last executing test programs: 3.259334487s ago: executing program 4 (id=782): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f00000001c0)="8b", 0x34000, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) ppoll(&(0x7f0000000240)=[{r0, 0x2088}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xb, &(0x7f0000001400)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000360007012abd700000000000017c00000c00018008000600a77a8c35fff75e5d34d4f802b6d43a9a0f8b32939b17b1207db0ce398a42970d88793ab5768179d4c1f9cc8ca9fec5492ea6f5aa41c52b41a6a616dad9940f33ffbdf43b58fd5848", @ANYRES32=0x0, @ANYBLOB="0c00028008002300", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) getsockopt(r1, 0x1, 0xe, &(0x7f00000003c0)=""/4124, &(0x7f00000014c0)=0x101c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) (async) sendto$inet6(r0, &(0x7f00000001c0)="8b", 0x34000, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) ppoll(&(0x7f0000000240)=[{r0, 0x2088}], 0x1, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) (async) sendfile(r3, r3, 0x0, 0xb) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000100)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xb, &(0x7f0000001400)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000360007012abd700000000000017c00000c00018008000600a77a8c35fff75e5d34d4f802b6d43a9a0f8b32939b17b1207db0ce398a42970d88793ab5768179d4c1f9cc8ca9fec5492ea6f5aa41c52b41a6a616dad9940f33ffbdf43b58fd5848", @ANYRES32=0x0, @ANYBLOB="0c00028008002300", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) getsockopt(r1, 0x1, 0xe, &(0x7f00000003c0)=""/4124, &(0x7f00000014c0)=0x101c) (async) 3.14875515s ago: executing program 1 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/189, 0x9a}, {&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000001300)=""/4077, 0xfed}, {&(0x7f0000002300)=""/193, 0xc1}, {&(0x7f0000002400)=""/139, 0x8b}, {&(0x7f00000024c0)=""/81, 0x51}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x9}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) close(r3) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000940)={'syzkaller0\x00', @multicast}) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000003540)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x4008004) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000040c0), 0x56) sendmsg$kcm(r8, &(0x7f0000004100)={&(0x7f0000004140)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004200)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) (async) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000bc0)) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0xcc, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x9c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x98, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x25f}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x0, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x10}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xca1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x26044028}, 0x4000800) 2.944845131s ago: executing program 0 (id=786): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x18}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x20, 0x80, 0x8, 0x5f3, {{0x6, 0x4, 0x3, 0x32, 0x18, 0x65, 0x0, 0xfe, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@end]}}}}}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000640), 0x0) close(r4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r4, r4, 0x19, 0x0, @val=@netfilter={0x20, 0x0, 0x6}}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000900)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000b80)={r0, &(0x7f0000000a80)='*\x00', 0x0, &(0x7f0000000ac0)={@align=0x1, {0x2e44, 0x4, 0x9, 0x101}}, 0x2, &(0x7f0000000b00)={@_ha_fsid}, &(0x7f0000000b40)=0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x1b, &(0x7f0000000400)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @generic={0x5, 0x9, 0x9, 0x5, 0x9}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x4, 0x0, 0x3, 0xa, 0x9, 0xffffffffffffffe0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x0, 0x0, 0x4, 0x6, 0x40, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000500)='GPL\x00', 0x0, 0x53, &(0x7f0000000540)=""/83, 0x40f00, 0x42, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x4, 0x7f, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[r5, r6, r7, r8, r9], 0x0, 0x10, 0x7}, 0x94) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012006b6d373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a745251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30bed3b7c26b14d3c3d2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000084) 2.699731154s ago: executing program 2 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x1000, 0x1, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x40000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa4000000000000070400000080ffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e95000000000000db54c6e5f10000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.640785401s ago: executing program 1 (id=790): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140), 0xe) (async, rerun: 64) listen(r0, 0x30) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000a80)={{r2}, "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"}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0x158}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=@newlink={0xbc, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xa}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x1000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xb3b0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x18, 0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.259024772s ago: executing program 3 (id=791): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x4102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xd, 0x7fff, 0xfffffff9}, {0x0, 0x2, 0x5, 0x3, 0x6}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000840), 0x56) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0xa, 0x1, 0xc53a, 0x9, 0xfff, 0xfffffffa, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) (async) sendmsg$kcm(r5, &(0x7f00000009c0)={&(0x7f0000001140)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001200)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x204ee9f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, 0x0, &(0x7f0000000580)) r12 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r12, &(0x7f0000001080)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) (async) writev(r12, &(0x7f00000010c0)=[{&(0x7f0000001100)="06c3", 0xffd8}], 0x1) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000300001800600010002000000460002001100000014001e167f000001000000000000000000000000060024754e200000"], 0x44}}, 0x0) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 2.226994727s ago: executing program 4 (id=792): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x200, 0x3, {{0x42, 0x4, 0x3, 0x1, 0x108, 0x64, 0x0, 0xff, 0x2f, 0x0, @loopback, @multicast1, {[@generic={0x89, 0x3, "85"}, @cipso={0x86, 0x2d, 0x2, [{0x2, 0xd, "c723e992deece34efde1fc"}, {0x7, 0x4, "96ff"}, {0x5, 0x6, "54c5f3ef"}, {0x0, 0x10, "6a76c6101b9df6763dbecd35a30d"}]}, @noop, @rr={0x7, 0x13, 0x1e, [@multicast1, @remote, @private=0xa010102, @remote]}, @timestamp_addr={0x44, 0x44, 0x4f, 0x1, 0xd, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@empty, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x10001}, {@local, 0x1000}, {@multicast1, 0xcd}, {@multicast1, 0xb}, {@rand_addr=0x64010102, 0x6731}]}, @timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x9, [{@loopback, 0x7}, {@multicast1, 0xa8b}, {@private=0xa010101, 0x7}, {@local, 0x9062}, {@remote, 0x81}, {@broadcast, 0xfff}, {@empty, 0x10000}]}, @ssrr={0x89, 0x1b, 0xe1, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010100, @local, @local]}, @ssrr={0x89, 0x13, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2, @broadcast]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0x200, 0x3, {{0x42, 0x4, 0x3, 0x1, 0x108, 0x64, 0x0, 0xff, 0x2f, 0x0, @loopback, @multicast1, {[@generic={0x89, 0x3, "85"}, @cipso={0x86, 0x2d, 0x2, [{0x2, 0xd, "c723e992deece34efde1fc"}, {0x7, 0x4, "96ff"}, {0x5, 0x6, "54c5f3ef"}, {0x0, 0x10, "6a76c6101b9df6763dbecd35a30d"}]}, @noop, @rr={0x7, 0x13, 0x1e, [@multicast1, @remote, @private=0xa010102, @remote]}, @timestamp_addr={0x44, 0x44, 0x4f, 0x1, 0xd, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@empty, 0x80}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x10001}, {@local, 0x1000}, {@multicast1, 0xcd}, {@multicast1, 0xb}, {@rand_addr=0x64010102, 0x6731}]}, @timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x9, [{@loopback, 0x7}, {@multicast1, 0xa8b}, {@private=0xa010101, 0x7}, {@local, 0x9062}, {@remote, 0x81}, {@broadcast, 0xfff}, {@empty, 0x10000}]}, @ssrr={0x89, 0x1b, 0xe1, [@local, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010100, @local, @local]}, @ssrr={0x89, 0x13, 0xbd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2, @broadcast]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@jmp={0x5, 0x0, 0x3, 0xb, 0x2, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xf, r0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@jmp={0x5, 0x0, 0x3, 0xb, 0x2, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xf, r0}, 0x94) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0xe0, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6}, {0x2, 0x3}, {0x1, 0x1, 0x2}, 0x10001, 0xffffffff}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"9d41", 0xd5}}, @common=@frag={{0x30}, {[0x8, 0x2], 0x9, 0x20, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x5}, {0xffffffffffffffff, 0x2, 0x4}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x2, "7f3659d63494b24c34d40e10a3677d4fe83fe40e7d29596052d63abe5470"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 1.991713078s ago: executing program 2 (id=793): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 1.935878653s ago: executing program 1 (id=794): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000850000000700000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000010c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000001100)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) 1.91814232s ago: executing program 4 (id=795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000012c0)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r1, 0x84, 0x84, &(0x7f0000000080)={0x1, @in={{0x2, 0x4e23, @remote}}, 0x4e24}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0xc) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.710548338s ago: executing program 0 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000006000000b704000000000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0xda) 1.659908666s ago: executing program 2 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000b80)={0x0, @in={{0x2, 0x4e24, @local}}, 0x5, 0x1}, &(0x7f0000000c40)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000c80)={r3, 0x3f, "646ceb89d395d001e3ba28c713c81b8ab18997f3b4fa9e9f098d6167cdc36ada3dd74c15665789c1bb204b7ad5e2be9bad5e14f8c8c0117f1a2a4b85aba03b"}, &(0x7f0000000d00)=0x47) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="7d0ec30e1c8319bbde8d5f91704c63c3afeb986a53889bb017d23b874f1bc6332f4cb6696280e62e13b36075d477148177ab8f63204d088a42df18e4fc4329493df466b40009df7e9344e71992169919136e2a27b622c1cd0c05e8c8ea3807f037974d7fd523590f206a94cad23e1490235407fbdd8f3f56cda7a8b34f39e6c332d2264e6577d1ef54e3710cfba2566d3a8fa3eb002c36a5edb3daf4aa731682bbe58e35e55c699a3507b29b2463760c3237fa7c2cb8ea", 0xb7}, {&(0x7f0000000600)="e0a28f681f353ac9641f73774daffa0e7e55f060c48e8b95b33a140115296edc126c9ae7277cab4b53d14cae4c424e30d85d0b30ccd82cc9c35fc7595b3a3e897451dd3c7670ddd966a67911bbe39c2a50ec070a201082722c3170159be074ba407f8ddeaad28dde9fcd4ffac6f8aff312e698fa25006b51870cb8c113532320ec011843722b3ca340cd86e8f60dd915e648d22addda8d40943258a26a017dc0889796e37f256350a13cca544a4249e72b6cac767d9e3832e243112f1a687d809c537f553c0f5b3b7cd4d06cc790a89bf25fe7f2e6e2127c7006aa1cf43d2a5d264ab8ed3fc8ab0f945fdebda0cf4a7f93d5", 0xf2}, {&(0x7f0000000700)="c92bd5be5489ed2c74d0", 0x11}, {&(0x7f0000000740)="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", 0x3d8}], 0x4, &(0x7f0000000b40)=[@ip_retopts={{0x14}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x40000ad, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x208, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_VF_PORTS={0x1e0, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '@\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "566f4046c4ec7d5e2eb851f22252d78f"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x50d}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "dbaa89a50255b98889cb57acd6c0bbba"}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "8ebc1fa73dce8d4ab734c17da817b515"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "acd876340fb0bafadecdbe6cada396d4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f939dd5c9a14c7876019d2d5e5ccca11"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a0fd0533f841d82f30492a62fea41f59"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "73f6f3e2bb7cd822cdb98edaa296baa9"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x59}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}]}, {0x94, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "52b9e54a9c41df248497b7406d7526ba"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dc03ef46406675459035501f6a197571"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x7e6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6cff6fc5d83ac2e445458cbe265f9571"}, @IFLA_PORT_PROFILE={0xc, 0x2, 'macvlan\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c24ae51d50bd3328b36e35b221ab5ea8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4b6c2bf53e73eb25a4f5309140d0df2f"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xe7\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b7d9f6e8dd0dc4a9e83deb3a6a9545cb"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa7}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "f064e05414565714b38c569abf21de0c"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c8884eaa30963a48424e34b3786e4472"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "145b7f43b32523bb1991021703fe9700"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}]}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x208}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async, rerun: 64) write(r0, &(0x7f0000000000)="300000001c00010401000000000000002d000000010000008000000105000100080000000a0002000000000000000000", 0x30) (async) recvfrom(r0, &(0x7f0000001000)=""/1024, 0x400, 0x0, 0x0, 0x0) (async) write(r0, &(0x7f0000000000)="1c0000001e00010302000000000000002d00"/28, 0x1c) (async, rerun: 64) r6 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 64) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) r7 = socket$kcm(0x2, 0x2, 0x73) (rerun: 64) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000e40)={r7, &(0x7f0000000d40)=':\x00', 0x2a0200, &(0x7f0000000d80)={@_ha_fsid={[0x4, 0x5]}, {0x100, 0x3, 0x4, 0xffffffff}}, 0xbade, &(0x7f0000000dc0)={@_ha_fsid}, &(0x7f0000000e00)=0x8}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000e80)={'wg0\x00', 0x8000}) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e25, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) recvfrom(r0, &(0x7f0000001000)=""/4096, 0x1000, 0x0, 0x0, 0x0) (rerun: 64) 1.533789584s ago: executing program 3 (id=798): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.kill\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x20018800}, 0x44004) unshare(0x62000480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0xc, 0x0, 0x3, 0x88, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x40, 0x4, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000500)={@private1, 0x0}, &(0x7f0000000540)=0x14) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0}, &(0x7f0000000640)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'wg2\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1b8, r3, 0x84, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) r13 = accept4(r1, 0x0, &(0x7f0000000c00), 0x80800) read$alg(r13, &(0x7f0000000c40)=""/80, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={r1, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000f80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) sendmsg$inet(r14, &(0x7f0000001240)={&(0x7f0000000d00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d40)="3a91e77909ce68e9f7e3cd6520032d7b33c720435b019809e3940f01a3ca622eda3da0b26962089a0a83c8c3c42d7f05e771c270da2ff537780cd01377a4e4fdd2c348740ef4f383f2e7f618562e641c724323618778715d6605049dd5ed5b3f60eec91d127d06e7e1e8f878a64926d2b7a6f582a9b839c3e45a40ed3bd91a43c31f0cfbead11e47a67eb3", 0x8b}, {&(0x7f0000000e00)="368877e244d2f8d3559f587572f21b4d7a5614a0f08c8b50a7c4314f66d48e897ba88bfc696716", 0x27}], 0x2, &(0x7f00000011c0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @loopback, @multicast1}}}], 0x68}, 0x40) sendto$phonet(r13, &(0x7f0000001280)="57ca1ce243a92caf071bc74d30b21326635bddfac3c5871bf10e5a1e7be555dc2fb5bedb77c94f645dfd469a310c974a2cb23089c350bbe284ef31a313ded8c965179335b001cc42517e489c37b384f8331fc5d891b716491367a9532abca9ef0741fda29c938278a2346eb3c9ff194214bb1b21dd5669309e6e8baf2b1c8dbadfbd8f1e905a1d4b3a8e015f77321903ed1640762e9a444c8f0684b85b7b96ee9b3c6ad795f7751486da61ac7c2c0a91548a141b2cc85e8cdafa6b93ddc05b099151f674c1fc4c7ab998ab781530e6b01e77b5f440cd68460cba3941af79a6f7a6116500835657fd", 0xe8, 0x20040000, &(0x7f0000001380)={0x23, 0xd, 0x7e, 0x29}, 0x10) getpeername$packet(r1, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001400)=0x14) r16 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001440), 0x4) close(r16) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000001480)=0x400) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000014c0)={0x158, 0xa, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000003540)={0x1d, r8, 0x3, {0x1, 0xf0, 0x2}}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r13, 0x6, 0x1f, &(0x7f0000003580), 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000003740)={0xc, 0x0, &(0x7f00000035c0), &(0x7f0000003600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', r10, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000003640)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r12, r1, 0x9, 0x0, &(0x7f0000003680)=[{0x5, 0x5, 0x5, 0xc}, {0x5, 0x4, 0xb, 0x4}, {0x5, 0x2, 0xd, 0x3}, {0x5, 0x4, 0xc, 0x7}, {0x1, 0x5, 0x5}, {0x3, 0x2, 0x5, 0x4}, {0x0, 0x4, 0x7, 0x2}, {0x2, 0x2, 0x9, 0x3}, {0x5, 0x1, 0x6, 0x8}], 0x10, 0x1}, 0x94) 1.490754854s ago: executing program 0 (id=799): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0xd0, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0xa8, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x800}]}}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x16}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0xa02, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_USERDATA={0xb, 0x7, 0x1, 0x0, "35c43d40021ec3"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x20, 0x7, 0x1, 0x0, "fdb427bacea2b4218722505f76dfe0b660e7ffcbd6911a077aba535f"}]}], {0x14}}, 0x184}}, 0x10) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f0000000040)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ppoll(&(0x7f0000000780)=[{r0, 0xb44d}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xef, &(0x7f0000000640)=""/186, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0x8, 0x10, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a00000000046c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd"], 0x11c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.386888414s ago: executing program 4 (id=800): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000040)="de", 0x1}], 0x1, 0x2, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) close(0x4) ppoll(&(0x7f00000001c0)=[{r0, 0x72}, {r0, 0x480}], 0x2, 0x0, 0x0, 0x0) 1.343065652s ago: executing program 1 (id=801): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r3, 0x6, 0x2}, 0x8) (async, rerun: 64) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000cf000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09000000000000550901000010000095000000000000002d90000000000000bf91000000000000b702000003000000850000002a040000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) 1.212925733s ago: executing program 2 (id=802): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0xc, 0x2, 0x3, 0x2, 0x1, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffb, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x2, 0x0, 0x1, [@generic='R']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000002020000000000000900000018420000fdffffff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70300000800ffb0b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.111795948s ago: executing program 0 (id=803): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000440)={0x9, 0xee29, 0x59466634, 0x7, 0xec4b}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000038a15d838500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000038a15d838500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={r2, 0x100000, 0x0}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={r2, 0x100000, 0x0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYBLOB], 0x138}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)={0x24, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000000f80)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000600)=""/124, 0x7c}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000000a40)=""/185, 0xb9}, {&(0x7f0000000b00)=""/183, 0xb7}], 0x9, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000000dc0), 0x6e, &(0x7f0000000e40), 0x0, &(0x7f0000000e80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x2, 0x40000000, &(0x7f0000001040)={r6, r7+10000000}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000000000000b"], 0x28}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) socket$l2tp(0x2, 0x2, 0x73) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.082602896s ago: executing program 3 (id=804): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x400}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x6, 0x25, &(0x7f00000001c0)=""/37, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x1, 0x10, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0xe}, 0x94) socket$phonet(0x23, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113800000000008510000002000000b4480800f0ffffff9500c2001200"/48], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 1.081822994s ago: executing program 4 (id=805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0xc1, 0xf5, 0x5, 0x29, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x8, 0x8001, 0x19000000}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="1e8fcce8f00c20c3713b0c220663c3b6", 