys_recvmsg+0x216/0x590 [ 471.659558][T13882] ? __sys_recvmsg+0x2a0/0x2a0 [ 471.664372][T13882] ? ksys_write+0x1c4/0x260 [ 471.668946][T13882] ? __fget_files+0x43d/0x4b0 [ 471.673693][T13882] __x64_sys_recvmsg+0x20c/0x2e0 [ 471.678692][T13882] ? ___sys_recvmsg+0x590/0x590 [ 471.683603][T13882] ? lockdep_hardirqs_on+0x98/0x150 [ 471.688871][T13882] do_syscall_64+0x55/0xa0 [ 471.693333][T13882] ? clear_bhb_loop+0x40/0x90 [ 471.698050][T13882] ? clear_bhb_loop+0x40/0x90 [ 471.702780][T13882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.708726][T13882] RIP: 0033:0x7f0a8819c799 [ 471.713192][T13882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.732844][T13882] RSP: 002b:00007f0a8907b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 471.741303][T13882] RAX: ffffffffffffffda RBX: 00007f0a88415fa0 RCX: 00007f0a8819c799 [ 471.749317][T13882] RDX: 0000000040012102 RSI: 00002000000002c0 RDI: 0000000000000003 [ 471.757332][T13882] RBP: 00007f0a8907b090 R08: 0000000000000000 R09: 0000000000000000 [ 471.765397][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.773464][T13882] R13: 00007f0a88416038 R14: 00007f0a88415fa0 R15: 00007ffd48d29d28 [ 471.781524][T13882] [ 472.003747][T13887] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2859'. [ 472.795225][T13899] IPv6: Can't replace route, no match found [ 472.927515][T13903] validate_nla: 1 callbacks suppressed [ 472.927533][T13903] netlink: 'syz.3.2866': attribute type 40 has an invalid length. [ 474.532943][T13942] netlink: 703 bytes leftover after parsing attributes in process `syz.0.2880'. [ 474.840858][T13950] netlink: 'syz.1.2885': attribute type 1 has an invalid length. [ 474.860066][T13950] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2885'. [ 475.205729][T13958] netlink: 'syz.2.2887': attribute type 16 has an invalid length. [ 475.214884][T13958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2887'. [ 475.460803][T13963] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2897'. [ 476.386542][T13983] delete_channel: no stack [ 476.391337][T13983] delete_channel: no stack [ 476.486874][T13990] netlink: 'syz.0.2899': attribute type 16 has an invalid length. [ 476.507463][T13990] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2899'. [ 478.335869][T14021] netlink: 'syz.1.2911': attribute type 16 has an invalid length. [ 478.383450][T14021] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2911'. [ 478.939789][T14042] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2918'. [ 479.353475][T14047] warn_alloc: 3 callbacks suppressed [ 479.353494][T14047] syz.0.2921: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 479.411918][T14047] CPU: 1 PID: 14047 Comm: syz.0.2921 Not tainted syzkaller #0 [ 479.419470][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.429661][T14047] Call Trace: [ 479.432967][T14047] [ 479.435950][T14047] dump_stack_lvl+0x18c/0x250 [ 479.440667][T14047] ? show_regs_print_info+0x20/0x20 [ 479.445912][T14047] ? load_image+0x400/0x400 [ 479.450481][T14047] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 479.456939][T14047] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 479.463563][T14047] warn_alloc+0x246/0x340 [ 479.467939][T14047] ? stack_trace_save+0xaa/0x100 [ 479.472914][T14047] ? zone_watermark_ok_safe+0x230/0x230 [ 479.478508][T14047] ? kasan_set_track+0x5f/0x70 [ 479.483311][T14047] ? kasan_set_track+0x4e/0x70 [ 479.488103][T14047] ? __kasan_kmalloc+0x8f/0xa0 [ 479.492913][T14047] ? xsk_init_queue+0xad/0x100 [ 479.497806][T14047] ? xsk_setsockopt+0x4e5/0x760 [ 479.502710][T14047] ? do_sock_setsockopt+0x175/0x1a0 [ 479.507950][T14047] ? __x64_sys_setsockopt+0x182/0x200 [ 479.513379][T14047] __vmalloc_node_range+0x126/0x1330 [ 479.518735][T14047] ? free_vm_area+0x50/0x50 [ 479.523282][T14047] vmalloc_user+0x74/0x80 [ 479.527655][T14047] ? xskq_create+0xbf/0x170 [ 479.532199][T14047] xskq_create+0xbf/0x170 [ 479.536574][T14047] xsk_init_queue+0xad/0x100 [ 479.541198][T14047] xsk_setsockopt+0x4e5/0x760 [ 479.545916][T14047] ? xsk_poll+0x680/0x680 [ 479.550278][T14047] ? __fget_files+0x28/0x4b0 [ 479.554901][T14047] ? __fget_files+0x28/0x4b0 [ 479.559532][T14047] ? aa_sock_opt_perm+0x74/0x100 [ 479.564516][T14047] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 479.570189][T14047] ? security_socket_setsockopt+0x7e/0xa0 [ 479.575944][T14047] ? xsk_poll+0x680/0x680 [ 479.580307][T14047] do_sock_setsockopt+0x175/0x1a0 [ 479.585367][T14047] ? __fdget+0x180/0x210 [ 479.589647][T14047] __x64_sys_setsockopt+0x182/0x200 [ 479.594888][T14047] do_syscall_64+0x55/0xa0 [ 479.599337][T14047] ? clear_bhb_loop+0x40/0x90 [ 479.604045][T14047] ? clear_bhb_loop+0x40/0x90 [ 479.608756][T14047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.614675][T14047] RIP: 0033:0x7f18cc59c799 [ 