last executing test programs: 2.596114361s ago: executing program 3 (id=634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x31, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) 2.348847068s ago: executing program 3 (id=638): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9c0000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020008000019dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000e8be9800000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.28326084s ago: executing program 0 (id=639): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x88}]}, 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0xc0, 0x7, 0xc2, 0x4, 0x66, 0x4, [0x20044, 0x81, 0x10, 0x40, 0x6, 0x8, 0x2001, 0x2174]}}) 2.148050326s ago: executing program 3 (id=641): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) unshare(0x400) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320ff6900140000007ef506be000000020000000088fb000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX], 0x10b8}, 0x20000c00) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916900000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x9}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004041}, 0x11) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8=r7, @ANYRES64=r5, @ANYRES16=r4], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058", 0xe5) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000680)={0x2, 'veth1_to_hsr\x00', {}, 0x9}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="900000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000600012800b000100697036746e6c00005000028006000f00000000000500060001000000080008000d000000060012004e21000008001400ffffffff080008003500000014000200fc00000000000000000000000000000108000100", @ANYRES32, @ANYBLOB="08000400cd070d23"], 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r10, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 2.087867092s ago: executing program 0 (id=642): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, 0x0, &(0x7f0000000340)=""/85}, 0x38) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r5, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x154, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x1, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x6, 0x1f, 0x1ff}, {0x0, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e20, @in6=@empty}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000100), &(0x7f0000000180)=r2}, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000000c0)={0x8, 'rose0\x00', {'ip_vti0\x00'}, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000280)='syz0\x00', 0x1ff) 1.969841435s ago: executing program 4 (id=643): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x44c, 0x31, 0x1, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1e, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x6, 0x8000, 0x5, 0x1, 0x7ff, 0x1, 0x10000, 0x7, 0x0, 0x10000, 0x4, 0x9, 0x6, 0x5, 0x8, 0x1000, 0x0, 0x1, 0x4, 0x4, 0xa0, 0x32d4, 0xa, 0x80000000, 0x10000, 0x4f7, 0x0, 0x9, 0x3, 0xfffffff5, 0x7, 0x3, 0x4, 0x80ed, 0x7fff, 0xfffffff9, 0x4, 0x4, 0x6, 0x0, 0xb6, 0x7f, 0x43, 0x2, 0xfffffffb, 0x1, 0x8, 0x3, 0x9, 0x4, 0x1, 0x905, 0x7, 0x4, 0x3, 0x1, 0x7, 0xffffffff, 0x58, 0x9, 0x7ff, 0xad, 0x1002, 0xffffff61, 0x8a8, 0x1, 0x0, 0x8, 0x5, 0xffff8000, 0x1, 0x5, 0xffffffff, 0x4, 0xb, 0x1, 0x42, 0x10001, 0x302160e2, 0x0, 0x1, 0xff, 0x4, 0x80, 0x3, 0x4, 0x1, 0x7, 0x1, 0x6, 0xfffffffc, 0x81, 0x7, 0x66d3, 0xffffbfff, 0xef2, 0x9, 0x6, 0x7fffffff, 0xe52, 0x7, 0x4, 0x2, 0x0, 0xffffffff, 0x7fffffff, 0x3, 0x40, 0x2, 0x2, 0x9265, 0x3, 0x8, 0xff, 0xb58, 0xe3, 0x0, 0x7000, 0x9ae, 0xe, 0x0, 0x550, 0x2, 0x59, 0x4ca, 0x559b, 0x0, 0x2, 0xa8, 0x400, 0x37, 0x1ff, 0x1, 0x10001, 0x4, 0xc40, 0x7, 0x1, 0x74, 0x5b, 0x9, 0x10000, 0x401, 0xc, 0x59b1, 0xd117, 0xf, 0x7, 0x4, 0xff, 0x10080, 0x80000001, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffbff, 0x43, 0x1, 0xc, 0x2, 0x38a9, 0x8568, 0x8, 0x3, 0x80000001, 0x4404, 0x1, 0x1020, 0x3ff, 0xf4d, 0x63ae, 0xffffff00, 0xffffffff, 0x9, 0x81, 0xd8, 0x8, 0x1, 0xc1e4, 0xfffffff9, 0x8, 0x3, 0xb, 0x7, 0x1, 0x0, 0x8, 0xc, 0x7, 0x1, 0xe, 0x0, 0x6b687e82, 0x8, 0x8, 0x0, 0x66, 0x7, 0x8, 0x7, 0x3, 0x8, 0x0, 0x6, 0x80, 0x6, 0x68f, 0x7, 0x2000003, 0x7, 0x8, 0xfff, 0x2, 0xe7d, 0x4, 0x5f1, 0x3, 0x7, 0x9, 0x4, 0x1ff, 0xfffffffd, 0xf45b, 0x8, 0x76, 0x1, 0x7d43, 0x800, 0x4, 0x80000001, 0x8, 0x8, 0x80000000, 0x400, 0x2, 0x800000, 0x1e, 0x40, 0x5, 0x4, 0x9, 0x2, 0xffff, 0x80000001, 0x8, 0x1c000000, 0x84d1, 0xff, 0x84, 0x9, 0x2, 0x9]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44c}}, 0x4008000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061100c000000000063014b00000000009500090000000000005bbfeb9b312772330bea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 1.791443647s ago: executing program 0 (id=646): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) socket$inet(0x2, 0x800, 0x8001) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) write$cgroup_int(r3, &(0x7f00000000c0)=0x80000002, 0x12) close(r1) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socket$unix(0x1, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x0) sendmsg$sock(r4, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0}, 0x4085) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a140000001000010000000000000800000384000a"], 0x28}}, 0x200508d4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000280)={r8, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 1.727990852s ago: executing program 4 (id=647): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec000000210001000040000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000001000000000000000000aa33000000fffffffb0200020000000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000000000000000000000001fc0200000000000000000000000000003c000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @fwd={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x25, 0x401}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2b}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2a, 0x0, 0x15, 0x5}, @fwd={0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000240)=""/159, 0x7f, 0x9f, 0x0, 0x1, 0x10000}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x24, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x7101}) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0xfeffffffffffffff) 1.662974739s ago: executing program 1 (id=648): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, r4, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4f, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4c000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21040000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x20}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x8004) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @generic="3ed73cfccb"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 