0x10}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) vmsplice(r2, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xfcda, 0xfffff369, 0x1, 0x2ac02, r0, 0xb, '\x00', r1, r2, 0x1, 0x2, 0x5, 0x3, @value=r2}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={0x0, 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$tipc(r3, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {0x0}, {&(0x7f0000002dc0)="3336f70cd0e0e42718329330f8b1453fa54879ffb9a0e2383e3b54cdcabe57e9253ff776cab55ce561139eba62ea", 0x2e}], 0x3, 0x0, 0x0, 0x4000}, 0x8000) (async) close(0x3) (async) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x8776, 0x401, 0x0, 0x21e000, 0x80080000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}, {0x0}], 0x2) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r4, r5, 0x0, 0x20000000002) close(0x3) 1.046082917s ago: executing program 1 (id=806): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e23, 0x4, @mcast1, 0xb90}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) splice(r1, 0x0, r2, &(0x7f0000000040), 0x6, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000080)={{0x4, @empty, 0x4e24, 0x3, 'lblcr\x00', 0x31, 0x5, 0x60}, {@rand_addr=0x64010102, 0x4e21, 0x2000, 0x5, 0x4, 0xfffffffe}}, 0x44) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x1407, 0x1, 0xffff, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x40}}, 0x10) bind$inet6(r0, &(0x7f0000001bc0)={0xa, 0x4e23, 0x399, @private0}, 0x1c) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0xbedb9cc4da7b60e2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40048c5}, 0x0) 887.835118ms ago: executing program 3 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000800)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000800)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080002000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080002000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) write(r0, &(0x7f0000000900)="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", 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x9cee8000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000140), 0x0, 0x4040000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xd99b}, {{0x0, 0x0, &(0x7f0000000680)=[{0xfffffffffffffffd}], 0x1}, 0x4}], 0x2, 0x20, 0x0) (async) recvmmsg(r4, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xd99b}, {{0x0, 0x0, &(0x7f0000000680)=[{0xfffffffffffffffd}], 0x1}, 0x4}], 0x2, 0x20, 0x0) epoll_create1(0x80000) (async) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000006c0)={0x8000000e}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000006c0)={0x8000000e}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000480)=[{{&(0x7f0000000740)={0x2, 0x0, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="a9050000002074640000000000003552bde5c064", 0x14}, {0x0}], 0x2}, 0xf5ffffff}], 0x1, 0x0) (async) sendmmsg$inet(r7, &(0x7f0000000480)=[{{&(0x7f0000000740)={0x2, 0x0, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f00000007c0)="a9050000002074640000000000003552bde5c064", 0x14}, {0x0}], 0x2}, 0xf5ffffff}], 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x8, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5], 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) (async) sendmsg$nl_route(r6, &(0x7f0000000700)={0x0, 0x8, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5], 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000380)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x10, &(0x7f0000000540)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r11, 0x7, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={r9, 0xfffffffe, 0x20}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYBLOB="01000000ef01010100000000000000000ffe00000800000028"], 0x60}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYBLOB="01000000ef01010100000000000000000ffe00000800000028"], 0x60}}, 0x0) sendmmsg(r2, &(0x7f0000000140), 0x40000000000009f, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001900), 0x0) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001980)={r9}, &(0x7f00000019c0)=0x8) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000004c0), 0x4) 732.74086ms ago: executing program 1 (id=808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x1ff, @private0, 0x7fffffff}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000080)="6b003b15", 0x4}], 0x1}}, {{&(0x7f00000019c0)={0xa, 0x4e23, 0x3, @private2, 0x3ec}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001a00)="027a2b02", 0x4}], 0x1}}], 0x3, 0x4004851) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fd3f00000000000007000000850000000f000000850000000e00000095"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) 598.958238ms ago: executing program 0 (id=809): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socket(0x2d, 0x2, 0x0) (async) r0 = socket(0x2d, 0x2, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f00000001c0)="01000000", 0x4) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@generic={0x2d, "00000000000000000800010000000600"}, 0x34) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0x4}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0x4}, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller1\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0xfa, r3, 0x1, 0x10, 0x6, @local}, 0x14) (async) bind$packet(r1, &(0x7f0000000180)={0x11, 0xfa, r3, 0x1, 0x10, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x20004, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', r3, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 534.751345ms ago: executing program 4 (id=810): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), 0x4) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)="28a437eb5ea914dcb8f8cc21e8f0cfca6136431affa72e25d26a1b0669e0ce9a4f63e88305a3379f0518bcfc1c08554a55ae00341cd3710d19b60b66c387c61cc551ced10a27e71a9a53d2fd616c1e809958dadabbc71dbe4d0093ce9cffe3248206306f28a2c7805e8e49f2b1c3e15073e9bafd20868035aa1aa24a64299511e41643c1f617b23462cf48db1e1e99e9c3b9ae95d889d1e1323517ed8e39d76e8c968931c2765562ef468834da937978ea09e9fc86e56f0bb8afe79982151d3f87b22944268720a8fd5096a154255e79e7990a50f2f7d3d60d754d2579d537226ad800572b56d0d704f49ea3e8edaac0d7", 0xf1}], 0x1, 0x971b, 0xfffffffd) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000200)={0x8, 'macvtap0\x00', {}, 0xb9a}) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=@ipv6_newnexthop={0x338, 0x68, 0x8, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0xa}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}]}, @NHA_ENCAP={0x2d8, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x2d4, 0x1, {{0x0, {0xb6b87ea241e3c4d8, 0x0, 0x4, 0x0, 0x9, 0x4, 0x8}}, [@ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x42}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @empty, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, @private0, @loopback, @mcast2, @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @local, @mcast1, @private1, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x43}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @mcast1, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}]}}}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x338}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1a, &(0x7f00000006c0)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@lx}, @ringbuf_query, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0x1, 0x3, 0x0, 0xffffffffffffffe0, 0x1}, @exit, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf8}], &(0x7f00000007c0)='GPL\x00', 0x6, 0x6a, &(0x7f0000000800)=""/106, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0x9, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x3, 0x5, 0x5, 0x5}, {0x4, 0x3, 0x3, 0x5}, {0x4, 0x2, 0x6, 0x6}, {0x2, 0x1, 0xc, 0x3}], 0x10, 0xb}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000680)='./file0\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x98, r5, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "319139f5e47d1c20b6fa1d36154b543733e41af370062f66"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x98}, 0x1, 0x0, 0x0, 0x8811}, 0x200080c0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xbd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x232e6700}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc080}, 0x8801) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, r5, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x9}}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x1, 0x4, 0x6, 0xbd3b, 0x6, 0x1, 0x8, 0x200]}]}, 0x60}, 0x1, 0x0, 0x0, 0x28000000}, 0x10000000) r7 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000f00)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000f40)={0x0, @broadcast, @local}, &(0x7f0000000f80)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001040)={'syztnl2\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', r8, 0x29, 0x5, 0x3, 0x5, 0x20, @loopback, @loopback, 0x700, 0x10, 0xdd, 0x10001}}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000001080)=0xffff, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r4) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x14c, r9, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x66}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_IE={0x70, 0x2a, [@ssid={0x0, 0xc, @random="0584be39581eadeb6d55748b"}, @ssid={0x0, 0x1, @random="d7"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x4, @broadcast, 0x9, @value, 0x2, 0x8, @device_b, 0x4}}, @supported_rates, @ext_channel_switch={0x3c, 0x4, {0x1, 0xfe, 0x70, 0xff}}, @chsw_timing={0x68, 0x4, {0x6}}, @supported_rates={0x1, 0x8, [{0x16, 0x1}, {0x16, 0x1}, {0x2}, {0x28}, {0xc, 0x1}, {0x37, 0x1}, {0x16}, {0x36, 0x1}]}, @ht={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x4, 0x1, 0x0, 0x6, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x8, 0x4}}]}, @NL80211_ATTR_IE={0x9b, 0x2a, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @tim={0x5, 0x73, {0x80, 0xb4, 0x1, "7e269265d2e9224050fc8953662093d239789085bd7069654078dd5c71a475a9fd29b4734093c43be77ea7a99fc2b7bd7d6eb19dd2fdb7402d9172f6137d36924db5c86a7854d297d516863e55ae1761c858a851fa541583cde1cc62a675911b694b47b124043dac78f399c42cbe6447"}}, @ibss={0x6, 0x2, 0x1}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0xd, 0x4}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7f9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000001340), 0x4) unshare(0x8020080) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000001380)=0x4, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000013c0), &(0x7f0000001400)=0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001480)=@o_path={&(0x7f0000001440)='./file0\x00', 0x0, 0x10, r0}, 0x18) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), r4) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x128, r10, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x128}}, 0x4000000) socket$inet6_sctp(0xa, 0x0, 0x84) 534.332969ms ago: executing program 2 (id=811): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0x0, 0x10, &(0x7f0000000e40), 0xfffffffffffffd00}, 0x48) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{r4}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pI4 \x00'}, 0x20) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="0c00030003000000000000000800020000000000060006000000000014000b00ff01000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) 494.12215ms ago: executing program 3 (id=812): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e010600f800fd0000ec058cdecf0fa4f69652b23bf9968d372a0ddfe196faa30f83514813d0527685407bc8366e2838397d6abc25357799ac708b65efffdb10e1376a4f6d4ab9949102000036dbf30bf928c37695"], 0x164}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000980)=ANY=[], 0x32600) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000a00)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x6c, @mcast1}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@delpolicy={0x70, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x80, 0x7, 0x0, 0x0, 0x80}}, [@sec_ctx={0xc, 0x8, {0x3}}, @mark={0xc, 0x15, {0x0, 0x100}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x70}}, 0x4004040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@getqdisc={0x24, 0x26, 0xdee441a58c70f12a, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x6}, {0x7, 0xe}, {0xc, 0x6}}}, 0x24}}, 0x20000004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="5c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9980030000000000280012800b00010065727370616e00001800028004001200060010004e99000000000f00ff010000140003004f69637666"], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r5, &(0x7f0000001040), 0x40000000000009f, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000001040)={0x1c, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8}}, {{0xa, 0x4e23, 0x0, @remote, 0xffffffff}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000c80)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x24, 0x0, &(0x7f00000009c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@delchain={0x24, 0x26, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xa, 0x9}, {0x2, 0x6}}}, 0x24}}, 0x4000000) write$cgroup_pressure(r7, &(0x7f0000000400)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="0300"/14, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db00180000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x6, 0xd1, &(0x7f0000000600)=""/209}, 0x94) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x68, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00', [], "0004"}}}}}}}, 0x0) 203.783115ms ago: executing program 2 (id=813): close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x12c, 0x0, 0x40a, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @local, 0xc9}}}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, &(0x7f0000000640)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000007c0), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r6) getsockname$packet(r6, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a00)=0x14) sendmsg$nl_route(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r7, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r6], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)={0x54, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001c40)={0x0, @loopback}, &(0x7f0000001c80)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d80)={0x18, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffe3, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x5, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001940)={r10, 0x0, 0xb0, 0x65, &(0x7f0000000280)="fd9a5c264abb9f516777a27f7268b0970371d7dfe9c73d8969202bd6db413aef557dc45f108541f386d61ef24f5924b57bd74f833a98631ea961a6500f0e8ac030048329ede5ff907c05d5cba3d212a49aa0a75ad2a9aef84d7cd7a61b337a8e70cace9b0e978a4d593b3c1546466ed12271a29e00607656e45a82708ea3ff237309c27e67add597679ede6bcd3627968319f081c89a0b21787dfac9a6f96782a3068d0c3f195a1f8698e53ec7772087", &(0x7f0000000340)=""/101, 0x9, 0x0, 0x64, 0x1000, &(0x7f00000003c0)="55d789ac656d5530b76bd9b65b1697364af5a634b791f451680cdb0418f12a3ce9c3d3fb685f082f11fbd885c34163cedbf8ce63ac53e4fb4a4d037d9e933c3285e3d1e2f568595b92863cfe7df3d630c2875bbf71671b51cbd4416e4bd91ea96c2d8413", &(0x7f0000000940)="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", 0x0, 0x0, 0xdcb5}, 0x50) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x84) 85.300351ms ago: executing program 0 (id=814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xa, 0x14, 0x0, 0x1, [@generic="801213ac58ec"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000111401000000000000000000040001"], 0x28}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="22170000000000002000b1996a1ee0b6147a05c073128008000100677470001400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3, @ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 0s ago: executing program 3 (id=815): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf0, 0x5, 0x0, 0x80000000, 0x6cb3, 0xd97, 0x26e, 0x4, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2, 0x5, 0x7ff00000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=@bloom_filter={0x1e, 0x26f, 0x80, 0x4000400, 0x111, 0x1, 0x3ff, '\x00', r1, r2, 0x4, 0x1, 0x0, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000477b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 78.127464][ T5607] cgroup: Unknown subsys name 'net' [ 78.262196][ T5607] cgroup: Unknown subsys name 'cpuset' [ 78.266050][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.864391][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.283810][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.286838][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.288390][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.311961][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.312549][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.313578][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.313667][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.315002][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.315609][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.315629][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.316003][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.318066][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.319010][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.322607][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.323647][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.324381][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.330133][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.333315][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.338940][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.346020][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.347005][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.352872][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.384148][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.396785][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.397692][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.432374][ T5620] rdma_rxe: Failed to create IPv6 UDP tunnel [ 83.444995][ T5619] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.447839][ T5622] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.452178][ T5619] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.471490][ T5619] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.472458][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.511304][ T5617] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.815977][ T5619] infiniband rxe0: set active [ 83.817366][ T5619] infiniband rxe0: added rxe_eth0 [ 83.850458][ T5619] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 83.850501][ T5619] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 83.850543][ T5619] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 83.900562][ T5624] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.934868][ T5619] RDS/IB: rxe0: added [ 83.935202][ T5619] smc: adding ib device rxe0 with port count 1 [ 83.935321][ T5619] smc: ib device rxe0 port 1 has no pnetid [ 83.977818][ T1230] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.985909][ T5619] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.265051][ T5619] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.398859][ T5623] Bluetooth: hci4: command tx timeout [ 84.478780][ T5623] Bluetooth: hci0: command tx timeout [ 84.478799][ T4936] Bluetooth: hci3: command tx timeout [ 84.478917][ T5623] Bluetooth: hci2: command tx timeout [ 84.478926][ T4936] Bluetooth: hci1: command tx timeout [ 84.671660][ T5619] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.856778][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.858692][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.858854][ T5622] bridge_slave_0: entered allmulticast mode [ 84.861187][ T5622] bridge_slave_0: entered promiscuous mode [ 84.940955][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.941114][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.941259][ T5620] bridge_slave_0: entered allmulticast mode [ 84.943901][ T5620] bridge_slave_0: entered promiscuous mode [ 84.974688][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.974853][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.975583][ T5622] bridge_slave_1: entered allmulticast mode [ 85.000819][ T5622] bridge_slave_1: entered promiscuous mode [ 85.022598][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.022700][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.022811][ T5617] bridge_slave_0: entered allmulticast mode [ 85.024437][ T5617] bridge_slave_0: entered promiscuous mode [ 85.057099][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.057279][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.057377][ T5620] bridge_slave_1: entered allmulticast mode [ 85.069777][ T5620] bridge_slave_1: entered promiscuous mode [ 85.074309][ T5619] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.121645][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.121770][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.122173][ T5617] bridge_slave_1: entered allmulticast mode [ 85.125435][ T5617] bridge_slave_1: entered promiscuous mode [ 85.200792][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.273232][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.288884][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.313707][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.361712][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.382454][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.407010][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.407159][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.407261][ T5618] bridge_slave_0: entered allmulticast mode [ 85.411372][ T5618] bridge_slave_0: entered promiscuous mode [ 85.443149][ T5622] team0: Port device team_slave_0 added [ 85.466259][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.466984][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.467076][ T5618] bridge_slave_1: entered allmulticast mode [ 85.468893][ T5618] bridge_slave_1: entered promiscuous mode [ 85.501990][ T5622] team0: Port device team_slave_1 added [ 85.502132][ T5619] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.550140][ T5617] team0: Port device team_slave_0 added [ 85.602802][ T5620] team0: Port device team_slave_0 added [ 85.604391][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.604404][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.604427][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.617669][ T5620] team0: Port device team_slave_1 added [ 85.625570][ T5617] team0: Port device team_slave_1 added [ 