479.619123][T14047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.638771][T14047] RSP: 002b:00007f18ca7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 479.647221][T14047] RAX: ffffffffffffffda RBX: 00007f18cc816090 RCX: 00007f18cc59c799 [ 479.655238][T14047] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 479.663244][T14047] RBP: 00007f18cc632bd9 R08: 0000000000000004 R09: 0000000000000000 [ 479.671267][T14047] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 479.679268][T14047] R13: 00007f18cc816128 R14: 00007f18cc816090 R15: 00007ffd857423d8 [ 479.687285][T14047] [ 479.736220][T14046] netlink: 'syz.0.2921': attribute type 16 has an invalid length. [ 479.746549][T14047] Mem-Info: [ 479.749933][T14047] active_anon:5393 inactive_anon:0 isolated_anon:0 [ 479.749933][T14047] active_file:18954 inactive_file:40090 isolated_file:0 [ 479.749933][T14047] unevictable:768 dirty:98 writeback:0 [ 479.749933][T14047] slab_reclaimable:10606 slab_unreclaimable:93328 [ 479.749933][T14047] mapped:24635 shmem:1361 pagetables:578 [ 479.749933][T14047] sec_pagetables:0 bounce:0 [ 479.749933][T14047] kernel_misc_reclaimable:0 [ 479.749933][T14047] free:1347515 free_pcp:6314 free_cma:0 [ 479.795648][T14047] Node 0 active_anon:21572kB inactive_anon:0kB active_file:75816kB inactive_file:160156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98340kB dirty:392kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11156kB pagetables:2312kB sec_pagetables:0kB all_unreclaimable? no [ 479.829495][T14047] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 479.861771][T14046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2921'. [ 479.863816][T14047] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.898697][T14047] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 479.904636][T14047] Node 0 DMA32 free:1479920kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21536kB inactive_anon:0kB active_file:75816kB inactive_file:159320kB unevictable:1536kB writepending:392kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:5976kB local_pcp:2248kB free_cma:0kB [ 479.941603][T14047] lowmem_reserve[]: 0 0 0 0 0 [ 479.947074][T14047] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 479.974669][T14047] lowmem_reserve[]: 0 0 0 0 0 [ 479.979733][T14047] Node 1 Normal free:3894780kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19004kB local_pcp:8404kB free_cma:0kB [ 480.077503][T14047] lowmem_reserve[]: 0 0 0 0 0 [ 480.084734][T14047] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 480.124878][T14047] Node 0 DMA32: 363*4kB (UME) 1287*8kB (UME) 1251*16kB (UME) 727*32kB (UME) 449*64kB (UME) 192*128kB (UME) 87*256kB (UME) 63*512kB (UME) 34*1024kB (UM) 14*2048kB (UM) 306*4096kB (UM) = 1479732kB [ 480.185157][T14047] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 480.202981][T14047] Node 1 Normal: 183*4kB (UE) 42*8kB (UME) 33*16kB (UME) 42*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3894780kB [ 480.231840][T14047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.251268][T14047] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.279273][T14047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 480.315409][T14058] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2925'. [ 480.325232][T14047] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 480.395475][T14047] 60405 total pagecache pages [ 480.409791][T14047] 0 pages in swap cache [ 480.425927][T14047] Free swap = 124996kB [ 480.440502][T14060] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2927'. [ 480.479332][T14047] Total swap = 124996kB [ 480.485523][T14047] 2097051 pages RAM [ 480.491790][T14047] 0 pages HighMem/MovableOnly [ 480.496571][T14047] 416922 pages reserved [ 480.533920][T14047] 0 pages cma reserved [ 480.869682][T14060] netlink: 'syz.3.2927': attribute type 29 has an invalid length. [ 480.914974][T14060] netlink: 'syz.3.2927': attribute type 29 has an invalid length. [ 480.952677][T14061] netlink: 'syz.3.2927': attribute type 29 has an invalid length. [ 480.985425][T14064] netlink: 'syz.3.2927': attribute type 29 has an invalid length. [ 481.640281][T14075] netlink: 'syz.2.2931': attribute type 1 has an invalid length. [ 481.657775][T14075] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2931'. [ 482.792891][T14084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2934'. [ 486.104500][T14093] netlink: 'syz.2.2937': attribute type 16 has an invalid length. [ 486.154443][T14093] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2937'. [ 488.681621][T14121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2947'. [ 489.221284][T14123] netlink: 'syz.1.2948': attribute type 16 has an invalid length. [ 489.295395][T14123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2948'. [ 490.151623][T14136] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 