1.531869228s ago: executing program 4 (id=649): pselect6(0x40, &(0x7f0000000000)={0x5e8, 0x100, 0x0, 0x9aa2, 0x5, 0xfffffffffffffff7, 0x6, 0x100}, &(0x7f0000000080)={0x9, 0x1, 0x5, 0x7, 0xfffffffffffeffff, 0x22, 0x8000, 0x1400000000}, &(0x7f00000000c0)={0xa, 0x3, 0x832, 0x7fff, 0x15b2ca9e, 0x9, 0x1, 0x10001}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x3]}, 0x8}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}, 0xfffffffe}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x107}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x54}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080032427e15a330", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) bind$inet(r3, &(0x7f0000000000)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000300)=@ccm_128={{0x303}, "320e019f0232037d", "192c4caaf37af3d00fa4a95922e05c94", "0222dc88", "c01217caf77d0e49"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x880) 1.412941851s ago: executing program 1 (id=651): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x20, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9c3000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020008000019dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000e8be9800000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.269586381s ago: executing program 1 (id=652): r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x9, 0xff, 0xd2fa, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x700, 0x7, 0xc46, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r1, 0x2f, 0xd, 0xdd, 0xffffffff, 0x90, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8, 0x40, 0x6}}) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffe, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000200081dc2bbd7040fedbdf2518000000080018004e244e240000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x44004) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f0000000300)=0x35) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x6}, 0x94) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) 1.163403906s ago: executing program 0 (id=653): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x1604}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.160123243s ago: executing program 3 (id=654): socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) socket$netlink(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48040, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x87) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000200)=[{r0, 0x2008, 0x300}], 0x1, 0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) 1.056625821s ago: executing program 4 (id=655): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x64000000}, 0x2a3}, 0x48) 1.01098251s ago: executing program 0 (id=656): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000440)=""/236, 0xec}, {&(0x7f0000000540)=""/16, 0x10}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000680)=""/133, 0x85}], 0x5) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8408001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000001d0000000000000000000000000000000000000000000000000000000000000000feffffef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000a9a7ce2e059c184e56b400000000000000000000000000000000000000ffffffff0000"]}, 0x108) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="020000000980ffff", 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400e4ff00000000000a0000040900010073797a310000000073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x168, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13c, 0x3, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x128, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "90151f591fe7306009d0b5d711762eee2ad38e77cd2f9124c03c176e3b606e4eb5d60c26f8661426fc3424f843cc3271fa232cf739b2336b1a75744abb"}, @NFTA_DATA_VALUE={0xa8, 0x1, "6d1e42f3b0b4abf46a866740676e826f36d673a6e1115f92452d422f4452dbdc63f67e2e0904f52a9fa53bc3f625df315d6f167cf97f15f5e69c85f8bc25cff9f1a6b4a0093994fc19c38526decded614031fd0b30f2dc737bcb8fa13012c9082384bb6f33a5944a51536ba2bc5d1d6508932e605cb49193113605294a053297d02802fd15af5ba5a8be85cb270b1b4b64988d65bf63853ca062af534117c16eeb3c8291"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'W'}]}]}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 919.307102ms ago: executing program 1 (id=657): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x4c84c000) recvmsg$can_raw(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f00000017c0)=""/4110, 0x100e}, {&(0x7f00000014c0)=""/57, 0x39}, {&(0x7f0000001500)=""/21, 0x15}], 0x5, &(0x7f00000015c0)=""/170, 0xaa}, 0x20) 914.110508ms ago: executing program 4 (id=658): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000202000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61, 0x0, 0x1000000}, 0x28) 852.353807ms ago: executing program 1 (id=659): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, 0xfffffffffffffffc) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0xffd, 0x6, 0x1d, 0x5, 0x4, 0x27}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x4000010) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x2, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702200014000000b7030000000000008500000083000000bf09000000005ad4c99a8afa63a7c0000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b700000000000000950000000f000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x1, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x1}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0xd, 0x2, 0x4, 0x2, 0xf, 0x2, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x6002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x4d, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x128, r11, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x128}}, 0x880) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r10, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(r12, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) socket$nl_generic(0x10, 0x3, 0x10) 850.57848ms ago: executing program 4 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x1}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x5, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)={0x40, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x48080) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {0x0}, {0x0}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0xfffffffe}], 0x1, 0x20, 0x0) 667.707701ms ago: executing program 1 (id=661): syz_emit_ethernet(0x2e, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x1b59, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x1b59, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xa, 