85.642535][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.651519][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.651561][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.651633][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.766831][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.808435][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.808455][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.808482][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.886970][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.886989][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.887027][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.888689][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.888728][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.888794][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.903019][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.903083][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.903155][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.019127][ T5618] team0: Port device team_slave_0 added [ 86.034810][ T5618] team0: Port device team_slave_1 added [ 86.100886][ T5622] hsr_slave_0: entered promiscuous mode [ 86.102420][ T5622] hsr_slave_1: entered promiscuous mode [ 86.147587][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.147606][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.147634][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.205171][ T5620] hsr_slave_0: entered promiscuous mode [ 86.205983][ T5620] hsr_slave_1: entered promiscuous mode [ 86.206538][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 86.206608][ T5620] Cannot create hsr debugfs directory [ 86.207447][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.207460][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.207483][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.272111][ T5617] hsr_slave_0: entered promiscuous mode [ 86.274919][ T5617] hsr_slave_1: entered promiscuous mode [ 86.276934][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 86.276997][ T5617] Cannot create hsr debugfs directory [ 86.479681][ T5618] hsr_slave_0: entered promiscuous mode [ 86.480484][ T5618] hsr_slave_1: entered promiscuous mode [ 86.481053][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 86.481072][ T5618] Cannot create hsr debugfs directory [ 86.488339][ T5626] Bluetooth: hci4: command tx timeout [ 86.558412][ T5626] Bluetooth: hci2: command tx timeout [ 86.558448][ T5626] Bluetooth: hci0: command tx timeout [ 86.558471][ T5626] Bluetooth: hci1: command tx timeout [ 86.558495][ T5626] Bluetooth: hci3: command tx timeout [ 87.050582][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.062939][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.066868][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.092482][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.095650][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.123827][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.124979][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.146303][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.308131][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.308290][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.308430][ T5619] bridge_slave_0: entered allmulticast mode [ 87.310144][ T5619] bridge_slave_0: entered promiscuous mode [ 87.316824][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.316933][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.320120][ T5619] bridge_slave_1: entered allmulticast mode [ 87.330634][ T5619] bridge_slave_1: entered promiscuous mode [ 87.396553][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.405375][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.421043][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.422683][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.425884][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.460456][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.461770][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.465242][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.524059][ T5619] team0: Port device team_slave_0 added [ 87.524170][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.531905][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.567453][ T5619] team0: Port device team_slave_1 added [ 87.660932][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.660953][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.660979][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.664170][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.664186][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.664212][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.704501][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.772342][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.795707][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.803086][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.830144][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.833462][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.834301][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.837156][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.911478][ T5619] hsr_slave_0: entered promiscuous mode [ 87.912275][ T5619] hsr_slave_1: entered promiscuous mode [ 87.912833][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 87.912854][ T5619] Cannot create hsr debugfs directory [ 87.991090][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.995273][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.996222][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.004594][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.044770][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.056687][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.061188][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.073742][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.203969][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.320956][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.354906][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.355005][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.397552][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.407677][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.425953][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.436443][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.454274][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.454364][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.457645][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.467916][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.492400][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.505963][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.517598][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.558623][ T4936] Bluetooth: hci4: command tx timeout [ 88.585367][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.614870][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.629499][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.629573][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.640383][ T4936] Bluetooth: hci3: command tx timeout [ 88.640475][ T4936] Bluetooth: hci1: command tx timeout [ 88.640547][ T4936] Bluetooth: hci0: command tx timeout [ 88.640603][ T4936] Bluetooth: hci2: command tx timeout [ 88.699022][ T1301] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.699095][ T1301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.725031][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.747314][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.784979][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.785090][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.844875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.844988][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.895592][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.965100][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.965232][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.004521][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.004635][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.146815][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.259412][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.291169][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.291325][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.350090][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.350197][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.931254][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.119978][ T5622] veth0_vlan: entered promiscuous mode [ 90.152864][ T5622] veth1_vlan: entered promiscuous mode [ 90.327489][ T5622] veth0_macvtap: entered promiscuous mode [ 90.359308][ T5622] veth1_macvtap: entered promiscuous mode [ 90.405701][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.461833][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.509940][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.580742][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.580935][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.580984][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.581033][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.638923][ T5626] Bluetooth: hci4: command tx timeout [ 90.718872][ T5626] Bluetooth: hci2: command tx timeout [ 90.718903][ T4936] Bluetooth: hci0: command tx timeout [ 90.718909][ T5626] Bluetooth: hci1: command tx timeout [ 90.718933][ T4936] Bluetooth: hci3: command tx timeout [ 90.727901][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.763899][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.787600][ T5620] veth0_vlan: entered promiscuous mode [ 90.816925][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.884517][ T5620] veth1_vlan: entered promiscuous mode [ 90.981323][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.981347][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.070247][ T5617] veth0_vlan: entered promiscuous mode [ 91.115858][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.115882][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.160161][ T5617] veth1_vlan: entered promiscuous mode [ 91.200383][ T5619] veth0_vlan: entered promiscuous mode [ 91.234115][ T5620] veth0_macvtap: entered promiscuous mode [ 91.236552][ T5619] veth1_vlan: entered promiscuous mode [ 91.270859][ T5620] veth1_macvtap: entered promiscuous mode [ 91.323062][ T5622] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.375769][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.393849][ T5617] veth0_macvtap: entered promiscuous mode [ 91.419113][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.450468][ T5619] veth0_macvtap: entered promiscuous mode [ 91.455489][ T5617] veth1_macvtap: entered promiscuous mode [ 91.463598][ T5618] veth0_vlan: entered promiscuous mode [ 91.486668][ T5619] veth1_macvtap: entered promiscuous mode [ 91.516525][ T5618] veth1_vlan: entered promiscuous mode [ 91.528738][ T1301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.528788][ T1301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.528828][ T1301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.528866][ T1301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.630509][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.652846][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.680742][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.698970][ T1301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.699920][ T1301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.729215][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.747921][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.747944][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.800388][ T1301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.848641][ T9] cfg80211: failed to load regulatory.db [ 91.864991][ T161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.892742][ T5618] veth0_macvtap: entered promiscuous mode [ 91.906422][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.906443][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.949676][ T5618] veth1_macvtap: entered promiscuous mode [ 92.076273][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.076296][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.142420][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.214850][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.240444][ T5832] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.243548][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.243569][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.299904][ T1301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.300864][ T1301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.300916][ T1301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.300932][ T1301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.301301][ T1301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.307977][ T143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.384193][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385071][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.499185][ T1301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.499280][ T1301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.554473][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.554497][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.567394][ T143] IPVS: starting estimator thread 0... [ 92.648507][ T5840] IPVS: using max 31 ests per chain, 74400 per kthread [ 92.775814][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.775836][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.936401][ T5847] ip6gre1: entered promiscuous mode [ 92.983874][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.983898][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.292739][ T5854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.295163][ T5855] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 93.399732][ T5857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.399769][ T5857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.464528][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.464564][ T5867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.477408][ T5858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.477500][ T5858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.706448][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 93.708061][ T5876] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15'. [ 94.037602][ T5883] bridge_slave_0: left allmulticast mode [ 94.037647][ T5883] bridge_slave_0: left promiscuous mode [ 94.038472][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.132023][ T5883] bridge_slave_1: left allmulticast mode [ 94.132049][ T5883] bridge_slave_1: left promiscuous mode [ 94.132254][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.214470][ T5883] bond0: (slave bond_slave_0): Releasing backup interface [ 94.300392][ T5883] bond0: (slave bond_slave_1): Releasing backup interface [ 94.384786][ T5883] team0: Port device team_slave_0 removed [ 94.427923][ T5883] team0: Port device team_slave_1 removed [ 94.435872][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.435890][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.477239][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 94.493950][ T5883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.493975][ T5883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.516918][ T5883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 94.573722][ T5884] team0: Port device xfrm0 added [ 94.614154][ T5897] syzkaller1: entered allmulticast mode [ 94.824839][ T5915] IPv6: NLM_F_REPLACE set, but no existing node found! [ 95.329865][ T5940] TCP: TCP_TX_DELAY enabled [ 95.330808][ T5940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.446101][ T5948] xt_hashlimit: size too large, truncated to 1048576 [ 95.491870][ T5943] ip6tnl1: entered allmulticast mode [ 95.637086][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.860935][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.861225][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.861453][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.861669][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.861882][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.862097][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.882193][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.882876][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.894495][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 95.913643][ T5961] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 96.342780][ T5963] team0: Port device veth3 added [ 96.569043][ T5963] team0: Port device veth5 added [ 97.061834][ T6005] Zero length message leads to an empty skb [ 97.075224][ T6004] erspan0: entered promiscuous mode [ 97.085190][ T6004] gretap0: entered promiscuous mode [ 97.106704][ T6004] erspan0: left promiscuous mode [ 97.117651][ T6004] gretap0: left promiscuous mode [ 97.211697][ T6013] xt_connbytes: Forcing CT accounting to be enabled [ 97.217890][ T6005] erspan0: entered promiscuous mode [ 97.232422][ T6005] gretap0: entered promiscuous mode [ 97.241762][ T6005] erspan0: left promiscuous mode [ 97.255878][ T6005] gretap0: left promiscuous mode [ 97.264334][ T6017] Cannot find set identified by id 0 to match [ 97.282848][ T13] IPVS: starting estimator thread 0... [ 97.327039][ T6017] __nla_validate_parse: 14 callbacks suppressed [ 97.327063][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'. [ 97.378339][ T6019] IPVS: using max 25 ests per chain, 60000 per kthread [ 97.421130][ T6017] IPVS: Error connecting to the multicast addr [ 97.655938][ T6029] geneve1: entered promiscuous mode [ 97.731322][ T6041] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 97.834441][ T6044] Bluetooth: MGMT ver 1.23 [ 97.902820][ T6048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.544770][ T6194] netlink: 48 bytes leftover after parsing attributes in process `syz.4.63'. [ 99.544795][ T6194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.63'. [ 99.544812][ T6194] netlink: 48 bytes leftover after parsing attributes in process `syz.4.63'. [ 99.603286][ T6184] gretap1: entered allmulticast mode [ 100.090514][ T6200] ipvlan2: entered promiscuous mode [ 100.154491][ T6212] Bluetooth: MGMT ver 1.23 [ 100.305745][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 100.384707][ T6217] warning: `syz.1.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.484471][ T6221] netlink: 64 bytes leftover after parsing attributes in process `syz.1.71'. [ 100.487707][ T6221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.71'. [ 100.491939][ T6224] netlink: 596 bytes leftover after parsing attributes in process `syz.4.73'. [ 100.901916][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.78'. [ 101.112481][ T6251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.79'. [ 102.486492][ T6262] ip6erspan0: entered promiscuous mode [ 102.673561][ T6272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.697791][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 102.908566][ T6289] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 102.967790][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 103.004751][ T6293] ip6gretap0: entered promiscuous mode [ 103.005398][ T6293] macvlan2: entered allmulticast mode [ 103.005419][ T6293] ip6gretap0: entered allmulticast mode [ 103.310084][ T6316] Illegal XDP return value 4294967277 on prog (id 42) dev N/A, expect packet loss! [ 103.927318][ T6357] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 103.967742][ T6359] netlink: 128 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.977070][ T6357] netlink: 67 bytes leftover after parsing attributes in process `syz.3.107'. [ 104.603297][ T6366] batman_adv: batadv0: Adding interface: syzkaller0 [ 104.603317][ T6366] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.603349][ T6366] batman_adv: batadv0: Interface activated: syzkaller0 [ 104.811094][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 104.860548][ T6402] bridge0: port 1(syz_tun) entered blocking state [ 104.860779][ T6402] bridge0: port 1(syz_tun) entered disabled state [ 104.862577][ T6402] syz_tun: entered allmulticast mode [ 104.874021][ T6402] syz_tun: entered promiscuous mode [ 104.876974][ T6402] bridge0: port 1(syz_tun) entered blocking state [ 104.878490][ T6402] bridge0: port 1(syz_tun) entered forwarding state [ 104.917881][ T6358] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 104.967081][ T6358] batman_adv: batadv0: Removing interface: syzkaller0 [ 104.986836][ T6402] bridge0: port 2(ip6gretap0) entered blocking state [ 104.986949][ T6402] bridge0: port 2(ip6gretap0) entered disabled state [ 104.987076][ T6402] ip6gretap0: entered allmulticast mode [ 105.021240][ T6402] ip6gretap0: entered promiscuous mode [ 105.021802][ T6402] bridge0: port 2(ip6gretap0) entered blocking state [ 105.021893][ T6402] bridge0: port 2(ip6gretap0) entered forwarding state [ 105.205534][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 105.655461][ T6435] validate_nla: 19 callbacks suppressed [ 105.655483][ T6435] netlink: 'syz.0.121': attribute type 21 has an invalid length. [ 105.655602][ T6435] netlink: 132 bytes leftover after parsing attributes in process `syz.0.121'. [ 105.861427][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 105.861459][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 105.866008][ T6444] smc: removing ib device rxe0 [ 105.994031][ T6444] smbdirect: ib_dev[rxe0] removed [ 106.234167][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.122'. [ 107.437733][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068523000: rx timeout, send abort [ 107.447181][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888068523000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.981829][ T6501] __nla_validate_parse: 24 callbacks suppressed [ 108.981850][ T6501] netlink: 56 bytes leftover after parsing attributes in process `syz.2.134'. [ 108.981866][ T6501] netlink: 52 bytes leftover after parsing attributes in process `syz.2.134'. [ 108.981882][ T6501] netlink: 56 bytes leftover after parsing attributes in process `syz.2.134'. [ 109.077956][ T6505] netlink: 80 bytes leftover after parsing attributes in process `syz.4.136'. [ 109.102028][ T6507] syzkaller1: entered promiscuous mode [ 109.102052][ T6507] syzkaller1: entered allmulticast mode [ 109.241274][ T6513] macsec1: entered promiscuous mode [ 109.282540][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 109.315067][ T6455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.315374][ T6459] netlink: 'syz.1.127': attribute type 11 has an invalid length. [ 109.718324][ T6530] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 109.747788][ T6535] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 109.793657][ T6530] netlink: 67 bytes leftover after parsing attributes in process `syz.1.142'. [ 109.810103][ T6535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.839609][ T6537] bond1: (slave gretap1): making interface the new active one [ 109.841236][ T6537] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 109.943194][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 109.984671][ T6545] netlink: 56 bytes leftover after parsing attributes in process `syz.0.147'. [ 109.984693][ T6545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.147'. [ 109.984710][ T6545] netlink: 56 bytes leftover after parsing attributes in process `syz.0.147'. [ 110.364078][ T161] tipc: Subscription rejected, illegal request [ 110.490496][ T6570] syzkaller0: entered promiscuous mode [ 110.490521][ T6570] syzkaller0: entered allmulticast mode [ 110.491352][ T63] IPVS: starting estimator thread 0... [ 110.491438][ T6562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 110.491929][ T6567] x_tables: duplicate underflow at hook 1 [ 110.590954][ T6584] IPVS: using max 31 ests per chain, 74400 per kthread [ 112.974709][ T6555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.089424][ T6596] geneve2: entered promiscuous mode [ 113.089449][ T6596] geneve2: entered allmulticast mode [ 113.407176][ T6613] ip_tables: iptables: counters copy to user failed while replacing table [ 113.437234][ T6613] syzkaller1: entered promiscuous mode [ 113.437271][ T6613] syzkaller1: entered allmulticast mode [ 113.546935][ T6615] syzkaller1: entered promiscuous mode [ 113.546992][ T6615] syzkaller1: entered allmulticast mode [ 113.627246][ T6617] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 113.654758][ T6617] bond1: entered promiscuous mode [ 113.655209][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.707936][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.717614][ T6617] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 113.717632][ T6617] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 113.742494][ T6617] bond1: (slave xfrm1): making interface the new active one [ 113.742517][ T6617] xfrm1: entered promiscuous mode [ 113.747185][ T6617] xfrm1: left promiscuous mode [ 114.048829][ T6626] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 114.108438][ T6626] bond1 (unregistering): Released all slaves [ 114.368195][ T6644] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 114.410356][ T6650] __nla_validate_parse: 4 callbacks suppressed [ 114.410378][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 114.410393][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.173'. [ 114.413910][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 114.663778][ T6657] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 114.683639][ T6665] atomic_op ffff8880665179e0 conn xmit_atomic 0000000000000000 [ 114.743170][ T6663] batadv0: entered promiscuous mode [ 114.745903][ T6663] macvtap1: entered promiscuous mode [ 114.770135][ T6663] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 114.775221][ T6663] batadv0: left promiscuous mode [ 115.071585][ T6682] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 115.071610][ T6682] netlink: 'syz.2.181': attribute type 2 has an invalid length. [ 115.161063][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 115.161089][ T6691] openvswitch: netlink: Flow key attr not present in new flow. [ 115.517042][ T6710] FAULT_INJECTION: forcing a failure. [ 115.517042][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.517141][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.4.191 Not tainted syzkaller #0 PREEMPT(full) [ 115.517167][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.517188][ T6710] Call Trace: [ 115.517197][ T6710] [ 115.517210][ T6710] dump_stack_lvl+0xe8/0x150 [ 115.517261][ T6710] should_fail_ex+0x410/0x560 [ 115.517298][ T6710] _copy_from_user+0x2d/0xb0 [ 115.517334][ T6710] __copy_msghdr+0x390/0x590 [ 115.517372][ T6710] ___sys_sendmsg+0x213/0x360 [ 115.517402][ T6710] ? __lock_acquire+0x747/0x2de0 [ 115.517431][ T6710] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.517501][ T6710] ? __fget_files+0x2a/0x420 [ 115.517539][ T6710] ? __fget_files+0x3a2/0x420 [ 115.517584][ T6710] __x64_sys_sendmsg+0x1b1/0x290 [ 115.517619][ T6710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.517675][ T6710] do_syscall_64+0x166/0x520 [ 115.517704][ T6710] ? trace_irq_disable+0x3b/0x140 [ 115.517728][ T6710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.517752][ T6710] ? clear_bhb_loop+0x70/0xc0 [ 115.517779][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.517801][ T6710] RIP: 0033:0x7fe48039f559 [ 115.517829][ T6710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.517852][ T6710] RSP: 002b:00007fe481239028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.517884][ T6710] RAX: ffffffffffffffda RBX: 00007fe480625fa0 RCX: 00007fe48039f559 [ 115.517900][ T6710] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 115.517914][ T6710] RBP: 00007fe481239090 R08: 0000000000000000 R09: 0000000000000000 [ 115.517927][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.517940][ T6710] R13: 00007fe480626038 R14: 00007fe480625fa0 R15: 00007ffce3f44918 [ 115.517976][ T6710] [ 117.208328][ T4936] Bluetooth: hci4: command 0x0405 tx timeout [ 118.027967][ T6680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.030667][ T6696] netlink: 'syz.2.188': attribute type 2 has an invalid length. [ 118.030721][ T6696] netlink: 228 bytes leftover after parsing attributes in process `syz.2.188'. [ 118.515706][ T6758] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 118.533024][ T6761] FAULT_INJECTION: forcing a failure. [ 118.533024][ T6761] name failslab, interval 1, probability 0, space 0, times 1 [ 118.533057][ T6761] CPU: 0 UID: 0 PID: 6761 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(full) [ 118.533093][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.533106][ T6761] Call Trace: [ 118.533115][ T6761] [ 118.533124][ T6761] dump_stack_lvl+0xe8/0x150 [ 118.533161][ T6761] should_fail_ex+0x410/0x560 [ 118.533198][ T6761] should_failslab+0xa8/0x100 [ 118.533230][ T6761] __kmalloc_noprof+0xfe/0x720 [ 118.533255][ T6761] ? sock_kmalloc+0xd6/0x160 [ 118.533287][ T6761] ? sock_kmalloc+0xd6/0x160 [ 118.533334][ T6761] sock_kmalloc+0xd6/0x160 [ 118.533371][ T6761] ____sys_sendmsg+0x1be/0x850 [ 118.533408][ T6761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.533450][ T6761] ? import_iovec+0x73/0xa0 [ 118.533491][ T6761] ___sys_sendmsg+0x2a5/0x360 [ 118.533522][ T6761] ? __lock_acquire+0x747/0x2de0 [ 118.533552][ T6761] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.533623][ T6761] ? __fget_files+0x2a/0x420 [ 118.533656][ T6761] ? __fget_files+0x3a2/0x420 [ 118.533701][ T6761] __x64_sys_sendmsg+0x1b1/0x290 [ 118.533737][ T6761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.533793][ T6761] do_syscall_64+0x166/0x520 [ 118.533822][ T6761] ? trace_irq_disable+0x3b/0x140 [ 118.533847][ T6761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.533870][ T6761] ? clear_bhb_loop+0x70/0xc0 [ 118.533898][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.533920][ T6761] RIP: 0033:0x7fefba19f559 [ 118.533941][ T6761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.533959][ T6761] RSP: 002b:00007fefbb0e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.533983][ T6761] RAX: ffffffffffffffda RBX: 00007fefba425fa0 RCX: 00007fefba19f559 [ 118.533999][ T6761] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 118.534013][ T6761] RBP: 00007fefbb0e1090 R08: 0000000000000000 R09: 0000000000000000 [ 118.534026][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.534039][ T6761] R13: 00007fefba426038 R14: 00007fefba425fa0 R15: 00007ffdf30ad958 [ 118.534075][ T6761] [ 118.949759][ T6776] netlink: 224 bytes leftover after parsing attributes in process `syz.3.205'. [ 118.949804][ T6776] nbd: must specify a device to reconfigure [ 119.454810][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'. [ 119.722645][ T6795] Bluetooth: hci0: unsupported parameter 5135 [ 119.722672][ T6795] Bluetooth: hci0: unsupported parameter 8192 [ 119.722698][ T6795] Bluetooth: hci0: unsupported parameter 5135 [ 119.722711][ T6795] Bluetooth: hci0: unsupported parameter 8192 [ 119.813489][ T6800] FAULT_INJECTION: forcing a failure. [ 119.813489][ T6800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.813525][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.3.215 Not tainted syzkaller #0 PREEMPT(full) [ 119.813550][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.813563][ T6800] Call Trace: [ 119.813572][ T6800] [ 119.813581][ T6800] dump_stack_lvl+0xe8/0x150 [ 119.813619][ T6800] should_fail_ex+0x410/0x560 [ 119.813656][ T6800] _copy_from_user+0x2d/0xb0 [ 119.813692][ T6800] ____sys_sendmsg+0x303/0x850 [ 119.813732][ T6800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.813775][ T6800] ? import_iovec+0x73/0xa0 [ 119.813810][ T6800] ___sys_sendmsg+0x2a5/0x360 [ 119.813841][ T6800] ? __lock_acquire+0x747/0x2de0 [ 119.813870][ T6800] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.813941][ T6800] ? __fget_files+0x2a/0x420 [ 119.813974][ T6800] ? __fget_files+0x3a2/0x420 [ 119.814018][ T6800] __x64_sys_sendmsg+0x1b1/0x290 [ 119.814054][ T6800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.814110][ T6800] do_syscall_64+0x166/0x520 [ 119.814141][ T6800] ? trace_irq_disable+0x3b/0x140 [ 119.814165][ T6800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.814188][ T6800] ? clear_bhb_loop+0x70/0xc0 [ 119.814216][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.814248][ T6800] RIP: 0033:0x7fefba19f559 [ 119.814269][ T6800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.814287][ T6800] RSP: 002b:00007fefbb0e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.814310][ T6800] RAX: ffffffffffffffda RBX: 00007fefba425fa0 RCX: 00007fefba19f559 [ 119.814326][ T6800] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 119.814340][ T6800] RBP: 00007fefbb0e1090 R08: 0000000000000000 R09: 0000000000000000 [ 119.814354][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.814367][ T6800] R13: 00007fefba426038 R14: 00007fefba425fa0 R15: 00007ffdf30ad958 [ 119.814404][ T6800] [ 120.058017][ T6801] netlink: 14 bytes leftover after parsing attributes in process `syz.2.214'. [ 120.136814][ T6801] hsr_slave_0 (unregistering): left promiscuous mode [ 120.257477][ T6812] netlink: 404 bytes leftover after parsing attributes in process `syz.3.216'. [ 120.257504][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 120.257523][ T6812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 120.257539][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.216'. [ 120.328824][ T6809] raw_sendmsg: syz.1.217 forgot to set AF_INET. Fix it! [ 120.346204][ T6816] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 120.346228][ T6816] netlink: 248 bytes leftover after parsing attributes in process `syz.4.219'. [ 120.744720][ T6839] netlink: 596 bytes leftover after parsing attributes in process `syz.4.223'. [ 120.861932][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 121.046951][ T6858] netlink: 17023 bytes leftover after parsing attributes in process `syz.4.227'. [ 121.281464][ T4936] Bluetooth: hci4: command 0x0405 tx timeout [ 123.309128][ T6815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.369250][ T4936] Bluetooth: hci4: command 0x0405 tx timeout [ 123.576862][ T6888] FAULT_INJECTION: forcing a failure. [ 123.576862][ T6888] name failslab, interval 1, probability 0, space 0, times 0 [ 123.576897][ T6888] CPU: 1 UID: 0 PID: 6888 Comm: syz.1.235 Not tainted syzkaller #0 PREEMPT(full) [ 123.576921][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.576934][ T6888] Call Trace: [ 123.576943][ T6888] [ 123.576961][ T6888] dump_stack_lvl+0xe8/0x150 [ 123.577000][ T6888] should_fail_ex+0x410/0x560 [ 123.577037][ T6888] ? __alloc_skb+0x1db/0x7a0 [ 123.577065][ T6888] should_failslab+0xa8/0x100 [ 123.577098][ T6888] ? __alloc_skb+0x1db/0x7a0 [ 123.577124][ T6888] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 123.577148][ T6888] ? __alloc_skb+0x18d/0x7a0 [ 123.577177][ T6888] ? __alloc_skb+0x1db/0x7a0 [ 123.577213][ T6888] __alloc_skb+0x1db/0x7a0 [ 123.577246][ T6888] netlink_ack+0x136/0xb30 [ 123.577269][ T6888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.577320][ T6888] netlink_rcv_skb+0x2a4/0x4a0 [ 123.577346][ T6888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.577379][ T6888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.577422][ T6888] ? down_read+0x2be/0x330 [ 123.577465][ T6888] genl_rcv+0x28/0x40 [ 123.577494][ T6888] netlink_unicast+0x8ef/0xa80 [ 123.577551][ T6888] netlink_sendmsg+0x813/0xb40 [ 123.577588][ T6888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.577623][ T6888] ? apparmor_socket_sendmsg+0x98/0x360 [ 123.577657][ T6888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.577681][ T6888] sock_sendmsg_nosec+0x14e/0x190 [ 123.577709][ T6888] ____sys_sendmsg+0x54e/0x850 [ 123.577748][ T6888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.577791][ T6888] ? import_iovec+0x73/0xa0 [ 123.577829][ T6888] ___sys_sendmsg+0x2a5/0x360 [ 123.577860][ T6888] ? __lock_acquire+0x747/0x2de0 [ 123.577889][ T6888] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.577976][ T6888] ? __fget_files+0x2a/0x420 [ 123.578009][ T6888] ? __fget_files+0x3a2/0x420 [ 123.578054][ T6888] __x64_sys_sendmsg+0x1b1/0x290 [ 123.578090][ T6888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.578146][ T6888] do_syscall_64+0x166/0x520 [ 123.578175][ T6888] ? trace_irq_disable+0x3b/0x140 [ 123.578199][ T6888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.578221][ T6888] ? clear_bhb_loop+0x70/0xc0 [ 123.578250][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.578272][ T6888] RIP: 0033:0x7fe62b59f559 [ 123.578293][ T6888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.578311][ T6888] RSP: 002b:00007fe62c528028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.578336][ T6888] RAX: ffffffffffffffda RBX: 00007fe62b825fa0 RCX: 00007fe62b59f559 [ 123.578352][ T6888] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 123.578366][ T6888] RBP: 00007fe62c528090 R08: 0000000000000000 R09: 0000000000000000 [ 123.578380][ T6888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.578392][ T6888] R13: 00007fe62b826038 R14: 00007fe62b825fa0 R15: 00007fff461ef678 [ 123.578430][ T6888] [ 124.620889][ T143] IPVS: starting estimator thread 0... [ 124.708231][ T6938] IPVS: using max 27 ests per chain, 64800 per kthread [ 124.949707][ T6957] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 124.987339][ T6957] team0: Port device dummy0 added [ 125.031253][ T6957] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 125.054870][ T6957] team0: Port device dummy0 removed [ 125.103393][ T6961] __nla_validate_parse: 3 callbacks suppressed [ 125.103414][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 125.106803][ T6955] syzkaller0: entered promiscuous mode [ 125.106824][ T6955] syzkaller0: entered allmulticast mode [ 125.287078][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.342029][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 125.450823][ T6973] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 125.450847][ T6973] netlink: 'syz.3.255': attribute type 2 has an invalid length. [ 125.450860][ T6973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 126.056548][ T6960] syz.2.253 (6960) used greatest stack depth: 18024 bytes left [ 126.296915][ T7005] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 126.517668][ T7018] netlink: 'syz.0.265': attribute type 4 has an invalid length. [ 126.517692][ T7018] netlink: 152 bytes leftover after parsing attributes in process `syz.0.265'. [ 126.620958][ T7015] macvlan2: entered promiscuous mode [ 126.620983][ T7015] macvlan2: entered allmulticast mode [ 126.622697][ T7015] geneve1: entered promiscuous mode [ 126.622717][ T7015] geneve1: entered allmulticast mode [ 126.659087][ T7018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.661535][ T7015] team0: Device macvlan2 is of different type [ 126.684289][ T7015] geneve1: left allmulticast mode [ 126.684617][ T7015] geneve1: left promiscuous mode [ 127.041566][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 127.059283][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 127.059596][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 127.060196][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 127.060374][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 127.079184][ T7037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.362253][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 127.629756][ T7079] syzkaller0: entered promiscuous mode [ 127.629783][ T7079] syzkaller0: entered allmulticast mode [ 128.373588][ T7125] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 128.459950][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.463011][ T7125] team0: Port device netdevsim1 added [ 128.660877][ T7146] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 129.213297][ T7169] ip_tables: iptables: counters copy to user failed while replacing table [ 129.263101][ T7169] syzkaller1: entered promiscuous mode [ 129.263125][ T7169] syzkaller1: entered allmulticast mode [ 129.268278][ T7170] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 129.402900][ T7186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.448104][ T7190] ip6erspan0: entered allmulticast mode [ 129.472734][ T7180] bridge1: entered promiscuous mode [ 129.472757][ T7180] bridge1: entered allmulticast mode [ 129.501731][ T7180] team0: Port device bridge1 added [ 129.505092][ T7191] netlink: 'syz.1.307': attribute type 5 has an invalid length. [ 129.508095][ T7191] netlink: 'syz.1.307': attribute type 39 has an invalid length. [ 129.517434][ T7192] netlink: 'syz.1.307': attribute type 39 has an invalid length. [ 129.968004][ T7216] ip6gre2: entered promiscuous mode [ 129.968031][ T7216] ip6gre2: entered allmulticast mode [ 129.983696][ T161] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 129.983924][ T161] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 130.008676][ T7175] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 130.129959][ T7175] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 130.153753][ T5623] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 130.153901][ T5623] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 130.153991][ T5623] Bluetooth: hci4: unexpected cc 0x2060 length: 3 < 7 [ 130.154012][ T5623] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 130.308396][ T7175] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 130.392287][ T7237] __nla_validate_parse: 9 callbacks suppressed [ 130.392309][ T7237] netlink: 132 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.393097][ T7237] netlink: 104 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.576950][ T7244] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.587306][ T7244] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 130.625749][ T7244] bond2: entered promiscuous mode [ 130.627903][ T7244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.665870][ T7244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 130.666097][ T7244] bond2: entered allmulticast mode [ 130.711878][ T7244] bond2: (slave bridge1): making interface the new active one [ 130.711905][ T7244] bridge1: entered promiscuous mode [ 130.712425][ T7244] bridge1: entered allmulticast mode [ 130.715770][ T7244] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 130.897263][ T7258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.322'. [ 130.897288][ T7258] netlink: 52 bytes leftover after parsing attributes in process `syz.1.322'. [ 130.897306][ T7258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.322'. [ 131.061535][ T7263] netlink: 'syz.0.324': attribute type 10 has an invalid length. [ 131.268884][ T7263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.285590][ T7263] team0: Port device netdevsim1 added [ 131.414001][ T7267] netlink: 'syz.0.324': attribute type 10 has an invalid length. [ 131.630141][ T7267] team0: Port device netdevsim1 removed [ 131.676684][ T7267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.693351][ T7267] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 131.922796][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 131.925663][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 132.193716][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 132.193741][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 132.366802][ T7309] syzkaller1: entered promiscuous mode [ 132.366829][ T7309] syzkaller1: entered allmulticast mode [ 132.802048][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802157][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.146970][ T7334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.656464][ T7357] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 133.895631][ T7366] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 133.907540][ T7374] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 134.088568][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 134.280006][ T7366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.350985][ T7381] bond2: (slave geneve2): making interface the new active one [ 134.354273][ T7381] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 134.576029][ T31] audit: type=1800 audit(1792621145.961:2): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.348" name="cgroup.controllers" dev="tmpfs" ino=317 res=0 errno=0 [ 134.684440][ T7402] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 135.364245][ T7432] netlink: 'syz.2.361': attribute type 83 has an invalid length. [ 135.435015][ T7440] syzkaller0: entered promiscuous mode [ 135.435041][ T7440] syzkaller0: entered allmulticast mode [ 135.454971][ T7440] tipc: Started in network mode [ 135.455003][ T7440] tipc: Node identity c65c6dd27a02, cluster identity 4711 [ 135.456030][ T7440] tipc: Enabled bearer , priority 0 [ 135.480392][ T7440] tipc: Resetting bearer [ 135.504943][ T7439] tipc: Resetting bearer [ 135.535783][ T7439] tipc: Disabling bearer [ 135.556158][ T7446] ipt_REJECT: ECHOREPLY no longer supported. [ 135.557057][ T7446] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.772005][ T7450] __nla_validate_parse: 17 callbacks suppressed [ 135.772029][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.367'. [ 135.772049][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.367'. [ 135.772081][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 135.895595][ T7461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.371'. [ 135.985444][ T7464] netlink: 'syz.2.372': attribute type 1 has an invalid length. [ 135.985472][ T7464] netlink: 244 bytes leftover after parsing attributes in process `syz.2.372'. [ 136.117270][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 136.117296][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 136.117324][ T7467] netlink: 'syz.4.373': attribute type 12 has an invalid length. [ 136.399364][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.376'. [ 136.627110][ T7485] netlink: 208 bytes leftover after parsing attributes in process `syz.3.375'. [ 136.627145][ T7485] netlink: 208 bytes leftover after parsing attributes in process `syz.3.375'. [ 136.648471][ T7490] netlink: 'syz.2.378': attribute type 12 has an invalid length. [ 136.690845][ T7490] x_tables: duplicate underflow at hook 2 [ 136.864573][ T7498] ip_tables: iptables: counters copy to user failed while replacing table [ 137.307529][ T7513] 0: reclassify loop, rule prio 0, protocol 03 [ 137.507615][ T7518] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 137.527651][ T7518] lo: Caught tx_queue_len zero misconfig [ 137.925891][ T7527] sctp: [Deprecated]: syz.4.386 (pid 7527) Use of int in maxseg socket option. [ 137.925891][ T7527] Use struct sctp_assoc_value instead [ 138.064618][ T7535] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 138.069462][ T7535] batman_adv: batadv0: Adding interface: gretap1 [ 138.069480][ T7535] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.069510][ T7535] batman_adv: batadv0: Interface activated: gretap1 [ 138.154642][ T7549] netlink: 'syz.3.392': attribute type 21 has an invalid length. [ 138.350352][ T7552] ip_tables: iptables: counters copy to user failed while replacing table [ 138.436409][ T7552] bridge0: port 1(syz_tun) entered disabled state [ 138.449183][ T7552] bridge0: port 2(ip6gretap0) entered disabled state [ 138.841264][ T7559] veth1: entered promiscuous mode [ 138.846801][ T7559] veth0: entered promiscuous mode [ 138.883733][ T7565] syzkaller1: entered promiscuous mode [ 138.883762][ T7565] syzkaller1: entered allmulticast mode [ 138.957063][ T7580] netlink: 'syz.3.397': attribute type 1 has an invalid length. [ 139.029755][ T161] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.029804][ T161] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.029842][ T161] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.029890][ T161] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.401609][ T7596] netlink: 'syz.4.403': attribute type 8 has an invalid length. [ 139.501493][ T5623] Bluetooth: hci4: link tx timeout [ 139.501513][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.735939][ T7597] sctp: [Deprecated]: syz.2.399 (pid 7597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.735939][ T7597] Use struct sctp_sack_info instead [ 139.797325][ T7611] tipc: Started in network mode [ 139.797359][ T7611] tipc: Node identity 00000000000000000300000000000001, cluster identity 4711 [ 139.797416][ T7611] tipc: Enabling of bearer rejected, failed to enable media [ 140.407930][ T7647] netlink: 'syz.4.410': attribute type 1 has an invalid length. [ 140.437993][ T7647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.558710][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.558764][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.558803][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.558841][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 140.651375][ T7647] bond1: (slave geneve3): making interface the new active one [ 140.658337][ T7647] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 141.529814][ T4936] Bluetooth: hci4: command 0x0405 tx timeout [ 141.785859][ T7692] netlink: 'syz.2.421': attribute type 11 has an invalid length. [ 141.876496][ T7691] pim6reg1: entered promiscuous mode [ 141.876518][ T7691] pim6reg1: entered allmulticast mode [ 141.928366][ T7697] __nla_validate_parse: 143 callbacks suppressed [ 141.928383][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 141.939127][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 141.975961][ T7700] netlink: 104 bytes leftover after parsing attributes in process `syz.1.424'. [ 142.165674][ T7708] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 142.237689][ T7712] netlink: 224 bytes leftover after parsing attributes in process `syz.1.429'. [ 142.248481][ T7712] netlink: 112 bytes leftover after parsing attributes in process `syz.1.429'. [ 142.300522][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 142.344323][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 142.368710][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.425'. [ 142.398357][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 142.573096][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.431'. [ 142.737159][ T7719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.764440][ T7726] bond1: (slave batadv1): Opening slave failed [ 143.259828][ T7765] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 143.477157][ T7768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.438'. [ 143.547065][ T7779] rdma_op ffff88807cefe238 conn xmit_rdma 0000000000000000 [ 144.220652][ T7807] block nbd0: not configured, cannot reconfigure [ 144.579985][ T7833] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 144.606327][ T7837] pim6reg1: entered promiscuous mode [ 144.606351][ T7837] pim6reg1: entered allmulticast mode [ 144.841602][ T7832] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 145.903941][ T7893] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 145.922029][ T7894] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.923542][ T7894] netlink: 'syz.0.462': attribute type 2 has an invalid length. [ 146.166868][ T7904] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 146.839164][ T7945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.870138][ T7925] netlink: 'syz.2.468': attribute type 2 has an invalid length. [ 146.874329][ T7939] syzkaller1: entered promiscuous mode [ 146.874351][ T7939] syzkaller1: entered allmulticast mode [ 146.880318][ T7943] bridge0: port 3(veth0) entered blocking state [ 146.880429][ T7943] bridge0: port 3(veth0) entered disabled state [ 146.880595][ T7943] veth0: entered allmulticast mode [ 146.900428][ T7943] veth0: entered promiscuous mode [ 146.901284][ T7943] bridge0: port 3(veth0) entered blocking state [ 146.901441][ T7943] bridge0: port 3(veth0) entered forwarding state [ 146.975011][ T7925] ´: entered promiscuous mode [ 147.256818][ T7963] __nla_validate_parse: 5 callbacks suppressed [ 147.256840][ T7963] netlink: 224 bytes leftover after parsing attributes in process `syz.2.479'. [ 147.329360][ T7963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.352987][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 147.353010][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 147.570227][ T7982] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 147.576057][ T7983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.487'. [ 147.605256][ T7977] syzkaller0: entered promiscuous mode [ 147.605280][ T7977] syzkaller0: entered allmulticast mode [ 147.947507][ T7997] netlink: 'syz.3.488': attribute type 10 has an invalid length. [ 149.191919][ T7982] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 149.195959][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'. [ 149.243424][ T7997] team0 (unregistering): Port device xfrm0 removed [ 149.353524][ T8003] netlink: 120 bytes leftover after parsing attributes in process `syz.0.490'. [ 149.445741][ T8009] tipc: Enabled bearer , priority 0 [ 149.531557][ T8012] netlink: 52 bytes leftover after parsing attributes in process `syz.2.493'. [ 149.596940][ T8013] syzkaller0: entered promiscuous mode [ 149.597031][ T8013] syzkaller0: entered allmulticast mode [ 149.597547][ T8013] tipc: Resetting bearer [ 149.677411][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 149.744659][ T8015] bond1: entered allmulticast mode [ 149.777923][ T8015] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 149.789551][ T8015] bond1: (slave macvlan3): making interface the new active one [ 149.789573][ T8015] macvlan3: entered allmulticast mode [ 149.789587][ T8015] bond0: entered allmulticast mode [ 149.789600][ T8015] bond_slave_0: entered allmulticast mode [ 149.789617][ T8015] bond_slave_1: entered allmulticast mode [ 149.790304][ T8015] bond_slave_0: entered promiscuous mode [ 149.790350][ T8015] bond_slave_1: entered promiscuous mode [ 149.792125][ T8015] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 149.924215][ T8027] netlink: 116 bytes leftover after parsing attributes in process `syz.1.497'. [ 149.924247][ T8027] netlink: 'syz.1.497': attribute type 3 has an invalid length. [ 149.953242][ T8025] bridge_slave_0: left allmulticast mode [ 149.953268][ T8025] bridge_slave_0: left promiscuous mode [ 149.953491][ T8025] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.203487][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 152.505973][ T8025] bridge_slave_1: left allmulticast mode [ 152.506001][ T8025] bridge_slave_1: left promiscuous mode [ 152.506314][ T8025] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.537167][ T8025] bond0: (slave bond_slave_0): Releasing backup interface [ 152.541935][ T8025] bond_slave_0: left allmulticast mode [ 152.542020][ T8025] bond_slave_0: left promiscuous mode [ 152.559014][ T8025] bond0: (slave bond_slave_1): Releasing backup interface [ 152.565749][ T8025] bond_slave_1: left allmulticast mode [ 152.565775][ T8025] bond_slave_1: left promiscuous mode [ 152.590486][ T8025] team0: Port device team_slave_0 removed [ 152.594881][ T8025] team0: Port device team_slave_1 removed [ 152.595744][ T8025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.595760][ T8025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.597238][ T8025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.597258][ T8025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.601725][ T8025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 152.634001][ T8028] team0: Port device xfrm0 added [ 152.851643][ T161] tipc: Resetting bearer [ 152.871174][ T2282] tipc: Node number set to 50331649 [ 152.874322][ T8008] tipc: Resetting bearer [ 153.102358][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 153.983326][ T8070] netlink: 'syz.0.505': attribute type 34 has an invalid length. [ 153.983349][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 154.763620][ T8008] tipc: Disabling bearer [ 154.810199][ T8017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.921784][ T8070] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 155.015901][ T8017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.103019][ T8075] netlink: 68 bytes leftover after parsing attributes in process `syz.3.507'. [ 155.144956][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 155.181230][ T8017] team0: Port device netdevsim1 removed [ 155.182878][ T8017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.285275][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'. [ 155.376969][ T8017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.484124][ T8081] batman_adv: batadv0: Interface deactivated: gretap1 [ 155.484152][ T8081] batman_adv: batadv0: Removing interface: gretap1 [ 155.543088][ T8102] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 155.543456][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 155.603404][ T8102] vlan2: entered allmulticast mode [ 155.603426][ T8102] bridge2: entered allmulticast mode [ 155.621603][ T8102] bridge2: port 1(erspan0) entered blocking state [ 155.621842][ T8102] bridge2: port 1(erspan0) entered disabled state [ 155.621995][ T8102] erspan0: entered allmulticast mode [ 155.627156][ T8102] erspan0: entered promiscuous mode [ 155.662868][ T8102] bridge2: port 1(erspan0) entered blocking state [ 155.662992][ T8102] bridge2: port 1(erspan0) entered forwarding state [ 155.690132][ T63] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.690195][ T63] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.690232][ T63] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.690269][ T63] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.691895][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 155.697575][ T8104] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 155.852167][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.852230][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.852267][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.852302][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.162333][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 156.173885][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 156.206995][ T8123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.489056][ T8148] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.526'. [ 156.489080][ T8148] ksmbd: Unknown IPC event: 4, ignore. [ 156.708913][ T8150] bond4: entered promiscuous mode [ 156.708938][ T8150] bond4: entered allmulticast mode [ 156.732583][ T8150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.164387][ T8184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.101699][ T8223] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 158.125709][ T8226] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 158.125732][ T8226] __nla_validate_parse: 7 callbacks suppressed [ 158.125744][ T8226] netlink: 244 bytes leftover after parsing attributes in process `syz.3.546'. [ 158.250626][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 158.286537][ T5623] block nbd0: Receive control failed (result -22) [ 158.287959][ T8234] nbd0: detected capacity change from 0 to 32 [ 158.369928][ T1694] block nbd0: Dead connection, failed to find a fallback [ 158.369955][ T1694] block nbd0: shutting down sockets [ 158.370041][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.370125][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.373029][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.373063][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.374826][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.374858][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.374994][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.375021][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.375168][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.375195][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.375343][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.375370][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.375940][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.375969][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.376226][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.376253][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.376449][ T8242] ldm_validate_partition_table(): Disk read failed. [ 158.376562][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.376590][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.397997][ T1694] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 158.398090][ T1694] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.407888][ T8242] Dev nbd0: unable to read RDB block 0 [ 158.413063][ T8242] nbd0: unable to read partition table [ 158.620027][ T8242] ldm_validate_partition_table(): Disk read failed. [ 158.620412][ T8242] Dev nbd0: unable to read RDB block 0 [ 158.620976][ T8242] nbd0: unable to read partition table [ 158.791035][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 158.791138][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 158.791155][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'. [ 158.791169][ T8258] netlink: 'syz.0.553': attribute type 5 has an invalid length. [ 158.935542][ T31] audit: type=1804 audit(1792621170.321:3): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.554" name="/newroot/100/memory.events" dev="tmpfs" ino=530 res=1 errno=0 [ 158.943013][ T31] audit: type=1800 audit(1792621170.331:4): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="memory.events" dev="tmpfs" ino=530 res=0 errno=0 [ 158.951695][ T31] audit: type=1804 audit(1792621170.331:5): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.554" name="/newroot/100/memory.events" dev="tmpfs" ino=530 res=1 errno=0 [ 159.038521][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 159.530457][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.560'. [ 159.703350][ T8287] bond2: option mode: invalid value (7) [ 159.720426][ T8287] bond2 (unregistering): Released all slaves [ 159.889260][ T8296] netlink: 'syz.2.563': attribute type 21 has an invalid length. [ 159.889367][ T8296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.563'. [ 159.889416][ T8296] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 159.893293][ T8296] Bluetooth: MGMT ver 1.23 [ 160.004994][ T8297] netlink: 308 bytes leftover after parsing attributes in process `syz.1.564'. [ 160.504054][ T8316] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 160.561580][ T8332] tc_dump_action: action bad kind [ 160.718650][ T8346] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 160.829766][ T8346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.571'. [ 161.061839][ T8366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.573'. [ 161.127012][ T8356] bridge2: entered promiscuous mode [ 161.144508][ T8363] netlink: 'syz.4.571': attribute type 2 has an invalid length. [ 161.144530][ T8363] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 161.204106][ T8356] bond2: (slave bridge2): making interface the new active one [ 161.217665][ T8356] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 161.374488][ T8363] gretap1: entered allmulticast mode [ 161.942413][ T8404] veth1_to_bond: Caught tx_queue_len zero misconfig [ 162.399953][ T8428] netlink: 'syz.0.586': attribute type 61 has an invalid length. [ 162.399978][ T8428] netlink: 'syz.0.586': attribute type 268 has an invalid length. [ 162.583688][ T8429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.114332][ T8437] netlink: 'syz.1.587': attribute type 17 has an invalid length. [ 163.114367][ T8437] bond0: option all_slaves_active: invalid value (62) [ 163.216735][ T8453] __nla_validate_parse: 9 callbacks suppressed [ 163.220474][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 163.531744][ T8468] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 163.577659][ T8462] syzkaller0: entered promiscuous mode [ 163.577684][ T8462] syzkaller0: entered allmulticast mode [ 163.829859][ T8484] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 163.878545][ T8484] bond3: entered promiscuous mode [ 163.879072][ T8484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.890810][ T8484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.900628][ T8484] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 163.900691][ T8484] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 163.903097][ T8484] bond3: (slave gre1): Opening slave failed [ 163.937910][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 163.941952][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 164.001039][ T8497] ip6gre1: entered allmulticast mode [ 164.021084][ T8499] vxcan1: entered allmulticast mode [ 164.023496][ T8490] tc action pedit offset -2147483648 out of bounds [ 164.117261][ T8505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.214266][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.439025][ T8531] netlink: 72 bytes leftover after parsing attributes in process `syz.2.609'. [ 164.439258][ T8532] netlink: 72 bytes leftover after parsing attributes in process `syz.2.609'. [ 164.462691][ T8535] sctp: [Deprecated]: syz.4.611 (pid 8535) Use of int in maxseg socket option. [ 164.462691][ T8535] Use struct sctp_assoc_value instead [ 164.735525][ T8540] sctp: [Deprecated]: syz.4.611 (pid 8540) Use of int in maxseg socket option. [ 164.735525][ T8540] Use struct sctp_assoc_value instead [ 164.869179][ T8544] geneve0: entered promiscuous mode [ 165.082639][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 165.087133][ T8552] syzkaller0: entered promiscuous mode [ 165.087155][ T8552] syzkaller0: entered allmulticast mode [ 166.027851][ T8581] netlink: 56 bytes leftover after parsing attributes in process `syz.3.622'. [ 166.027877][ T8581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.622'. [ 166.027894][ T8581] netlink: 56 bytes leftover after parsing attributes in process `syz.3.622'. [ 166.203382][ T8591] validate_nla: 1 callbacks suppressed [ 166.203404][ T8591] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 166.226755][ T8591] erspan1: entered allmulticast mode [ 166.707941][ T8617] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20004 [ 166.950213][ T8629] netlink: 56 bytes leftover after parsing attributes in process `syz.1.634'. [ 166.977711][ T8597] ip_tables: iptables: counters copy to user failed while replacing table [ 167.441783][ T8649] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 168.073999][ T8694] netlink: 'syz.4.648': attribute type 21 has an invalid length. [ 168.074103][ T8694] netlink: 'syz.4.648': attribute type 5 has an invalid length. [ 168.146346][ T8697] lo: entered promiscuous mode [ 168.146545][ T8697] tunl0: entered promiscuous mode [ 168.146721][ T8697] gre0: entered promiscuous mode [ 168.146847][ T8697] gretap0: entered promiscuous mode [ 168.146997][ T8697] erspan0: entered promiscuous mode [ 168.147116][ T8697] ip_vti0: entered promiscuous mode [ 168.147293][ T8697] ip6_vti0: entered promiscuous mode [ 168.147465][ T8697] sit0: entered promiscuous mode [ 168.147584][ T8697] ip6tnl0: entered promiscuous mode [ 168.147721][ T8697] ip6gre0: entered promiscuous mode [ 168.148075][ T8697] bridge0: entered promiscuous mode [ 168.148346][ T8697] vcan0: entered promiscuous mode [ 168.148501][ T8697] bond0: entered promiscuous mode [ 168.148672][ T8697] dummy0: entered promiscuous mode [ 168.148863][ T8697] nlmon0: entered promiscuous mode [ 168.149027][ T8697] batadv0: entered promiscuous mode [ 168.149184][ T8697] vxcan0: entered promiscuous mode [ 168.149338][ T8697] vxcan1: entered promiscuous mode [ 168.149488][ T8697] veth0: entered promiscuous mode [ 168.151444][ T8697] veth1: entered promiscuous mode [ 168.151870][ T8697] wg0: entered promiscuous mode [ 168.152244][ T8697] wg1: entered promiscuous mode [ 168.154448][ T8697] wg2: entered promiscuous mode [ 168.154619][ T8697] veth1_to_bridge: entered promiscuous mode [ 168.155122][ T8697] bridge_slave_1: entered promiscuous mode [ 168.155608][ T8697] veth0_to_bond: entered promiscuous mode [ 168.156711][ T8697] bond_slave_0: entered promiscuous mode [ 168.157109][ T8697] veth1_to_bond: entered promiscuous mode [ 168.159256][ T8697] bond_slave_1: entered promiscuous mode [ 168.159688][ T8697] veth0_to_team: entered promiscuous mode [ 168.159834][ T8697] team_slave_0: entered promiscuous mode [ 168.160157][ T8697] veth1_to_team: entered promiscuous mode [ 168.160528][ T8697] team_slave_1: entered promiscuous mode [ 168.160924][ T8697] veth0_to_batadv: entered promiscuous mode [ 168.162136][ T8697] batadv_slave_0: entered promiscuous mode [ 168.162536][ T8697] veth1_to_batadv: entered promiscuous mode [ 168.163200][ T8697] batadv_slave_1: entered