490.201664][T14136] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2954'. [ 491.147682][T14150] netlink: 'syz.1.2958': attribute type 5 has an invalid length. [ 491.604340][T14156] warn_alloc: 2 callbacks suppressed [ 491.604450][T14156] syz.3.2961: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 491.716213][T14156] CPU: 1 PID: 14156 Comm: syz.3.2961 Not tainted syzkaller #0 [ 491.723788][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.733915][T14156] Call Trace: [ 491.737267][T14156] [ 491.740275][T14156] dump_stack_lvl+0x18c/0x250 [ 491.745051][T14156] ? show_regs_print_info+0x20/0x20 [ 491.750331][T14156] ? load_image+0x400/0x400 [ 491.751896][T14157] netlink: 'syz.3.2961': attribute type 16 has an invalid length. [ 491.754905][T14156] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 491.769254][T14156] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 491.775871][T14156] warn_alloc+0x246/0x340 [ 491.780300][T14156] ? stack_trace_save+0xaa/0x100 [ 491.785328][T14156] ? zone_watermark_ok_safe+0x230/0x230 [ 491.788419][T14157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2961'. [ 491.791014][T14156] ? kasan_set_track+0x5f/0x70 [ 491.804756][T14156] ? kasan_set_track+0x4e/0x70 [ 491.809607][T14156] ? __kasan_kmalloc+0x8f/0xa0 [ 491.814446][T14156] ? xsk_init_queue+0xad/0x100 [ 491.819285][T14156] ? xsk_setsockopt+0x4e5/0x760 [ 491.824210][T14156] ? do_sock_setsockopt+0x175/0x1a0 [ 491.829497][T14156] ? __x64_sys_setsockopt+0x182/0x200 [ 491.834960][T14156] __vmalloc_node_range+0x126/0x1330 [ 491.840430][T14156] ? free_vm_area+0x50/0x50 [ 491.845068][T14156] vmalloc_user+0x74/0x80 [ 491.849487][T14156] ? xskq_create+0xbf/0x170 [ 491.854078][T14156] xskq_create+0xbf/0x170 [ 491.858569][T14156] xsk_init_queue+0xad/0x100 [ 491.863260][T14156] xsk_setsockopt+0x4e5/0x760 [ 491.868063][T14156] ? xsk_poll+0x680/0x680 [ 491.872479][T14156] ? lockdep_hardirqs_on+0x98/0x150 [ 491.877787][T14156] ? __fget_files+0x28/0x4b0 [ 491.882462][T14156] ? __fget_files+0x28/0x4b0 [ 491.887165][T14156] ? aa_sock_opt_perm+0x74/0x100 [ 491.892209][T14156] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 491.897833][T14156] ? security_socket_setsockopt+0x7e/0xa0 [ 491.903652][T14156] ? xsk_poll+0x680/0x680 [ 491.908082][T14156] do_sock_setsockopt+0x175/0x1a0 [ 491.913203][T14156] ? __fdget+0x180/0x210 [ 491.917547][T14156] __x64_sys_setsockopt+0x182/0x200 [ 491.922859][T14156] do_syscall_64+0x55/0xa0 [ 491.927358][T14156] ? clear_bhb_loop+0x40/0x90 [ 491.932113][T14156] ? clear_bhb_loop+0x40/0x90 [ 491.936878][T14156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.942843][T14156] RIP: 0033:0x7fbe00d9c799 [ 491.947346][T14156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.967038][T14156] RSP: 002b:00007fbe01bbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 491.975554][T14156] RAX: ffffffffffffffda RBX: 00007fbe01015fa0 RCX: 00007fbe00d9c799 [ 491.983597][T14156] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 491.991647][T14156] RBP: 00007fbe00e32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 491.999726][T14156] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 492.007774][T14156] R13: 00007fbe01016038 R14: 00007fbe01015fa0 R15: 00007ffd62dfe2c8 [ 492.015876][T14156] [ 492.106687][T14156] Mem-Info: [ 492.110274][T14156] active_anon:15645 inactive_anon:0 isolated_anon:0 [ 492.110274][T14156] active_file:18954 inactive_file:40094 isolated_file:0 [ 492.110274][T14156] unevictable:768 dirty:117 writeback:0 [ 492.110274][T14156] slab_reclaimable:10547 slab_unreclaimable:95589 [ 492.110274][T14156] mapped:34463 shmem:11862 pagetables:552 [ 492.110274][T14156] sec_pagetables:0 bounce:0 [ 492.110274][T14156] kernel_misc_reclaimable:0 [ 492.110274][T14156] free:1334756 free_pcp:8198 free_cma:0 [ 492.198247][T14156] Node 0 active_anon:62980kB inactive_anon:0kB active_file:75816kB inactive_file:160172kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137852kB dirty:468kB writeback:0kB shmem:46312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11108kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 492.298415][T14156] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 492.408316][T14156] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.467941][T14156] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 492.494083][T14156] Node 0 DMA32 free:1426000kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:64324kB inactive_anon:0kB active_file:75816kB inactive_file:159336kB unevictable:1536kB writepending:472kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:14036kB local_pcp:3728kB free_cma:0kB [ 492.587490][T14156] lowmem_reserve[]: 0 0 0 0 0 [ 492.592468][T14156] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.678383][T14156] lowmem_reserve[]: 0 0 0 0 0 [ 492.683334][T14156] Node 1 