0x3, 0x600, 0x3, 0xffffff01, 0x40, 0x6, 0x6, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10) 559.318109ms ago: executing program 2 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010300001a0000000000010000000900010073797a3100000000080002400000000154000000030a010200000000000000000100ffff0900030073797a320000000028000000080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a1b010000d5ecc38a8000010020000c00024000000000000000010900010073797a310000000020000480"], 0xf0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000f320c9f97000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="81b8000000000000140012800b000100697036677265000004"], 0x34}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018014800c0500"/46, @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0501042abd7000fedbdf250a00000706000000000000ff", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x101}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r4) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x3}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="41b1321afead1b12da6c29b018fe46d79b3019215e15b576c5e4f5022249a8f01e3c49ca24232a297cfc9519d7ea6cee2b9d058026f00022d0b39dc128984901df368470", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket(0x27, 0x1, 0x40) 346.718628ms ago: executing program 2 (id=664): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000050000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bfa300000000000056080000000000008500000052000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) (async, rerun: 32) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000040)=0x4, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e3ffffffffffffff00"/28], 0x48) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003940), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000055f54500f2a54248d7481bcc935ec8ebed3b8b3aa83e944f1ccacb389ce2ef70857f59cf5cf6ed3a5136f3013de85ed914dcd997e4210045c1b0df8ec21b8a3a81417015e1aa760f8f56ef6228935973643a0b576c09a0aa30a9c5b76b4934dade007d32c1a53173dbd73d43f8cd8bce6fc71903c223be2c676c2f8f2ac88e68dc904cb62f33edd39af1", @ANYRES16=r6, @ANYBLOB="01072bbd7000fbdbdf25010000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x800c094}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000010a27bd7000000000000a000040000000000000000008000a00080000001400110076657468315f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40082) (rerun: 64) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2400000016000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 32) sendto$inet6(r5, &(0x7f0000000500)="92501309405edcbebf0edc43aab3f5f04937966d8ef0580f924e022c64d088cfac5b6e3c8d4524bd11e0ceafb7420c57535b74fe2909290591dd71d419dd50f157a0ddd6b01f10bb1381cae5779e920a438e3006b6c5274ede72fb44e9313535db476abeefd35f212baa193003", 0x6d, 0x44, &(0x7f0000000580)={0xa, 0x4e22, 0x300a, @private0, 0x1}, 0x1c) (rerun: 32) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x840) (async) write$nci(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="410404"], 0x7) 271.834813ms ago: executing program 2 (id=665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0xffffffffffffff22, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x20000004}, @NFTA_FLOWTABLE_FLAGS={0x0, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'bridge0\x00'}, {0x0, 0x1, 'pim6reg1\x00'}, {0x0, 0x1, 'veth0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz1\x00'}]}], {0xa}}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 262.511461ms ago: executing program 2 (id=666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x1700}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 200.249947ms ago: executing program 3 (id=667): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@float={0xe, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x2e, 0x2e, 0x61, 0x0]}}, &(0x7f0000000080)=""/60, 0x2e, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000006000000b7080000000000007b8af8ff00000000b708000001000100000007010000f8ffffffbfa400000000000007040000f0ff1700b80200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xf73, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @cgroup_device=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 147.995566ms ago: executing program 2 (id=668): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0xa, 0x5, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000200)={0x1, 0x8001, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) preadv(r3, 0xffffffffffffffff, 0x1, 0x4, 0x0) (async) unshare(0x20000400) (async) socket$inet6(0xa, 0x2, 0x3a) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) unshare(0x8040480) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2c, r6, 0x301, 0x70bd28, 0x25dfdbba, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x40880) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001007370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050011000000000008001200fcffffff"], 0x44}}, 0x0) 108.052778ms ago: executing program 3 (id=669): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000340)={0xa, 0x4e27, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000140)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x4000045) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="508804000100000008001b00000000000a000200aaaaaaaaaabb0000"], 0x34}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'dh\x00', 0x0, 0xa7e, 0x13f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000091110e000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r9], 0x3c}}, 0x0) close(r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) 68.743149ms ago: executing program 2 (id=670): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000000)=0x90000000, 0x4) sendto$unix(r3, 0x0, 0xfffffffffffffd03, 0x0, &(0x7f0000000240)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000480)={0x2e, @rand_addr=0x64010100, 0x4e23, 0x4, 'sh\x00', 0x0, 0x7, 0x3e}, 0x2c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r7, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000001180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0xd, 0x6, "ae71fe", 0xd47, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb64, 0x1, [], "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"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7, 