promiscuous mode [ 168.163597][ T8697] xfrm0: entered promiscuous mode [ 168.163993][ T8697] veth0_to_hsr: entered promiscuous mode [ 168.164864][ T8697] veth1_to_hsr: entered promiscuous mode [ 168.165140][ T8697] hsr0: entered promiscuous mode [ 168.165370][ T8697] veth1_virt_wifi: entered promiscuous mode [ 168.165508][ T8697] veth0_virt_wifi: entered promiscuous mode [ 168.165697][ T8697] virt_wifi0: entered promiscuous mode [ 168.166692][ T8697] vlan0: entered promiscuous mode [ 168.167463][ T8697] vlan1: entered promiscuous mode [ 168.168832][ T8697] macvlan0: entered promiscuous mode [ 168.169229][ T8697] macvlan1: entered promiscuous mode [ 168.169769][ T8697] ipvlan0: entered promiscuous mode [ 168.170177][ T8697] ipvlan1: entered promiscuous mode [ 168.171318][ T8697] macvtap0: entered promiscuous mode [ 168.171476][ T8697] macsec0: entered promiscuous mode [ 168.173605][ T8697] geneve0: entered promiscuous mode [ 168.174021][ T8697] geneve1: entered promiscuous mode [ 168.175200][ T8697] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 168.175775][ T8697] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 168.176114][ T8697] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 168.176442][ T8697] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 168.176925][ T8697] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 168.607990][ T8697] bond1: entered promiscuous mode [ 168.636512][ T8697] bond2: entered promiscuous mode [ 168.637803][ T8697] syztnl1: entered promiscuous mode [ 168.638008][ T8697] ip6gre1: entered promiscuous mode [ 168.776259][ T8711] __nla_validate_parse: 5 callbacks suppressed [ 168.776280][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 169.049363][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 170.309055][ T8639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.424010][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 170.487366][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 170.616329][ T8743] tipc: Started in network mode [ 170.616363][ T8743] tipc: Node identity 8a09f95ba34d, cluster identity 4711 [ 170.616611][ T8743] tipc: Enabled bearer , priority 0 [ 170.641018][ T8743] syzkaller0: entered promiscuous mode [ 170.641041][ T8743] syzkaller0: entered allmulticast mode [ 170.913481][ T8759] tipc: Resetting bearer [ 170.944765][ T8742] tipc: Resetting bearer [ 170.981502][ T8742] tipc: Disabling bearer [ 171.386171][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.672'. [ 171.405290][ T8779] TC_ACT_REPEAT abuse ? [ 171.575201][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 172.093331][ T8808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.674'. [ 172.093357][ T8808] netlink: 52 bytes leftover after parsing attributes in process `syz.0.674'. [ 172.093376][ T8808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.674'. [ 172.257000][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 172.301517][ T8812] netlink: 'syz.2.676': attribute type 4 has an invalid length. [ 172.606804][ T8834] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.094944][ T8839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.096383][ T8846] tipc: Started in network mode [ 173.096408][ T8846] tipc: Node identity 1000001, cluster identity 4369 [ 173.096424][ T8846] tipc: Node number set to 16777217 [ 173.136047][ T8846] tipc: New replicast peer: 127.0.0.1 [ 173.137797][ T8846] tipc: Enabled bearer , priority 10 [ 173.154970][ T8846] À: renamed from vxcan1 (while UP) [ 173.344037][ T8857] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 173.567420][ T8857] hsr_slave_1 (unregistering): left promiscuous mode [ 173.860630][ T8883] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 173.903109][ T8886] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 173.962357][ T8892] __nla_validate_parse: 9 callbacks suppressed [ 173.962379][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 173.962394][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.700'. [ 174.018502][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.018733][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.018936][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.019139][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.019348][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.019578][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.019795][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.081582][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.081957][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.082359][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.082581][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.082805][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.083095][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.083320][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.083535][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.083766][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.084099][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.084308][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.084514][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.084725][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.084928][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.085203][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.085473][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.085738][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.085949][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.086163][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.086463][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.086681][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.086890][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.087152][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.087503][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.087727][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.087935][ T8891] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 174.493646][ T8900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.703'. [ 174.495388][ T8900] unsupported nlmsg_type 40 [ 174.495765][ T8900] netlink: 'syz.0.703': attribute type 3 has an invalid length. [ 174.495784][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 175.005914][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 175.277518][ T8926] x_tables: duplicate underflow at hook 1 [ 175.299358][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'. [ 175.306562][ T8928] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 175.507578][ T8943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.712'. [ 175.639898][ T8948] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.697114][ T8948] syzkaller1: entered promiscuous mode [ 175.697137][ T8948] syzkaller1: entered allmulticast mode [ 175.810310][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 175.810357][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 176.555880][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.725'. [ 176.610039][ T9003] openvswitch: netlink: Flow key attr not present in new flow. [ 177.144272][ T9020] netlink: 'syz.0.729': attribute type 1 has an invalid length. [ 178.421267][ T9008] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 178.446289][ T9016] syzkaller1: entered promiscuous mode [ 178.446312][ T9016] syzkaller1: entered allmulticast mode [ 179.030025][ T9053] __nla_validate_parse: 3 callbacks suppressed [ 179.030047][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 179.068348][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.738'. [ 179.154552][ T63] tipc: Subscription rejected, illegal request [ 179.157818][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 179.197173][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'. [ 179.438830][ T9071] ip_tables: iptables: counters copy to user failed while replacing table [ 179.541699][ T9074] trusted_key: syz.0.742 sent an empty control message without MSG_MORE. [ 179.857704][ T9098] netlink: 96 bytes leftover after parsing attributes in process `syz.4.748'. [ 180.106336][ T9111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.750'. [ 180.145533][ T9111] netlink: 40 bytes leftover after parsing attributes in process `syz.3.750'. [ 180.926994][ T9155] xt_hashlimit: size too large, truncated to 1048576 [ 180.956846][ T9149] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 180.986536][ T9158] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.760'. [ 181.029364][ T9149] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.047082][ T9158] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 181.067347][ T9158] 0ªX¹¦Dö»: entered allmulticast mode [ 181.431177][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 181.440240][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 181.480778][ T9188] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 181.595445][ T9185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.629905][ T9185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.788988][ T9192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.792631][ T9192] bond5: (slave bond6): making interface the new active one [ 181.793922][ T9192] bond5: (slave bond6): Enslaving as an active interface with an up link [ 181.834962][ T9196] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 181.957844][ T9201] tipc: Invalid UDP bearer configuration [ 181.957893][ T9201] tipc: Enabling of bearer rejected, failed to enable media [ 182.569707][ T9225] Bluetooth: ISO socket layer initialized [ 183.447765][ T9281] lo: entered allmulticast mode [ 183.505076][ T9272] bridge0: entered allmulticast mode [ 183.546512][ T9272] pim6reg: entered allmulticast mode [ 183.597557][ T9286] syzkaller0: entered promiscuous mode [ 183.597581][ T9286] syzkaller0: entered allmulticast mode [ 183.664586][ T9287] TC_ACT_REPEAT abuse ? [ 183.704498][ T9290] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 183.762231][ T9302] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 183.987788][ T9316] netlink: 'syz.0.786': attribute type 49 has an invalid length. [ 184.067140][ T9322] __nla_validate_parse: 13 callbacks suppressed [ 184.067160][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 184.239264][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 184.482068][ T9338] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.524292][ T9337] syzkaller0: entered promiscuous mode [ 184.524314][ T9337] syzkaller0: entered allmulticast mode [ 184.607207][ T9342] x_tables: duplicate underflow at hook 2 [ 184.843938][ T9350] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 185.061104][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 185.293607][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 185.356154][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 185.672037][ T9393] netlink: 1 bytes leftover after parsing attributes in process `syz.2.802'. [ 185.672079][ T9393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.746757][ T9395] netlink: 72 bytes leftover after parsing attributes in process `syz.0.803'. [ 185.937527][ T9394] tipc: Enabled bearer , priority 10 [ 186.263870][ T9431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.811'. [ 186.270192][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 186.292891][ T9431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.811'. [ 186.293126][ T9431] netlink: 32 bytes leftover after parsing attributes in process `syz.2.811'. [ 186.320829][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 186.654720][ T9443] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.673402][ T9448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.689309][ T9448] BUG: Bad page state in process syz.0.814 pfn:4f53b [ 186.689336][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x4f53b [ 186.689357][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.689390][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.689409][ T9448] raw: ffff888000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 186.689421][ T9448] page dumped because: page_pool leak [ 186.689435][ T9448] page_owner tracks the page as allocated [ 186.689444][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186689128466 [ 186.689473][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.689497][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.689523][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.689548][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.689572][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.689595][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.689622][ T9448] page_pool_alloc_frag_netmem+0x561/0x9b0 [ 186.689648][ T9448] skb_pp_cow_data+0xc2c/0x18e0 [ 186.689675][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.689721][ T9448] tun_get_user+0x250d/0x4470 [ 186.689755][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.689780][ T9448] vfs_write+0x612/0xba0 [ 186.689799][ T9448] ksys_write+0x150/0x270 [ 186.689817][ T9448] do_syscall_64+0x166/0x520 [ 186.689846][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.689867][ T9448] page last free pid 9415 tgid 9415 ts 186518998898 stack trace: [ 186.689882][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.689903][ T9448] tlb_remove_table_rcu+0x85/0x100 [ 186.689926][ T9448] rcu_core+0x926/0x1260 [ 186.689949][ T9448] handle_softirqs+0x226/0x860 [ 186.689975][ T9448] __irq_exit_rcu+0xcb/0x220 [ 186.690001][ T9448] irq_exit_rcu+0x9/0x30 [ 186.690026][ T9448] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 186.690053][ T9448] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 186.690077][ T9448] Modules linked in: [ 186.690096][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Not tainted syzkaller #0 PREEMPT(full) [ 186.690119][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.690133][ T9448] Call Trace: [ 186.690141][ T9448] [ 186.690151][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.690184][ T9448] bad_page+0x17f/0x1c0 [ 186.690218][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.690255][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.690303][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.690342][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.690364][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.690418][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.690441][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.690464][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.690497][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.690555][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.690582][ T9448] tun_get_user+0x250d/0x4470 [ 186.690637][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.690658][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.690690][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.690738][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.690774][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.690810][ T9448] ? lock_acquire+0x115/0x350 [ 186.690834][ T9448] ? tun_get+0x1c/0x2f0 [ 186.690869][ T9448] ? tun_get+0x1c/0x2f0 [ 186.690897][ T9448] ? tun_get+0x1c/0x2f0 [ 186.690931][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.690963][ T9448] vfs_write+0x612/0xba0 [ 186.690996][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.691030][ T9448] ? __fget_files+0x2a/0x420 [ 186.691075][ T9448] ksys_write+0x150/0x270 [ 186.691101][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.691137][ T9448] do_syscall_64+0x166/0x520 [ 186.691167][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.691191][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.691214][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.691242][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.691264][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.691283][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.691301][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.691374][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.691422][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.691474][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.691513][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.691547][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.691640][ T9448] [ 186.691735][ T9448] Disabling lock debugging due to kernel taint [ 186.691763][ T9448] BUG: Bad page state in process syz.0.814 pfn:216a7 [ 186.691795][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x216a7 [ 186.691846][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.691908][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.691950][ T9448] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 186.691974][ T9448] page dumped because: page_pool leak [ 186.692002][ T9448] page_owner tracks the page as allocated [ 186.692015][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186689105555 [ 186.692087][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.692131][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.692192][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.692258][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.692310][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.692370][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.692434][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.692489][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.692540][ T9448] tun_get_user+0x250d/0x4470 [ 186.692602][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.692664][ T9448] vfs_write+0x612/0xba0 [ 186.692705][ T9448] ksys_write+0x150/0x270 [ 186.692751][ T9448] do_syscall_64+0x166/0x520 [ 186.692828][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.692885][ T9448] page last free pid 9415 tgid 9415 ts 186519016936 stack trace: [ 186.692924][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.692968][ T9448] tlb_remove_table_rcu+0x85/0x100 [ 186.693028][ T9448] rcu_core+0x926/0x1260 [ 186.693082][ T9448] handle_softirqs+0x226/0x860 [ 186.693143][ T9448] __irq_exit_rcu+0xcb/0x220 [ 186.693204][ T9448] irq_exit_rcu+0x9/0x30 [ 186.693294][ T9448] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 186.693364][ T9448] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 186.693416][ T9448] Modules linked in: [ 186.693457][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.693522][ T9448] Tainted: [B]=BAD_PAGE [ 186.693543][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.693573][ T9448] Call Trace: [ 186.693594][ T9448] [ 186.693614][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.693680][ T9448] bad_page+0x17f/0x1c0 [ 186.693772][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.693837][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.693928][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.694003][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.694053][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.694139][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.694204][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.694266][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.694337][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.694430][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.694493][ T9448] tun_get_user+0x250d/0x4470 [ 186.694596][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.694641][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.694711][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.694793][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.694866][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.694946][ T9448] ? lock_acquire+0x115/0x350 [ 186.694999][ T9448] ? tun_get+0x1c/0x2f0 [ 186.695073][ T9448] ? tun_get+0x1c/0x2f0 [ 186.695136][ T9448] ? tun_get+0x1c/0x2f0 [ 186.695213][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.695292][ T9448] vfs_write+0x612/0xba0 [ 186.695356][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.695420][ T9448] ? __fget_files+0x2a/0x420 [ 186.695507][ T9448] ksys_write+0x150/0x270 [ 186.695570][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.695650][ T9448] do_syscall_64+0x166/0x520 [ 186.695739][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.695794][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.695850][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.695905][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.695957][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.696000][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.696043][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.696096][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.696136][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.696169][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.696201][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.696236][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.696299][ T9448] [ 186.696321][ T9448] BUG: Bad page state in process syz.0.814 pfn:73eed [ 186.696353][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888073eed500 pfn:0x73eed [ 186.696405][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.696461][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.696505][ T9448] raw: ffff888073eed500 0000000000000001 00000000ffffffff 0000000000000000 [ 186.696536][ T9448] page dumped because: page_pool leak [ 186.696559][ T9448] page_owner tracks the page as allocated [ 186.696580][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186689086859 [ 186.696646][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.696699][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.696772][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.696827][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.696888][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.696943][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.697017][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.697088][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.697143][ T9448] tun_get_user+0x250d/0x4470 [ 186.697203][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.697251][ T9448] vfs_write+0x612/0xba0 [ 186.697292][ T9448] ksys_write+0x150/0x270 [ 186.697341][ T9448] do_syscall_64+0x166/0x520 [ 186.697404][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.697455][ T9448] page last free pid 9415 tgid 9415 ts 186519050022 stack trace: [ 186.697487][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.697531][ T9448] tlb_remove_table_rcu+0x85/0x100 [ 186.697582][ T9448] rcu_core+0x926/0x1260 [ 186.697634][ T9448] handle_softirqs+0x226/0x860 [ 186.697698][ T9448] __irq_exit_rcu+0xcb/0x220 [ 186.697767][ T9448] irq_exit_rcu+0x9/0x30 [ 186.697822][ T9448] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 186.697883][ T9448] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 186.697936][ T9448] Modules linked in: [ 