Normal free:3894780kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19004kB local_pcp:8404kB free_cma:0kB [ 492.768206][T14156] lowmem_reserve[]: 0 0 0 0 0 [ 492.773087][T14156] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 492.827896][T14156] Node 0 DMA32: 1*4kB (M) 1*8kB (U) 228*16kB (UE) 4*32kB (E) 381*64kB (UME) 191*128kB (UME) 87*256kB (UME) 63*512kB (UME) 34*1024kB (UM) 14*2048kB (UM) 306*4096kB (UM) = 1424012kB [ 492.867745][T14156] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 492.897465][T14156] Node 1 Normal: 183*4kB (UE) 42*8kB (UME) 33*16kB (UME) 42*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3894780kB [ 492.944327][T14156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.968874][T14156] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 492.987557][T14156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.997629][T14156] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.027588][T14156] 72125 total pagecache pages [ 493.032434][T14156] 0 pages in swap cache [ 493.036668][T14156] Free swap = 124996kB [ 493.044725][T14156] Total swap = 124996kB [ 493.057530][T14156] 2097051 pages RAM [ 493.061413][T14156] 0 pages HighMem/MovableOnly [ 493.066151][T14156] 416922 pages reserved [ 493.075632][T14156] 0 pages cma reserved [ 493.634645][T14184] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2970'. [ 495.446110][T14205] netlink: 'syz.0.2978': attribute type 16 has an invalid length. [ 495.478303][T14205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2978'. [ 495.931783][T14213] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2980'. [ 495.987600][T14213] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2980'. [ 496.057727][T14213] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2980'. [ 496.148728][T14212] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2980'. [ 497.661106][T14233] netlink: 'syz.0.2990': attribute type 16 has an invalid length. [ 497.687725][T14233] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2990'. [ 499.131813][T14259] FAULT_INJECTION: forcing a failure. [ 499.131813][T14259] name failslab, interval 1, probability 0, space 0, times 0 [ 499.144755][T14259] CPU: 1 PID: 14259 Comm: syz.1.2998 Not tainted syzkaller #0 [ 499.152250][T14259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.162359][T14259] Call Trace: [ 499.165665][T14259] [ 499.168622][T14259] dump_stack_lvl+0x18c/0x250 [ 499.173340][T14259] ? show_regs_print_info+0x20/0x20 [ 499.178574][T14259] ? load_image+0x400/0x400 [ 499.183105][T14259] ? perf_tp_event+0x132d/0x1450 [ 499.188073][T14259] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 499.193917][T14259] should_fail_ex+0x39d/0x4d0 [ 499.198650][T14259] should_failslab+0x9/0x20 [ 499.203210][T14259] slab_pre_alloc_hook+0x59/0x310 [ 499.208270][T14259] kmem_cache_alloc+0x5a/0x2d0 [ 499.213066][T14259] ? skb_clone+0x1eb/0x370 [ 499.217528][T14259] skb_clone+0x1eb/0x370 [ 499.221801][T14259] bpf_clone_redirect+0x167/0x4a0 [ 499.226874][T14259] bpf_prog_64e505a7b7f97a05+0x5d/0x62 [ 499.232369][T14259] ? perf_output_read+0xa20/0x14c0 [ 499.237520][T14259] ? perf_trace_preemptirq_template+0x269/0x330 [ 499.243830][T14259] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 499.249832][T14259] ? lockdep_softirqs_on+0x580/0x580 [ 499.255158][T14259] ? lock_chain_count+0x20/0x20 [ 499.260038][T14259] ? __local_bh_disable_ip+0x108/0x1a0 [ 499.265529][T14259] ? __cant_sleep+0x220/0x220 [ 499.270226][T14259] ? __local_bh_enable_ip+0x13a/0x1c0 [ 499.275629][T14259] ? _local_bh_enable+0xa0/0xa0 [ 499.280502][T14259] ? bpf_test_timer_continue+0x135/0x380 [ 499.286159][T14259] ? bpf_test_run+0x174/0x870 [ 499.290861][T14259] bpf_test_run+0x2df/0x870 [ 499.295451][T14259] ? bpf_test_run+0x174/0x870 [ 499.300153][T14259] ? convert___skb_to_skb+0x590/0x590 [ 499.305546][T14259] ? eth_get_headlen+0x210/0x210 [ 499.310517][T14259] ? bpf_prog_test_run_skb+0x7ad/0x12b0 [ 499.316120][T14259] ? convert___skb_to_skb+0x3d/0x590 [ 499.321436][T14259] bpf_prog_test_run_skb+0xad2/0x12b0 [ 499.326851][T14259] ? cpu_online+0x60/0x60 [ 499.331205][T14259] bpf_prog_test_run+0x321/0x390 [ 499.336189][T14259] __sys_bpf+0x49d/0x890 [ 499.340467][T14259] ? bpf_link_show_fdinfo+0x390/0x390 [ 499.345874][T14259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 499.352063][T14259] __x64_sys_bpf+0x7c/0x90 [ 499.356508][T14259] do_syscall_64+0x55/0xa0 [ 499.360964][T14259] ? clear_bhb_loop+0x40/0x90 [ 499.365665][T14259] ? clear_bhb_loop+0x40/0x90 [ 499.370370][T14259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.376290][T14259] RIP: 0033:0x7f0a8819c799 [ 499.380730][T14259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.400368][T14259] RSP: 002b:00007f0a8907b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.408805][T14259] RAX: ffffffffffffffda RBX: 00007f0a88415fa0 RCX: 00007f0a8819c799 [ 499.416805][T14259] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 499.424797][T14259] RBP: 00007f0a8907b090 R08: 0000000000000000 R09: 0000000000000000 [ 499.432798][T14259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.440785][T14259] R13: 00007f0a88416038 R14: 00007f0a88415fa0 R15: 00007ffd48d29d28 [ 499.448790][T14259] [ 500.042455][T14278] netlink: 'syz.3.3006': attribute type 3 has an invalid length. [ 500.097057][T14278] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 500.161739][T14278] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3006'. [ 500.439130][T14280] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3008'. [ 502.049206][ T5089] Bluetooth: hci3: command 0x0406 tx timeout [ 503.651819][T14350] netlink: 'syz.2.3031': attribute type 10 has an invalid length. [ 503.667054][T14350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3031'. [ 503.679507][T14350] veth0_vlan: left promiscuous mode [ 503.700753][T14350] veth0_vlan: entered promiscuous mode [ 503.749740][T14350] batman_adv: batadv0: Adding interface: veth0_vlan [ 503.757042][T14350] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.785359][T14350] batman_adv: batadv0: Interface activated: veth0_vlan [ 504.127216][T14369] IPv6: Can't replace route, no match found [ 504.241407][T14370] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3037'. [ 504.340895][T14361] netlink: 'syz.2.3037': attribute type 11 has an invalid length. [ 504.351880][T14361] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3037'. [ 505.407147][T14381] C: renamed from team_slave_0 (while UP) [ 505.436065][T14381] netlink: 'syz.2.3044': attribute type 1 has an invalid length. [ 505.457131][T14381] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3044'. [ 505.478932][T14381] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 505.671629][T14393] C: renamed from team_slave_0 (while UP) [ 505.709216][T14393] netlink: 'syz.0.3048': attribute type 8 has an invalid length. [ 505.734739][T14393] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 507.042662][T14416] netlink: 'syz.3.3057': attribute type 10 has an invalid length. [ 507.057591][T14416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3057'. [ 507.084041][T14416] batman_adv: batadv0: Adding interface: veth0_vlan [ 507.108257][T14416] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.166074][T14416] batman_adv: batadv0: Interface activated: veth0_vlan [ 507.303325][T14430] warn_alloc: 2 callbacks suppressed [ 507.303359][T14430] syz.1.3063: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 507.334710][T14432] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3062'. [ 507.353384][T14430] CPU: 0 PID: 14430 Comm: syz.1.3063 Not tainted syzkaller #0 [ 507.358759][T14432] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3062'. [ 507.360877][T14430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.379914][T14430] Call Trace: [ 507.383219][T14430] [ 507.386178][T14430] dump_stack_lvl+0x18c/0x250 [ 507.390903][T14430] ? show_regs_print_info+0x20/0x20 [ 507.396158][T14430] ? load_image+0x400/0x400 [ 507.400190][T14432] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 507.400698][T14430] ? __rcu_read_unlock+0x7c/0xd0 [ 507.413486][T14430] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 507.419958][T14430] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 507.426518][T14430] warn_alloc+0x246/0x340 [ 507.430908][T14430] ? stack_trace_save+0xaa/0x100 [ 507.435897][T14430] ? zone_watermark_ok_safe+0x230/0x230 [ 507.441521][T14430] ? kasan_set_track+0x5f/0x70 [ 507.446351][T14430] ? kasan_set_track+0x4e/0x70 [ 507.451144][T14430] ? __kasan_kmalloc+0x8f/0xa0 [ 507.455962][T14430] ? xsk_init_queue+0xad/0x100 [ 507.460787][T14430] ? xsk_setsockopt+0x4e5/0x760 [ 507.465705][T14430] ? do_sock_setsockopt+0x175/0x1a0 [ 507.470978][T14430] ? __x64_sys_setsockopt+0x182/0x200 [ 507.476425][T14430] __vmalloc_node_range+0x126/0x1330 [ 507.481801][T14430] ? free_vm_area+0x50/0x50 [ 507.486401][T14430] vmalloc_user+0x74/0x80 [ 507.490790][T14430] ? xskq_create+0xbf/0x170 [ 507.495373][T14430] xskq_create+0xbf/0x170 [ 507.499765][T14430] xsk_init_queue+0xad/0x100 [ 507.504422][T14430] xsk_setsockopt+0x4e5/0x760 [ 507.509149][T14430] ? xsk_poll+0x680/0x680 [ 507.513522][T14430] ? __fget_files+0x28/0x4b0 [ 507.518157][T14430] ? __fget_files+0x28/0x4b0 [ 507.522799][T14430] ? aa_sock_opt_perm+0x74/0x100 [ 507.527789][T14430] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 507.533380][T14430] ? security_socket_setsockopt+0x7e/0xa0 [ 507.539203][T14430] ? xsk_poll+0x680/0x680 [ 507.543580][T14430] do_sock_setsockopt+0x175/0x1a0 [ 507.548658][T14430] ? __fdget+0x180/0x210 [ 507.552958][T14430] __x64_sys_setsockopt+0x182/0x200 [ 