0x9], "2a8ca3126fae8643080283361aa4f4f649b562f09cebec9b99bfd3ac51adafd469de349638f5d534ebb386b028a9dc909588351a7eec12f3c555a2eee06c19013b69a703ee1aed8450d9ed459b8d81419fdc23ebc66d889daffd2dc47e2d724be3938310ed71c4f52ec4a9094dd75cf5b414e91c4807cc0d3984e93625713d64bbeddb1d5671749cf1af7dbecf2938ffe9621d74aafd7541cb1edcd15b2cd0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a27fcde703f6388871ae3e99208e1a0f6f9053edbe14b53dad3e8cc5b7bd72e2b8b45140700a40c1ea1d938b1c42e1940c4d63783ad50974a3a079ed3133b01774af464efe12e83c984d0c7bd18da4115e0268c4544900976d6920a8cca48992dfc5a6a2111ed7c1d29a811dcc4b37684120a824395f56acbe8a65e05eadedcd831d4cb4a96cee32540958382801f21c57"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x9, 0x2, 0x0, 0x1, 0x7, 0x8}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x6, 0x1, 0x1, 0x2, 0x3, 0x5}, 0x2, {0x3, 0x5f, 0x0, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "99b77ff3a342b54d5adaf33cef888776e6b6397640adb24385042a2374189a8a71a3abc2bd357819777e3bff6db91a7fae2428397ffc590ca5bdc03a4c6e6799fcf9c01eefa268afd2239367d754bb7b5dbb82c4cc1461cade8f78e10d4482062fe6480a9a4d556c6984e5"}}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, r1}, 0x14) syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 0s ago: executing program 0 (id=671): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000240)=0x4, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3fb, 0x100, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000380)=0x3) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108004d0000480000000000059078ac1414006401010044140503e0000002000000000a010101000000008907ce0000000083030100004e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5191fb7d7a7059861720008825c07d337eb3d32ae1dcfd00"], 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\x00', 0x80, &(0x7f0000000100)={@_ha_fsid={[0x1000, 0x6]}, {0x3, 0x5, 0x9, 0x8}}, 0x4, &(0x7f0000000140), &(0x7f0000000180)}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='batadv_slave_0\x00', 0x10) bind$xdp(r6, &(0x7f0000000340)={0x2c, 0x3, 0x0, 0x6}, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r8, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x59}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004011}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 77.821349][ T5610] cgroup: Unknown subsys name 'net' [ 77.919696][ T5610] cgroup: Unknown subsys name 'cpuset' [ 77.929831][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.564840][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.393399][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.401540][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.409103][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.421511][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.431937][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.537376][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.548542][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.571244][ T4939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.579557][ T4939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.588040][ T4939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.596834][ T4939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.605243][ T4939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.613129][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.615168][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.627166][ T4939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.682779][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.695106][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.702731][ T4939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.719196][ T4939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.726335][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.745749][ T4939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.754124][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.762972][ T4939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.763245][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.778552][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.243978][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.251760][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.259026][ T5622] bridge_slave_0: entered allmulticast mode [ 85.267414][ T5622] bridge_slave_0: entered promiscuous mode [ 85.320546][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.341282][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.350812][ T5622] bridge_slave_1: entered allmulticast mode [ 85.358954][ T5622] bridge_slave_1: entered promiscuous mode [ 85.451823][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.459111][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.466729][ T5630] bridge_slave_0: entered allmulticast mode [ 85.473885][ T5630] bridge_slave_0: entered promiscuous mode [ 85.484418][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.496688][ T5624] Bluetooth: hci0: command tx timeout [ 85.551482][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.558810][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.566110][ T5630] bridge_slave_1: entered allmulticast mode [ 85.573299][ T5630] bridge_slave_1: entered promiscuous mode [ 85.582186][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.655634][ T5624] Bluetooth: hci1: command tx timeout [ 85.665807][ T5624] Bluetooth: hci2: command tx timeout [ 85.685183][ T5622] team0: Port device team_slave_0 added [ 85.716927][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.728282][ T5622] team0: Port device team_slave_1 added [ 85.777729][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.804313][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.811685][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.818927][ T5624] Bluetooth: hci4: command tx timeout [ 85.820291][ T5636] bridge_slave_0: entered allmulticast mode [ 85.831533][ T5624] Bluetooth: hci3: command tx timeout [ 85.838748][ T5636] bridge_slave_0: entered promiscuous mode [ 85.889187][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.896797][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.903971][ T5636] bridge_slave_1: entered allmulticast mode [ 85.911913][ T5636] bridge_slave_1: entered promiscuous mode [ 85.919152][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.926810][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.933928][ T5628] bridge_slave_0: entered allmulticast mode [ 85.941373][ T5628] bridge_slave_0: entered promiscuous mode [ 85.961418][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.968523][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.994521][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.038698][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.046392][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.053538][ T5628] bridge_slave_1: entered allmulticast mode [ 86.062482][ T5628] bridge_slave_1: entered promiscuous mode [ 86.072302][ T5630] team0: Port device team_slave_0 added [ 