186.697976][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.698032][ T9448] Tainted: [B]=BAD_PAGE [ 186.698052][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.698071][ T9448] Call Trace: [ 186.698077][ T9448] [ 186.698085][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.698138][ T9448] bad_page+0x17f/0x1c0 [ 186.698211][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.698297][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.698378][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.698453][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.698502][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.698585][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.698636][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.698688][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.698759][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.698844][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.698907][ T9448] tun_get_user+0x250d/0x4470 [ 186.699022][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.699073][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.699139][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.699220][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.699300][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.699369][ T9448] ? lock_acquire+0x115/0x350 [ 186.699429][ T9448] ? tun_get+0x1c/0x2f0 [ 186.699497][ T9448] ? tun_get+0x1c/0x2f0 [ 186.699571][ T9448] ? tun_get+0x1c/0x2f0 [ 186.699665][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.699759][ T9448] vfs_write+0x612/0xba0 [ 186.699813][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.699876][ T9448] ? __fget_files+0x2a/0x420 [ 186.699978][ T9448] ksys_write+0x150/0x270 [ 186.700018][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.700082][ T9448] do_syscall_64+0x166/0x520 [ 186.700147][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.700199][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.700253][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.700308][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.700360][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.700403][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.700445][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.700499][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.700541][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.700574][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.700607][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.700639][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.700704][ T9448] [ 186.700835][ T9448] BUG: Bad page state in process syz.0.814 pfn:74c8e [ 186.700869][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888074c8edc0 pfn:0x74c8e [ 186.700920][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.700984][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.701051][ T9448] raw: ffff888074c8edc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.701088][ T9448] page dumped because: page_pool leak [ 186.701110][ T9448] page_owner tracks the page as allocated [ 186.701130][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186689067709 [ 186.701204][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.701249][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.701306][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.701368][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.701422][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.701476][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.701533][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.701597][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.701640][ T9448] tun_get_user+0x250d/0x4470 [ 186.701696][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.701769][ T9448] vfs_write+0x612/0xba0 [ 186.701812][ T9448] ksys_write+0x150/0x270 [ 186.701855][ T9448] do_syscall_64+0x166/0x520 [ 186.701921][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.701965][ T9448] page last free pid 9433 tgid 9419 ts 186527178747 stack trace: [ 186.701999][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.702051][ T9448] tlb_finish_mmu+0x13e/0x220 [ 186.702105][ T9448] exit_mmap+0x4b2/0x9f0 [ 186.702176][ T9448] __mmput+0x118/0x420 [ 186.702232][ T9448] exit_mm+0x18e/0x240 [ 186.702268][ T9448] do_exit+0x6cd/0x2360 [ 186.702360][ T9448] do_group_exit+0x22d/0x2f0 [ 186.702418][ T9448] get_signal+0x121b/0x12c0 [ 186.702487][ T9448] arch_do_signal_or_restart+0xbb/0x860 [ 186.702548][ T9448] exit_to_user_mode_loop+0x10e/0x770 [ 186.702602][ T9448] do_syscall_64+0x328/0x520 [ 186.702669][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.702721][ T9448] Modules linked in: [ 186.702773][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.702846][ T9448] Tainted: [B]=BAD_PAGE [ 186.702860][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.702890][ T9448] Call Trace: [ 186.702910][ T9448] [ 186.702931][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.703006][ T9448] bad_page+0x17f/0x1c0 [ 186.703082][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.703148][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.703237][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.703320][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.703373][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.703460][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.703515][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.703569][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.703625][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.703720][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.703809][ T9448] tun_get_user+0x250d/0x4470 [ 186.703913][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.703964][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.704030][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.704105][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.704180][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.704266][ T9448] ? lock_acquire+0x115/0x350 [ 186.704319][ T9448] ? tun_get+0x1c/0x2f0 [ 186.704393][ T9448] ? tun_get+0x1c/0x2f0 [ 186.704451][ T9448] ? tun_get+0x1c/0x2f0 [ 186.704524][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.704591][ T9448] vfs_write+0x612/0xba0 [ 186.704654][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.704718][ T9448] ? __fget_files+0x2a/0x420 [ 186.704841][ T9448] ksys_write+0x150/0x270 [ 186.704895][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.704960][ T9448] do_syscall_64+0x166/0x520 [ 186.705025][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.705078][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.705140][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.705218][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.705265][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.705308][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.705349][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.705402][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.705443][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.705477][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.705509][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.705541][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.705606][ T9448] [ 186.705650][ T9448] BUG: Bad page state in process syz.0.814 pfn:74c8f [ 186.705682][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888074c8fdc0 pfn:0x74c8f [ 186.705748][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.705812][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.705855][ T9448] raw: ffff888074c8fdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.705886][ T9448] page dumped because: page_pool leak [ 186.705907][ T9448] page_owner tracks the page as allocated [ 186.705927][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186689033631 [ 186.705978][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.706008][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.706070][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.706126][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.706181][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.706238][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.706300][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.706356][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.706405][ T9448] tun_get_user+0x250d/0x4470 [ 186.706462][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.706524][ T9448] vfs_write+0x612/0xba0 [ 186.706573][ T9448] ksys_write+0x150/0x270 [ 186.706630][ T9448] do_syscall_64+0x166/0x520 [ 186.706704][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.706760][ T9448] page last free pid 9433 tgid 9419 ts 186527197155 stack trace: [ 186.706792][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.706846][ T9448] tlb_finish_mmu+0x13e/0x220 [ 186.706898][ T9448] exit_mmap+0x4b2/0x9f0 [ 186.706942][ T9448] __mmput+0x118/0x420 [ 186.706997][ T9448] exit_mm+0x18e/0x240 [ 186.707039][ T9448] do_exit+0x6cd/0x2360 [ 186.707083][ T9448] do_group_exit+0x22d/0x2f0 [ 186.707128][ T9448] get_signal+0x121b/0x12c0 [ 186.707190][ T9448] arch_do_signal_or_restart+0xbb/0x860 [ 186.707261][ T9448] exit_to_user_mode_loop+0x10e/0x770 [ 186.707313][ T9448] do_syscall_64+0x328/0x520 [ 186.707383][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.707427][ T9448] Modules linked in: [ 186.707469][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.707534][ T9448] Tainted: [B]=BAD_PAGE [ 186.707554][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.707584][ T9448] Call Trace: [ 186.707596][ T9448] [ 186.707616][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.707689][ T9448] bad_page+0x17f/0x1c0 [ 186.707772][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.707836][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.707926][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.708002][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.708052][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.708146][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.708174][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.708195][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.708219][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.708257][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.708282][ T9448] tun_get_user+0x250d/0x4470 [ 186.708321][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.708340][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.708367][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.708397][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.708428][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.708459][ T9448] ? lock_acquire+0x115/0x350 [ 186.708480][ T9448] ? tun_get+0x1c/0x2f0 [ 186.708508][ T9448] ? tun_get+0x1c/0x2f0 [ 186.708534][ T9448] ? tun_get+0x1c/0x2f0 [ 186.708562][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.708589][ T9448] vfs_write+0x612/0xba0 [ 186.708614][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.708640][ T9448] ? __fget_files+0x2a/0x420 [ 186.708676][ T9448] ksys_write+0x150/0x270 [ 186.708697][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.708724][ T9448] do_syscall_64+0x166/0x520 [ 186.708757][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.708779][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.708801][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.708824][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.708845][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.708862][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.708877][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.708897][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.708911][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.708923][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.708935][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.708946][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.708971][ T9448] [ 186.709003][ T9448] BUG: Bad page state in process syz.0.814 pfn:74d38 [ 186.709016][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888074d38dc0 pfn:0x74d38 [ 186.709035][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.709074][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.709092][ T9448] raw: ffff888074d38dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.709103][ T9448] page dumped because: page_pool leak [ 186.709112][ T9448] page_owner tracks the page as allocated [ 186.709119][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186689014982 [ 186.709182][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.709241][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.709304][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.709373][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.709426][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.709485][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.709541][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.709612][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.709656][ T9448] tun_get_user+0x250d/0x4470 [ 186.709717][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.709782][ T9448] vfs_write+0x612/0xba0 [ 186.709824][ T9448] ksys_write+0x150/0x270 [ 186.709866][ T9448] do_syscall_64+0x166/0x520 [ 186.709936][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.709987][ T9448] page last free pid 9433 tgid 9419 ts 186527212998 stack trace: [ 186.710021][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.710071][ T9448] tlb_finish_mmu+0x13e/0x220 [ 186.710122][ T9448] exit_mmap+0x4b2/0x9f0 [ 186.710170][ T9448] __mmput+0x118/0x420 [ 186.710223][ T9448] exit_mm+0x18e/0x240 [ 186.710257][ T9448] do_exit+0x6cd/0x2360 [ 186.710299][ T9448] do_group_exit+0x22d/0x2f0 [ 186.710341][ T9448] get_signal+0x121b/0x12c0 [ 186.710403][ T9448] arch_do_signal_or_restart+0xbb/0x860 [ 186.710475][ T9448] exit_to_user_mode_loop+0x10e/0x770 [ 186.710528][ T9448] do_syscall_64+0x328/0x520 [ 186.710590][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.710647][ T9448] Modules linked in: [ 186.710703][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.710783][ T9448] Tainted: [B]=BAD_PAGE [ 186.710797][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.710827][ T9448] Call Trace: [ 186.710849][ T9448] [ 186.710869][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.710943][ T9448] bad_page+0x17f/0x1c0 [ 186.711017][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.711088][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.711171][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.711258][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.711308][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.711401][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.711447][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.711508][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.711572][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.711659][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.711739][ T9448] tun_get_user+0x250d/0x4470 [ 186.711836][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.711889][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.711962][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.712051][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.712141][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.712228][ T9448] ? lock_acquire+0x115/0x350 [ 186.712274][ T9448] ? tun_get+0x1c/0x2f0 [ 186.712345][ T9448] ? tun_get+0x1c/0x2f0 [ 186.712401][ T9448] ? tun_get+0x1c/0x2f0 [ 186.712473][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.712544][ T9448] vfs_write+0x612/0xba0 [ 186.712600][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.712671][ T9448] ? __fget_files+0x2a/0x420 [ 186.712766][ T9448] ksys_write+0x150/0x270 [ 186.712819][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.712889][ T9448] do_syscall_64+0x166/0x520 [ 186.712961][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.713017][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.713069][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.713125][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.713191][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.713228][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.713278][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.713330][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.713370][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.713410][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.713449][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.713489][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.713561][ T9448] [ 186.713582][ T9448] BUG: Bad page state in process syz.0.814 pfn:74cda [ 186.713613][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888074cdadc0 pfn:0x74cda [ 186.713664][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.713719][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.713779][ T9448] raw: ffff888074cdadc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.713810][ T9448] page dumped because: page_pool leak [ 186.713832][ T9448] page_owner tracks the page as allocated [ 186.713845][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186688996433 [ 186.713921][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.713972][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.714028][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.714091][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.714145][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.714199][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.714270][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.714331][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.714373][ T9448] tun_get_user+0x250d/0x4470 [ 186.714436][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.714498][ T9448] vfs_write+0x612/0xba0 [ 186.714541][ T9448] ksys_write+0x150/0x270 [ 186.714584][ T9448] do_syscall_64+0x166/0x520 [ 186.714653][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.714697][ T9448] page last free pid 9433 tgid 9419 ts 186527229730 stack trace: [ 186.714744][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.714803][ T9448] tlb_finish_mmu+0x13e/0x220 [ 186.714861][ T9448] exit_mmap+0x4b2/0x9f0 [ 186.714910][ T9448] __mmput+0x118/0x420 [ 186.714962][ T9448] exit_mm+0x18e/0x240 [ 186.715004][ T9448] do_exit+0x6cd/0x2360 [ 186.715045][ T9448] do_group_exit+0x22d/0x2f0 [ 186.715089][ T9448] get_signal+0x121b/0x12c0 [ 186.715148][ T9448] arch_do_signal_or_restart+0xbb/0x860 [ 186.715220][ T9448] exit_to_user_mode_loop+0x10e/0x770 [ 186.715277][ T9448] do_syscall_64+0x328/0x520 [ 186.715340][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.715391][ T9448] Modules linked in: [ 186.715432][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.715504][ T9448] Tainted: [B]=BAD_PAGE [ 186.715517][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.715547][ T9448] Call Trace: [ 186.715566][ T9448] [ 186.715587][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.715655][ T9448] bad_page+0x17f/0x1c0 [ 186.715739][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.715810][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.715893][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.715976][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.716020][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.716112][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.716165][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.716219][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.716255][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.716290][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.716321][ T9448] tun_get_user+0x250d/0x4470 [ 186.716374][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.716391][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.716419][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.716447][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.716477][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.716507][ T9448] ? lock_acquire+0x115/0x350 [ 186.716529][ T9448] ? tun_get+0x1c/0x2f0 [ 186.716584][ T9448] ? tun_get+0x1c/0x2f0 [ 186.716663][ T9448] ? tun_get+0x1c/0x2f0 [ 186.716764][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.716830][ T9448] vfs_write+0x612/0xba0 [ 186.716893][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.716957][ T9448] ? __fget_files+0x2a/0x420 [ 186.717051][ T9448] ksys_write+0x150/0x270 [ 186.717103][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.717167][ T9448] do_syscall_64+0x166/0x520 [ 186.717233][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.717287][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.717340][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.717402][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.717455][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.717499][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.717548][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.717596][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.717637][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.717670][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.717708][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.717749][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.717812][ T9448] [ 186.717834][ T9448] BUG: Bad page state in process syz.0.814 pfn:74cdb [ 186.717865][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888074cdbdc0 pfn:0x74cdb [ 186.717916][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.717980][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.718040][ T9448] raw: ffff888074cdbdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.718070][ T9448] page dumped because: page_pool leak [ 186.718098][ T9448] page_owner tracks the page as allocated [ 186.718201][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186688976568 [ 186.718269][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.718320][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.718374][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.718434][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.718488][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.718542][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.718605][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.718667][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.718710][ T9448] tun_get_user+0x250d/0x4470 [ 186.718781][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.718842][ T9448] vfs_write+0x612/0xba0 [ 186.718877][ T9448] ksys_write+0x150/0x270 [ 186.718919][ T9448] do_syscall_64+0x166/0x520 [ 186.718990][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.719043][ T9448] page last free pid 9433 tgid 9419 ts 186527245810 stack trace: [ 186.719075][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.719127][ T9448] tlb_finish_mmu+0x13e/0x220 [ 186.719178][ T9448] exit_mmap+0x4b2/0x9f0 [ 186.719219][ T9448] __mmput+0x118/0x420 [ 186.719275][ T9448] exit_mm+0x18e/0x240 [ 186.719317][ T9448] do_exit+0x6cd/0x2360 [ 186.719359][ T9448] do_group_exit+0x22d/0x2f0 [ 186.719418][ T9448] get_signal+0x121b/0x12c0 [ 186.719487][ T9448] arch_do_signal_or_restart+0xbb/0x860 [ 186.719566][ T9448] exit_to_user_mode_loop+0x10e/0x770 [ 186.719618][ T9448] do_syscall_64+0x328/0x520 [ 186.719682][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.719736][ T9448] Modules linked in: [ 186.719779][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.719851][ T9448] Tainted: [B]=BAD_PAGE [ 186.719872][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.719903][ T9448] Call Trace: [ 186.719916][ T9448] [ 186.719937][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.720011][ T9448] bad_page+0x17f/0x1c0 [ 186.720086][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.720150][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.720229][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.720313][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.720363][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.720450][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.720502][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.720555][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.720618][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.720711][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.720775][ T9448] tun_get_user+0x250d/0x4470 [ 186.720889][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.720946][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.721012][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.721092][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.721154][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.721238][ T9448] ? lock_acquire+0x115/0x350 [ 186.721291][ T9448] ? tun_get+0x1c/0x2f0 [ 186.721364][ T9448] ? tun_get+0x1c/0x2f0 [ 186.721426][ T9448] ? tun_get+0x1c/0x2f0 [ 186.721498][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.721571][ T9448] vfs_write+0x612/0xba0 [ 186.721626][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.721689][ T9448] ? __fget_files+0x2a/0x420 [ 186.721798][ T9448] ksys_write+0x150/0x270 [ 186.721850][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.721914][ T9448] do_syscall_64+0x166/0x520 [ 186.721985][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.722039][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.722092][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.722155][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.722214][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.722266][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.722322][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.722373][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.722416][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.722449][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.722482][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.722521][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.722582][ T9448] [ 186.722603][ T9448] BUG: Bad page state in process syz.0.814 pfn:748fc [ 186.722634][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880748fcdc0 pfn:0x748fc [ 186.722678][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.722734][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.722784][ T9448] raw: ffff8880748fcdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.722814][ T9448] page dumped because: page_pool leak [ 186.722835][ T9448] page_owner tracks the page as allocated [ 186.722848][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186688095118 [ 186.722918][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.722962][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.723025][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.723086][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.723140][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.723192][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.723248][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.723318][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.723361][ T9448] tun_get_user+0x250d/0x4470 [ 186.723423][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.723478][ T9448] vfs_write+0x612/0xba0 [ 186.723520][ T9448] ksys_write+0x150/0x270 [ 186.723570][ T9448] do_syscall_64+0x166/0x520 [ 186.723649][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.723706][ T9448] page last free pid 9433 tgid 9419 ts 186527261346 stack trace: [ 186.723755][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.723806][ T9448] tlb_finish_mmu+0x13e/0x220 [ 186.723863][ T9448] exit_mmap+0x4b2/0x9f0 [ 186.723898][ T9448] __mmput+0x118/0x420 [ 186.723950][ T9448] exit_mm+0x18e/0x240 [ 186.723992][ T9448] do_exit+0x6cd/0x2360 [ 186.724035][ T9448] do_group_exit+0x22d/0x2f0 [ 186.724086][ T9448] get_signal+0x121b/0x12c0 [ 186.724140][ T9448] arch_do_signal_or_restart+0xbb/0x860 [ 186.724212][ T9448] exit_to_user_mode_loop+0x10e/0x770 [ 186.724258][ T9448] do_syscall_64+0x328/0x520 [ 186.724329][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.724415][ T9448] Modules linked in: [ 186.724455][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.724513][ T9448] Tainted: [B]=BAD_PAGE [ 186.724533][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.724564][ T9448] Call Trace: [ 186.724585][ T9448] [ 186.724605][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.724671][ T9448] bad_page+0x17f/0x1c0 [ 186.724751][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.724816][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.724898][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.724980][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.725032][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.725126][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.725146][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.725167][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.725192][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.725230][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.725256][ T9448] tun_get_user+0x250d/0x4470 [ 186.725295][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.725314][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.725342][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.725372][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.725403][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.725434][ T9448] ? lock_acquire+0x115/0x350 [ 186.725455][ T9448] ? tun_get+0x1c/0x2f0 [ 186.725483][ T9448] ? tun_get+0x1c/0x2f0 [ 186.725508][ T9448] ? tun_get+0x1c/0x2f0 [ 186.725535][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.725563][ T9448] vfs_write+0x612/0xba0 [ 186.725587][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.725613][ T9448] ? __fget_files+0x2a/0x420 [ 186.725649][ T9448] ksys_write+0x150/0x270 [ 186.725671][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.725698][ T9448] do_syscall_64+0x166/0x520 [ 186.725731][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.725753][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.725774][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.725798][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.725819][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.725836][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.725853][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.725874][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.725889][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.725903][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.725916][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.725927][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.725952][ T9448] [ 186.725962][ T9448] BUG: Bad page state in process syz.0.814 pfn:74936 [ 186.725974][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888074936dc0 pfn:0x74936 [ 186.725995][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.726060][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.726124][ T9448] raw: ffff888074936dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.726160][ T9448] page dumped because: page_pool leak [ 186.726189][ T9448] page_owner tracks the page as allocated [ 186.726209][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186688044898 [ 186.726275][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.726319][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.726380][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.726441][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.726495][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.726551][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.726614][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.726678][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.726721][ T9448] tun_get_user+0x250d/0x4470 [ 186.726828][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.726890][ T9448] vfs_write+0x612/0xba0 [ 186.726931][ T9448] ksys_write+0x150/0x270 [ 186.726974][ T9448] do_syscall_64+0x166/0x520 [ 186.727039][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.727089][ T9448] page last free pid 9433 tgid 9419 ts 186527277597 stack trace: [ 186.727122][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.727172][ T9448] tlb_finish_mmu+0x13e/0x220 [ 186.727225][ T9448] exit_mmap+0x4b2/0x9f0 [ 186.727261][ T9448] __mmput+0x118/0x420 [ 186.727314][ T9448] exit_mm+0x18e/0x240 [ 186.727356][ T9448] do_exit+0x6cd/0x2360 [ 186.727405][ T9448] do_group_exit+0x22d/0x2f0 [ 186.727450][ T9448] get_signal+0x121b/0x12c0 [ 186.727517][ T9448] arch_do_signal_or_restart+0xbb/0x860 [ 186.727611][ T9448] exit_to_user_mode_loop+0x10e/0x770 [ 186.727665][ T9448] do_syscall_64+0x328/0x520 [ 186.727739][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.727791][ T9448] Modules linked in: [ 186.727835][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.727909][ T9448] Tainted: [B]=BAD_PAGE [ 186.727929][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.727960][ T9448] Call Trace: [ 186.727981][ T9448] [ 186.728003][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.728079][ T9448] bad_page+0x17f/0x1c0 [ 186.728153][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.728223][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.728300][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.728382][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.728433][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.728507][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.728561][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.728614][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.728688][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.728793][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.728858][ T9448] tun_get_user+0x250d/0x4470 [ 186.728974][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.729026][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.729112][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.729192][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.729261][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.729344][ T9448] ? lock_acquire+0x115/0x350 [ 186.729399][ T9448] ? tun_get+0x1c/0x2f0 [ 186.729467][ T9448] ? tun_get+0x1c/0x2f0 [ 186.729531][ T9448] ? tun_get+0x1c/0x2f0 [ 186.729597][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.729671][ T9448] vfs_write+0x612/0xba0 [ 186.729739][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.729802][ T9448] ? __fget_files+0x2a/0x420 [ 186.729891][ T9448] ksys_write+0x150/0x270 [ 186.729945][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.730017][ T9448] do_syscall_64+0x166/0x520 [ 186.730083][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.730146][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.730200][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.730266][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.730327][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.730377][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.730428][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.730474][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.730517][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.730551][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.730584][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.730616][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.730680][ T9448] [ 186.730775][ T9448] BUG: Bad page state in process syz.0.814 pfn:748ea [ 186.730808][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880748eadc0 pfn:0x748ea [ 186.730882][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.730945][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.730991][ T9448] raw: ffff8880748eadc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.731022][ T9448] page dumped because: page_pool leak [ 186.731047][ T9448] page_owner tracks the page as allocated [ 186.731067][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186688001617 [ 186.731135][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.731187][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.731248][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.731297][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.731373][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.731428][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.731493][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.731559][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.731603][ T9448] tun_get_user+0x250d/0x4470 [ 186.731674][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.731752][ T9448] vfs_write+0x612/0xba0 [ 186.731803][ T9448] ksys_write+0x150/0x270 [ 186.731846][ T9448] do_syscall_64+0x166/0x520 [ 186.731911][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.731963][ T9448] page last free pid 5622 tgid 5622 ts 186627091504 stack trace: [ 186.731998][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.732051][ T9448] __kasan_populate_vmalloc+0x12d/0x1c0 [ 186.732106][ T9448] alloc_vmap_area+0xd1a/0x1420 [ 186.732180][ T9448] __get_vm_area_node+0x200/0x2f0 [ 186.732244][ T9448] __vmalloc_node_range_noprof+0x343/0x1540 [ 186.732297][ T9448] vzalloc_noprof+0xb2/0xe0 [ 186.732340][ T9448] alloc_counters+0x63/0x5d0 [ 186.732414][ T9448] do_ip6t_get_ctl+0xb17/0x12f0 [ 186.732481][ T9448] nf_getsockopt+0x26e/0x290 [ 186.732556][ T9448] ipv6_getsockopt+0x213/0x2c0 [ 186.732609][ T9448] do_sock_getsockopt+0x4aa/0x640 [ 186.732677][ T9448] __x64_sys_getsockopt+0x1a4/0x240 [ 186.732742][ T9448] do_syscall_64+0x166/0x520 [ 186.732808][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.732860][ T9448] Modules linked in: [ 186.732894][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.732960][ T9448] Tainted: [B]=BAD_PAGE [ 186.732980][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.733012][ T9448] Call Trace: [ 186.733032][ T9448] [ 186.733054][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.733142][ T9448] bad_page+0x17f/0x1c0 [ 186.733226][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.733286][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.733372][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.733448][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.733492][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.733586][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.733639][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.733693][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.733767][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.733862][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.733926][ T9448] tun_get_user+0x250d/0x4470 [ 186.734017][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.734070][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.734136][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.734212][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.734304][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.734388][ T9448] ? lock_acquire+0x115/0x350 [ 186.734442][ T9448] ? tun_get+0x1c/0x2f0 [ 186.734517][ T9448] ? tun_get+0x1c/0x2f0 [ 186.734584][ T9448] ? tun_get+0x1c/0x2f0 [ 186.734611][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.734639][ T9448] vfs_write+0x612/0xba0 [ 186.734664][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.734690][ T9448] ? __fget_files+0x2a/0x420 [ 186.734732][ T9448] ksys_write+0x150/0x270 [ 186.734754][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.734781][ T9448] do_syscall_64+0x166/0x520 [ 186.734809][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.734831][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.734853][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.734877][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.734898][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.734914][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.734932][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.734953][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.734969][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.734983][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.734997][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.735010][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.735036][ T9448] [ 186.735045][ T9448] BUG: Bad page state in process syz.0.814 pfn:748e7 [ 186.735057][ T9448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880748e7dc0 pfn:0x748e7 [ 186.735077][ T9448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 186.735102][ T9448] raw: 00fff00000000000 dead000000000040 ffff88801c1b1000 0000000000000000 [ 186.735121][ T9448] raw: ffff8880748e7dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 186.735132][ T9448] page dumped because: page_pool leak [ 186.735141][ T9448] page_owner tracks the page as allocated [ 186.735149][ T9448] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9448, tgid 9446 (syz.0.814), ts 186687954719 [ 186.735177][ T9448] post_alloc_hook+0x1f9/0x250 [ 186.735196][ T9448] get_page_from_freelist+0x2209/0x2280 [ 186.735220][ T9448] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 186.735244][ T9448] __alloc_pages_noprof+0x10/0x100 [ 186.735266][ T9448] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 186.735288][ T9448] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 186.735312][ T9448] skb_pp_cow_data+0xc08/0x18e0 [ 186.735335][ T9448] do_xdp_generic+0x78f/0x12f0 [ 186.735352][ T9448] tun_get_user+0x250d/0x4470 [ 186.735390][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.735464][ T9448] vfs_write+0x612/0xba0 [ 186.735508][ T9448] ksys_write+0x150/0x270 [ 186.735554][ T9448] do_syscall_64+0x166/0x520 [ 186.735627][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.735680][ T9448] page last free pid 5622 tgid 5622 ts 186627108195 stack trace: [ 186.735715][ T9448] __free_frozen_pages+0xc93/0xd90 [ 186.735778][ T9448] __kasan_populate_vmalloc+0x12d/0x1c0 [ 186.735834][ T9448] alloc_vmap_area+0xd1a/0x1420 [ 186.735909][ T9448] __get_vm_area_node+0x200/0x2f0 [ 186.736014][ T9448] __vmalloc_node_range_noprof+0x343/0x1540 [ 186.736063][ T9448] vzalloc_noprof+0xb2/0xe0 [ 186.736107][ T9448] alloc_counters+0x63/0x5d0 [ 186.736181][ T9448] do_ip6t_get_ctl+0xb17/0x12f0 [ 186.736242][ T9448] nf_getsockopt+0x26e/0x290 [ 186.736314][ T9448] ipv6_getsockopt+0x213/0x2c0 [ 186.736368][ T9448] do_sock_getsockopt+0x4aa/0x640 [ 186.736434][ T9448] __x64_sys_getsockopt+0x1a4/0x240 [ 186.736506][ T9448] do_syscall_64+0x166/0x520 [ 186.736569][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.736620][ T9448] Modules linked in: [ 186.736662][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.0.814 Tainted: G B syzkaller #0 PREEMPT(full) [ 186.736752][ T9448] Tainted: [B]=BAD_PAGE [ 186.736772][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.736804][ T9448] Call Trace: [ 186.736827][ T9448] [ 186.736855][ T9448] dump_stack_lvl+0xe8/0x150 [ 186.736935][ T9448] bad_page+0x17f/0x1c0 [ 186.737022][ T9448] __free_frozen_pages+0xd37/0xd90 [ 186.737093][ T9448] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 186.737176][ T9448] bpf_xdp_adjust_tail+0x1ce/0x210 [ 186.737253][ T9448] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 186.737303][ T9448] bpf_prog_run_generic_xdp+0x612/0x1560 [ 186.737388][ T9448] do_xdp_generic+0xae1/0x12f0 [ 186.737433][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.737487][ T9448] ? do_xdp_generic+0x6d9/0x12f0 [ 186.737549][ T9448] ? __pfx_do_xdp_generic+0x10/0x10 [ 186.737643][ T9448] ? tun_get_user+0x1db7/0x4470 [ 186.737706][ T9448] tun_get_user+0x250d/0x4470 [ 186.737818][ T9448] ? aa_file_perm+0x4ed/0x15f0 [ 186.737862][ T9448] ? __pfx_tun_get_user+0x10/0x10 [ 186.737933][ T9448] ? __lock_acquire+0x747/0x2de0 [ 186.738007][ T9448] ? ref_tracker_alloc+0x172/0x530 [ 186.738088][ T9448] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 186.738169][ T9448] ? lock_acquire+0x115/0x350 [ 186.738221][ T9448] ? tun_get+0x1c/0x2f0 [ 186.738311][ T9448] ? tun_get+0x1c/0x2f0 [ 186.738386][ T9448] ? tun_get+0x1c/0x2f0 [ 186.738451][ T9448] tun_chr_write_iter+0x113/0x200 [ 186.738525][ T9448] vfs_write+0x612/0xba0 [ 186.738587][ T9448] ? __pfx_vfs_write+0x10/0x10 [ 186.738657][ T9448] ? __fget_files+0x2a/0x420 [ 186.738752][ T9448] ksys_write+0x150/0x270 [ 186.738805][ T9448] ? __pfx_ksys_write+0x10/0x10 [ 186.738875][ T9448] do_syscall_64+0x166/0x520 [ 186.738948][ T9448] ? trace_irq_disable+0x3b/0x140 [ 186.739001][ T9448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.739062][ T9448] ? clear_bhb_loop+0x70/0xc0 [ 186.739117][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.739169][ T9448] RIP: 0033:0x7fe11755fd8e [ 186.739218][ T9448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.739265][ T9448] RSP: 002b:00007fe11844cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.739316][ T9448] RAX: ffffffffffffffda RBX: 00007fe11844d6c0 RCX: 00007fe11755fd8e [ 186.739358][ T9448] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 186.739391][ T9448] RBP: 00007fe117636b20 R08: 0000000000000000 R09: 0000000000000000 [ 186.739423][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.739453][ T9448] R13: 00007fe117826128 R14: 00007fe117826090 R15: 00007ffd49fda248 [ 186.739517][ T9448] [ 186.751404][ T9447] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 187.048209][ T5624] tipc: Node number set to 3160305106 [ 191.688688][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 194.239261][ T1317] ieee802154 phy1 wpan1: encryption failed: -22