507.558223][T14430] do_syscall_64+0x55/0xa0 [ 507.562717][T14430] ? clear_bhb_loop+0x40/0x90 [ 507.567458][T14430] ? clear_bhb_loop+0x40/0x90 [ 507.572191][T14430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.578142][T14430] RIP: 0033:0x7f0a8819c799 [ 507.582604][T14430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.602267][T14430] RSP: 002b:00007f0a8907b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 507.610733][T14430] RAX: ffffffffffffffda RBX: 00007f0a88415fa0 RCX: 00007f0a8819c799 [ 507.618742][T14430] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 507.626749][T14430] RBP: 00007f0a88232bd9 R08: 0000000000000004 R09: 0000000000000000 [ 507.634760][T14430] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 507.642785][T14430] R13: 00007f0a88416038 R14: 00007f0a88415fa0 R15: 00007ffd48d29d28 [ 507.650815][T14430] [ 507.665502][T14436] netlink: 'syz.1.3063': attribute type 16 has an invalid length. [ 507.674103][T14430] Mem-Info: [ 507.695405][T14430] active_anon:5171 inactive_anon:0 isolated_anon:0 [ 507.695405][T14430] active_file:18954 inactive_file:40100 isolated_file:0 [ 507.695405][T14430] unevictable:768 dirty:142 writeback:0 [ 507.695405][T14430] slab_reclaimable:10491 slab_unreclaimable:95143 [ 507.695405][T14430] mapped:24609 shmem:1361 pagetables:539 [ 507.695405][T14430] sec_pagetables:0 bounce:0 [ 507.695405][T14430] kernel_misc_reclaimable:0 [ 507.695405][T14430] free:1343082 free_pcp:10094 free_cma:0 [ 507.748985][T14430] Node 0 active_anon:20684kB inactive_anon:0kB active_file:75816kB inactive_file:160196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98336kB dirty:568kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11120kB pagetables:2156kB sec_pagetables:0kB all_unreclaimable? no [ 507.754143][T14436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3063'. [ 507.783968][T14430] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 507.962076][T14430] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.078769][T14430] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 508.085868][T14430] Node 0 DMA32 free:1461940kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20448kB inactive_anon:0kB active_file:75816kB inactive_file:159360kB unevictable:1536kB writepending:568kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:21944kB local_pcp:15752kB free_cma:0kB [ 508.187178][T14430] lowmem_reserve[]: 0 0 0 0 0 [ 508.193012][T14430] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.257428][T14430] lowmem_reserve[]: 0 0 0 0 0 [ 508.262975][T14430] Node 1 Normal free:3894780kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19004kB local_pcp:10600kB free_cma:0kB [ 508.307143][T14430] lowmem_reserve[]: 0 0 0 0 0 [ 508.317277][T14430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 508.333823][T14430] Node 0 DMA32: 1603*4kB (UME) 1653*8kB (UME) 996*16kB (UME) 694*32kB (UME) 332*64kB (UME) 94*128kB (UME) 87*256kB (UME) 62*512kB (UME) 34*1024kB (UM) 14*2048kB (UM) 306*4096kB (UM) = 1461940kB [ 508.371494][T14430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 508.389765][T14455] netlink: 'syz.0.3069': attribute type 9 has an invalid length. [ 508.397985][T14455] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3069'. [ 508.410088][T14430] Node 1 Normal: 183*4kB (UE) 42*8kB (UME) 33*16kB (UME) 42*32kB (UME) 20*64kB (UE) 5*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3894780kB [ 508.434297][T14430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.444877][T14430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 508.456667][T14430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 508.478681][T14430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 508.493990][T14430] 60415 total pagecache pages [ 508.501832][T14430] 0 pages in swap cache [ 508.515497][T14430] Free swap = 124996kB [ 508.520457][T14430] Total swap = 124996kB [ 508.526369][T14430] 2097051 pages RAM [ 508.532119][T14430] 0 pages HighMem/MovableOnly [ 508.536908][T14430] 416922 pages reserved [ 508.543407][T14430] 0 pages cma reserved [ 509.069887][T14475] netlink: 'syz.1.3078': attribute type 16 has an invalid length. [ 509.078834][T14475] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3078'. [ 509.929451][T14495] netlink: 'syz.1.3089': attribute type 16 has an invalid length. [ 509.963923][T14495] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3089'. [ 509.985032][T14497] netlink: 'syz.0.3088': attribute type 3 has an invalid length. [ 509.993532][T14497] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3088'. [ 510.222972][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.230073][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.473102][T14514] €Â: renamed from bridge_slave_1 (while UP) [ 511.005198][T14530] netlink: 'syz.2.3101': attribute type 16 has an invalid length. [ 