86.078649][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.085860][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.111984][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.171825][ T5630] team0: Port device team_slave_1 added [ 86.199156][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.206676][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.213833][ T5637] bridge_slave_0: entered allmulticast mode [ 86.221191][ T5637] bridge_slave_0: entered promiscuous mode [ 86.234630][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.256824][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.263784][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.291890][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.303568][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.310912][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.318245][ T5637] bridge_slave_1: entered allmulticast mode [ 86.325667][ T5637] bridge_slave_1: entered promiscuous mode [ 86.335587][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.347357][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.367504][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.374471][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.400874][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.436427][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.510667][ T5622] hsr_slave_0: entered promiscuous mode [ 86.517732][ T5622] hsr_slave_1: entered promiscuous mode [ 86.547031][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.558368][ T5636] team0: Port device team_slave_0 added [ 86.567035][ T5628] team0: Port device team_slave_0 added [ 86.592566][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.603377][ T5636] team0: Port device team_slave_1 added [ 86.611401][ T5628] team0: Port device team_slave_1 added [ 86.748252][ T5630] hsr_slave_0: entered promiscuous mode [ 86.755020][ T5630] hsr_slave_1: entered promiscuous mode [ 86.762617][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 86.768934][ T5630] Cannot create hsr debugfs directory [ 86.796985][ T5637] team0: Port device team_slave_0 added [ 86.803302][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.811446][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.837961][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.852549][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.860429][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.886918][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.916429][ T5637] team0: Port device team_slave_1 added [ 86.939488][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.947015][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.975209][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.996811][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.003907][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.030661][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.104056][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.111163][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.137214][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.184370][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.191599][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.218129][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.330638][ T5636] hsr_slave_0: entered promiscuous mode [ 87.337432][ T5636] hsr_slave_1: entered promiscuous mode [ 87.343578][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 87.349464][ T5636] Cannot create hsr debugfs directory [ 87.361311][ T5628] hsr_slave_0: entered promiscuous mode [ 87.367773][ T5628] hsr_slave_1: entered promiscuous mode [ 87.373958][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 87.379836][ T5628] Cannot create hsr debugfs directory [ 87.476375][ T5637] hsr_slave_0: entered promiscuous mode [ 87.482791][ T5637] hsr_slave_1: entered promiscuous mode [ 87.489254][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 87.495028][ T5637] Cannot create hsr debugfs directory [ 87.575998][ T5624] Bluetooth: hci0: command tx timeout [ 87.735730][ T50] Bluetooth: hci1: command tx timeout [ 87.741413][ T5624] Bluetooth: hci2: command tx timeout [ 87.796635][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.809848][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.845278][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.855804][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.863953][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.877411][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.895699][ T50] Bluetooth: hci4: command tx timeout [ 87.901546][ T5624] Bluetooth: hci3: command tx timeout [ 87.928230][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.939258][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.037079][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.049215][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.060985][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.071263][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.079136][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.090446][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.098818][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.109551][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.195387][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.210782][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.221187][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.232596][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.243712][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.256881][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.264771][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.276206][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.389873][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.401636][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.419992][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.432422][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.449059][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.459928][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.468059][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.478502][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.545340][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.596338][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.608506][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.618592][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.630629][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.639685][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.650743][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.658877][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.668469][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.721891][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.752374][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.765224][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.772724][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.789713][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.796944][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.848929][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.876443][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.932827][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.948815][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.955970][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.973927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.981176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.004994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.012779][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.030683][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.061752][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.068920][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.131232][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.153911][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.177221][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.184418][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.222725][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.229888][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.269736][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.333056][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.340210][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.391143][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.398340][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.660833][ T5624] Bluetooth: hci0: command tx timeout [ 89.818422][ T5624] Bluetooth: hci2: command tx timeout [ 89.824353][ T50] Bluetooth: hci1: command tx timeout [ 89.977947][ T5624] Bluetooth: hci3: command tx timeout [ 89.983929][ T50] Bluetooth: hci4: command tx timeout [ 90.130901][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.622085][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.667841][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.774021][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.861581][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.879939][ T5630] veth0_vlan: entered promiscuous mode [ 90.929576][ T5628] veth0_vlan: entered promiscuous mode [ 90.942229][ T5630] veth1_vlan: entered promiscuous mode [ 90.999638][ T5628] veth1_vlan: entered promiscuous mode [ 91.017487][ T5636] veth0_vlan: entered promiscuous mode [ 91.041117][ T5622] veth0_vlan: entered promiscuous mode [ 91.056809][ T5637] veth0_vlan: entered promiscuous mode [ 91.068605][ T5636] veth1_vlan: entered promiscuous mode [ 91.099066][ T5622] veth1_vlan: entered promiscuous mode [ 91.116745][ T5637] veth1_vlan: entered promiscuous mode [ 91.130454][ T5630] veth0_macvtap: entered promiscuous mode [ 91.153147][ T5630] veth1_macvtap: entered promiscuous mode [ 91.190227][ T5636] veth0_macvtap: entered promiscuous mode [ 91.200948][ T5628] veth0_macvtap: entered promiscuous mode [ 91.218038][ T5628] veth1_macvtap: entered promiscuous mode [ 91.230529][ T5636] veth1_macvtap: entered promiscuous mode [ 91.250827][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.274072][ T5637] veth0_macvtap: entered promiscuous mode [ 91.292570][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.308065][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.319833][ T5622] veth0_macvtap: entered promiscuous mode [ 91.332086][ T5637] veth1_macvtap: entered promiscuous mode [ 91.350236][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.361752][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.372394][ T5622] veth1_macvtap: entered promiscuous mode [ 91.391152][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.406213][ T1181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.428858][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.438232][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.447964][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.458127][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.477445][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.486499][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.500702][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.529689][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.538639][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.548130][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.562233][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.577308][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.586270][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.631907][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.654541][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.688887][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.721969][ T130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.731483][ T130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.740776][ T50] Bluetooth: hci0: command tx timeout [ 91.755304][ T24] cfg80211: failed to load regulatory.db [ 91.784107][ T130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.793879][ T130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.833372][ T130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.842706][ T130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.872598][ T130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.896072][ T5624] Bluetooth: hci1: command tx timeout [ 91.901554][ T50] Bluetooth: hci2: command tx timeout [ 91.913979][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.929210][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.933984][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.954312][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.008638][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.017494][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.056768][ T5624] Bluetooth: hci3: command tx timeout [ 92.062229][ T50] Bluetooth: hci4: command tx timeout [ 