511.019186][T14530] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3101'. [ 511.774584][T14553] netlink: 'syz.1.3108': attribute type 3 has an invalid length. [ 511.805204][T14553] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3108'. [ 512.084126][T14565] netlink: 'syz.0.3114': attribute type 16 has an invalid length. [ 512.106655][T14565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3114'. [ 512.232843][T14573] syz.3.3117[14573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.288246][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 512.326997][T14576] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3125'. [ 512.496813][T14582] netlink: 'syz.3.3121': attribute type 1 has an invalid length. [ 512.511977][T14582] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3121'. [ 513.108629][T14596] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3127'. [ 514.037057][T14629] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3137'. [ 514.860623][T14639] netlink: 'syz.3.3142': attribute type 16 has an invalid length. [ 514.869400][T14639] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3142'. [ 515.106885][T14651] IPv6: Can't replace route, no match found [ 515.799044][T14674] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3152'. [ 516.050119][T14678] netlink: 'syz.1.3154': attribute type 16 has an invalid length. [ 516.067357][T14678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3154'. [ 516.721013][T14697] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3163'. [ 519.391569][T14765] delete_channel: no stack [ 521.238941][T14795] mac80211_hwsim hwsim25 wlan0: left promiscuous mode [ 521.247600][T14795] mac80211_hwsim hwsim25 wlan0: left allmulticast mode [ 521.261366][T14796] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3200'. [ 521.275487][T14800] netlink: 'syz.3.3203': attribute type 10 has an invalid length. [ 521.294751][T14800] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 521.426409][T14800] batman_adv: batadv0: Removing interface: veth0_vlan [ 521.529232][T14800] veth0_vlan: left promiscuous mode [ 521.546893][T14800] veth0_vlan: entered promiscuous mode [ 521.570008][T14800] team0: Device veth0_vlan failed to register rx_handler [ 521.784858][T14810] IPv6: Can't replace route, no match found [ 521.904187][T14813] tun0: tun_chr_ioctl cmd 1074025677 [ 521.912303][T14813] tun0: linktype set to 776 [ 522.761108][T14828] ------------[ cut here ]------------ [ 522.766649][T14828] WARNING: CPU: 1 PID: 14828 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 522.776928][T14828] Modules linked in: [ 522.781080][T14828] CPU: 1 PID: 14828 Comm: syz.1.3214 Not tainted syzkaller #0 [ 522.788625][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 522.798782][T14828] RIP: 0010:perf_pending_task+0x35c/0x470 [ 522.804566][T14828] Code: ff 84 db 75 14 e8 d4 df d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 df d5 ff e8 2b 68 4f ff eb e5 e8 b4 df d5 ff <0f> 0b e9 f3 fe ff ff e8 a8 df d5 ff 48 c7 c7 b0 f2 1c 8d 4c 89 f6 [ 522.824432][T14828] RSP: 0018:ffffc9000ea379c0 EFLAGS: 00010293 [ 522.830630][T14828] RAX: ffffffff81b1355c RBX: ffff88805c87d9b8 RCX: ffff888024a2da00 [ 522.838729][T14828] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 522.847215][T14828] RBP: 0000000000000001 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 522.855440][T14828] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: ffff888024a2da00 [ 522.863530][T14828] R13: ffff88805e509130 R14: ffff88805c87d778 R15: 1ffff1100b90faef [ 522.871605][T14828] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 522.880635][T14828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.887261][T14828] CR2: 00007f18cc5e9e80 CR3: 0000000066ac4000 CR4: 00000000003506e0 [ 522.895331][T14828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 522.903451][T14828] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 522.911598][T14828] Call Trace: [ 522.914930][T14828] [ 522.917988][T14828] task_work_run+0x1d4/0x260 [ 522.922647][T14828] ? task_work_cancel+0x220/0x220 [ 522.928070][T14828] do_exit+0x95a/0x2460 [ 522.932298][T14828] ? get_signal+0x1068/0x13f0 [ 522.937030][T14828] ? put_task_struct+0xc0/0xc0 [ 522.941957][T14828] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 522.948467][T14828] ? lock_chain_count+0x20/0x20 [ 522.953379][T14828] ? _raw_spin_lock_irq+0xbb/0xf0 [ 522.958606][T14828] do_group_exit+0x21b/0x2d0 [ 522.963257][T14828] ? lockdep_hardirqs_on+0x98/0x150 [ 522.968618][T14828] get_signal+0x12fc/0x13f0 [ 522.973203][T14828] arch_do_signal_or_restart+0xc2/0x800 [ 522.978934][T14828] ? get_sigframe_size+0x20/0x20 [ 522.983926][T14828] ? perf_trace_preemptirq_template+0xac/0x330 [ 522.990204][T14828] ? exit_to_user_mode_loop+0x3b/0x110 [ 522.995719][T14828] exit_to_user_mode_loop+0x70/0x110 [ 523.001184][T14828] exit_to_user_mode_prepare+0xee/0x180 [ 523.006791][T14828] syscall_exit_to_user_mode+0x1a/0x50 [ 523.012484][T14828] do_syscall_64+0x61/0xa0 [ 523.016990][T14828] ? clear_bhb_loop+0x40/0x90 [ 523.021808][T14828] ? clear_bhb_loop+0x40/0x90 [ 523.026547][T14828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.032562][T14828] RIP: 0033:0x7f0a8819c799 [ 523.037045][T14828] Code: Unable to access opcode bytes at 0x7f0a8819c76f. [ 523.044247][T14828] RSP: 002b:00007f0a8907b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 523.053193][T14828] RAX: fffffffffffffe00 RBX: 00007f0a88415fa8 RCX: 00007f0a8819c799 [ 523.061443][T14828] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a88415fa8 [ 523.069546][T14828] RBP: 00007f0a88415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 523.077631][T14828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.085733][T14828] R13: 00007f0a88416038 R14: 00007ffd48d29c40 R15: 00007ffd48d29d28 [ 523.093922][T14828] [ 523.096995][T14828] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 523.104297][T14828] CPU: 1 PID: 14828 Comm: syz.1.3214 Not tainted syzkaller #0 [ 523.111766][T14828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.121836][T14828] Call Trace: [ 523.125139][T14828] [ 523.128084][T14828] dump_stack_lvl+0x18c/0x250 [ 523.132801][T14828] ? show_regs_print_info+0x20/0x20 [ 523.138032][T14828] ? load_image+0x400/0x400 [ 523.142592][T14828] panic+0x2dc/0x730 [ 523.146522][T14828] ? bpf_jit_dump+0xd0/0xd0 [ 523.151062][T14828] __warn+0x2e0/0x470 [ 523.155083][T14828] ? perf_pending_task+0x35c/0x470 [ 523.160232][T14828] ? perf_pending_task+0x35c/0x470 [ 523.165370][T14828] report_bug+0x2be/0x4f0 [ 523.169745][T14828] ? perf_pending_task+0x35c/0x470 [ 523.174993][T14828] ? perf_pending_task+0x35c/0x470 [ 523.180138][T14828] ? perf_pending_task+0x35e/0x470 [ 523.185277][T14828] handle_bug+0xcf/0x120 [ 523.189547][T14828] exc_invalid_op+0x1a/0x50 [ 523.194083][T14828] asm_exc_invalid_op+0x1a/0x20 [ 523.198970][T14828] RIP: 0010:perf_pending_task+0x35c/0x470 [ 523.204721][T14828] Code: ff 84 db 75 14 e8 d4 df d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 df d5 ff e8 2b 68 4f ff eb e5 e8 b4 df d5 ff <0f> 0b e9 f3 fe ff ff e8 a8 df d5 ff 48 c7 c7 b0 f2 1c 8d 4c 89 f6 [ 523.224347][T14828] RSP: 0018:ffffc9000ea379c0 EFLAGS: 00010293 [ 523.230436][T14828] RAX: ffffffff81b1355c RBX: ffff88805c87d9b8 RCX: ffff888024a2da00 [ 523.238426][T14828] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 523.246448][T14828] RBP: 0000000000000001 R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 523.254488][T14828] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: ffff888024a2da00 [ 523.262577][T14828] R13: ffff88805e509130 R14: ffff88805c87d778 R15: 1ffff1100b90faef [ 523.270579][T14828] ? perf_pending_task+0x35c/0x470 [ 523.275727][T14828] task_work_run+0x1d4/0x260 [ 523.280347][T14828] ? task_work_cancel+0x220/0x220 [ 523.285410][T14828] do_exit+0x95a/0x2460 [ 523.289597][T14828] ? get_signal+0x1068/0x13f0 [ 523.294292][T14828] ? put_task_struct+0xc0/0xc0 [ 523.299085][T14828] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 523.305084][T14828] ? lock_chain_count+0x20/0x20 [ 523.309949][T14828] ? _raw_spin_lock_irq+0xbb/0xf0 [ 523.314995][T14828] do_group_exit+0x21b/0x2d0 [ 523.319628][T14828] ? lockdep_hardirqs_on+0x98/0x150 [ 523.324861][T14828] get_signal+0x12fc/0x13f0 [ 523.329401][T14828] arch_do_signal_or_restart+0xc2/0x800 [ 523.334972][T14828] ? get_sigframe_size+0x20/0x20 [ 523.339945][T14828] ? perf_trace_preemptirq_template+0xac/0x330 [ 523.346138][T14828] ? exit_to_user_mode_loop+0x3b/0x110 [ 523.351688][T14828] exit_to_user_mode_loop+0x70/0x110 [ 523.357022][T14828] exit_to_user_mode_prepare+0xee/0x180 [ 523.362602][T14828] syscall_exit_to_user_mode+0x1a/0x50 [ 523.368089][T14828] do_syscall_64+0x61/0xa0 [ 523.372535][T14828] ? clear_bhb_loop+0x40/0x90 [ 523.377239][T14828] ? clear_bhb_loop+0x40/0x90 [ 523.382025][T14828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.387942][T14828] RIP: 0033:0x7f0a8819c799 [ 523.392373][T14828] Code: Unable to access opcode bytes at 0x7f0a8819c76f. [ 523.399410][T14828] RSP: 002b:00007f0a8907b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 523.407845][T14828] RAX: fffffffffffffe00 RBX: 00007f0a88415fa8 RCX: 00007f0a8819c799 [ 523.415848][T14828] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a88415fa8 [ 523.423838][T14828] RBP: 00007f0a88415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 523.431834][T14828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.439834][T14828] R13: 00007f0a88416038 R14: 00007ffd48d29c40 R15: 00007ffd48d29d28 [ 523.447866][T14828] [ 523.451472][T14828] Kernel Offset: disabled [ 523.455806][T14828] Rebooting in 86400 seconds..