92.072730][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.085002][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.155779][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.173685][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.191568][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.211761][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.228292][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.286224][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.319340][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.381232][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.410994][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.463006][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.484211][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.623870][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.662431][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.022995][ T5832] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6'. [ 93.054852][ T5832] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 93.090198][ T5835] syzkaller1: entered promiscuous mode [ 93.103688][ T5835] syzkaller1: entered allmulticast mode [ 93.164358][ T5835] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 93.194028][ T5835] syzkaller1: left promiscuous mode [ 93.207977][ T5835] syzkaller1: left allmulticast mode [ 93.497962][ T5848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'. [ 93.815412][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 93.845995][ T5857] openvswitch: netlink: Missing key (keys=40, expected=80) [ 93.966331][ T5861] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 94.431121][ T5879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19'. [ 94.574335][ T5883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.703435][ T5877] netlink: 280 bytes leftover after parsing attributes in process `syz.1.15'. [ 94.890032][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 95.164065][ T5891] netlink: 'syz.4.21': attribute type 12 has an invalid length. [ 95.211570][ T5894] netlink: 2 bytes leftover after parsing attributes in process `syz.1.23'. [ 95.544313][ T5907] warning: `syz.1.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.880128][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 95.897372][ T5916] tc_dump_action: action bad kind [ 95.991543][ T5916] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 95.991543][ T5916] Please contact the netfilter-devel mailing list or update your nftables rules. [ 96.544396][ T5949] batadv_slave_0: entered promiscuous mode [ 96.563814][ T5943] Zero length message leads to an empty skb [ 96.577695][ T5942] batadv_slave_0: left promiscuous mode [ 97.407905][ T5974] nbd: must specify a size in bytes for the device [ 97.651035][ T5988] xt_cgroup: invalid path, errno=-2 [ 97.791656][ T5993] syzkaller0: entered promiscuous mode [ 97.806277][ T5993] syzkaller0: entered allmulticast mode [ 98.207756][ T6001] syzkaller0: entered promiscuous mode [ 98.230515][ T6001] syzkaller0: entered allmulticast mode [ 98.677315][ T5999] dvmrp0: entered allmulticast mode [ 99.177847][ T6024] batadv0: entered promiscuous mode [ 99.200609][ T6024] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 99.491687][ T6033] __nla_validate_parse: 1 callbacks suppressed [ 99.491705][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 99.511590][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 100.299052][ T6067] netlink: 'syz.1.74': attribute type 1 has an invalid length. [ 100.314303][ T6067] gretap1: entered allmulticast mode [ 102.415243][ T6039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.689869][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.77'. [ 102.763919][ T6083] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 102.802596][ T6084] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.338985][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 104.088979][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.91'. [ 104.151121][ T6128] ip6tnl1: entered allmulticast mode [ 104.188743][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.508532][ T6152] syzkaller0: entered promiscuous mode [ 104.527786][ T6152] syzkaller0: entered allmulticast mode [ 104.753231][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.96'. [ 104.787360][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 104.864648][ T6165] bridge_slave_0: left allmulticast mode [ 104.897756][ T6165] bridge_slave_0: left promiscuous mode [ 104.927657][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.959198][ T6165] bridge_slave_1: left allmulticast mode [ 104.965001][ T6165] bridge_slave_1: left promiscuous mode [ 104.981893][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.992175][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 105.013757][ T6165] bond0: (slave bond_slave_0): Releasing backup interface [ 105.026545][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 105.068269][ T6165] bond0: (slave bond_slave_1): Releasing backup interface [ 105.098767][ T6165] team0: Port device team_slave_0 removed [ 105.139179][ T6165] team0: Port device team_slave_1 removed [ 105.164209][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.192349][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.222779][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.243395][ T6165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.267732][ T6165] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.393822][ T6170] team0: Mode changed to "loadbalance" [ 105.400064][ T6182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.100'. [ 105.634477][ T6179] netlink: 732 bytes leftover after parsing attributes in process `syz.0.98'. [ 105.665020][ T6196] tipc: Started in network mode [ 105.695647][ T6179] netlink: 732 bytes leftover after parsing attributes in process `syz.0.98'. [ 105.709559][ T6196] tipc: Node identity 6edb0570f6af, cluster identity 4711 [ 105.751982][ T6196] tipc: Enabled bearer , priority 0 [ 105.795429][ T6206] syzkaller0: entered promiscuous mode [ 105.832539][ T6206] syzkaller0: entered allmulticast mode [ 105.861221][ T6193] tipc: Enabling of bearer rejected, already enabled [ 105.988041][ T6193] tipc: Resetting bearer [ 106.022353][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 106.056665][ T6193] tipc: Disabling bearer [ 107.989862][ T6295] batadv_slave_1: entered promiscuous mode [ 108.013883][ T6294] batadv_slave_1: left promiscuous mode [ 108.531104][ T6318] netlink: 'syz.3.126': attribute type 1 has an invalid length. [ 108.554706][ T6318] netlink: 224 bytes leftover after parsing attributes in process `syz.3.126'. [ 108.761993][ T6322] syzkaller0: entered promiscuous mode [ 108.807322][ T6322] syzkaller0: entered allmulticast mode [ 109.241537][ T6350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 109.413170][ T6358] netlink: 'syz.2.133': attribute type 23 has an invalid length. [ 109.441963][ T6358] netlink: 'syz.2.133': attribute type 21 has an invalid length. [ 109.484282][ T6358] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.589147][ T30] audit: type=1804 audit(1784166156.635:2): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.135" name="/newroot/27/memory.events" dev="tmpfs" ino=155 res=1 errno=0 [ 109.685585][ T30] audit: type=1800 audit(1784166156.635:3): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="memory.events" dev="tmpfs" ino=155 res=0 errno=0 [ 109.733049][ T1020] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.754407][ T1020] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.774835][ T6377] __nla_validate_parse: 2 callbacks suppressed [ 109.774854][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 109.799279][ T1020] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.817382][ T1020] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.951424][ T6377] gretap0: entered promiscuous mode [ 110.021002][ T6377] tipc: Started in network mode [ 110.032693][ T6377] tipc: Node identity 76cf95bfd2dd, cluster identity 4711 [ 110.040722][ T6377] tipc: Enabled bearer , priority 0 [ 110.048862][ T6377] syzkaller0: entered promiscuous mode [ 110.054507][ T6377] syzkaller0: entered allmulticast mode [ 110.147604][ T6379] tipc: Resetting bearer [ 110.304794][ T6374] tipc: Resetting bearer [ 110.375033][ T6374] tipc: Disabling bearer [ 110.839176][ T6408] bridge_slave_0: left allmulticast mode [ 110.859364][ T6408] bridge_slave_0: left promiscuous mode [ 110.906518][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.944312][ T6408] bridge_slave_1: left allmulticast mode [ 110.957036][ T6408] bridge_slave_1: left promiscuous mode [ 110.965295][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.989728][ T6408] bond0: (slave bond_slave_0): Releasing backup interface [ 111.002728][ T6408] bond0: (slave bond_slave_1): Releasing backup interface [ 111.030976][ T6408] team0: Port device team_slave_0 removed [ 111.045358][ T6408] team0: Port device team_slave_1 removed [ 111.057023][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.064738][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.074911][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.084299][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.094666][ T6408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.403787][ T6429] netlink: 'syz.4.149': attribute type 4 has an invalid length. [ 111.428312][ T6429] netlink: 'syz.4.149': attribute type 5 has an invalid length. [ 111.464831][ T6429] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.149'. [ 111.837016][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 111.855800][ T6447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'. [ 112.069767][ T6466] sctp: [Deprecated]: syz.0.159 (pid 6466) Use of int in max_burst socket option. [ 112.069767][ T6466] Use struct sctp_assoc_value instead [ 112.299935][ T6471] netlink: 'syz.2.161': attribute type 7 has an invalid length. [ 112.340668][ T6472] openvswitch: netlink: Duplicate or invalid key (type 0). [ 112.348825][ T6471] netlink: 'syz.2.161': attribute type 7 has an invalid length. [ 112.372899][ T6472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.473241][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 113.044195][ T6507] Bluetooth: MGMT ver 1.23 [ 113.570023][ T6538] netlink: 52 bytes leftover after parsing attributes in process `syz.3.176'. [ 113.623803][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 113.686094][ T6524] syzkaller0: entered promiscuous mode [ 113.698429][ T6524] syzkaller0: entered allmulticast mode [ 113.752230][ T1181] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.770767][ T1181] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.791003][ T6544] netlink: 'syz.0.178': attribute type 4 has an invalid length. [ 113.879619][ T6549] netlink: 'syz.0.178': attribute type 4 has an invalid length. [ 113.922706][ T1181] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 113.955191][ T1181] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 114.292269][ T6566] Cannot find set identified by id 0 to match [ 114.299050][ T6564] netlink: 80 bytes leftover after parsing attributes in process `syz.3.182'. [ 114.464826][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 114.713308][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 114.928566][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.888815][ T6599] nbd: must specify at least one socket [ 115.974150][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.194'. [ 116.129473][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 116.255612][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 116.352437][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'. [ 116.469223][ T6634] x_tables: duplicate underflow at hook 2 [ 116.518396][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 116.529823][ T6634] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 116.677930][ T6636] bond2 (unregistering): Released all slaves [ 116.707171][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.200'. [ 116.844827][ T6645] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 119.115405][ T6608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.404013][ T6659] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 119.445346][ T6659] nbd: error processing sock list [ 119.679297][ T6679] syzkaller0: entered promiscuous mode [ 119.720930][ T6679] syzkaller0: entered allmulticast mode [ 119.804686][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.210'. [ 119.953867][ T6694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.213'. [ 120.042944][ T6699] netlink: 64 bytes leftover after parsing attributes in process `syz.0.212'. [ 120.525156][ T6715] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 120.965758][ T6710] syzkaller0: entered promiscuous mode [ 120.998706][ T6710] syzkaller0: entered allmulticast mode [ 121.042003][ T6710] tipc: Enabled bearer , priority 0 [ 121.095162][ T6707] tipc: Resetting bearer [ 121.219433][ T6707] tipc: Disabling bearer [ 121.324525][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 121.578062][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 121.627436][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 122.509342][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'. [ 122.567227][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 122.830122][ T6796] netlink: 108 bytes leftover after parsing attributes in process `syz.0.239'. [ 122.933423][ T6805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 122.973851][ T6805] openvswitch: netlink: Flow key attr not present in new flow. [ 123.003423][ T6807] netlink: 'syz.2.242': attribute type 29 has an invalid length. [ 123.086116][ T6812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 123.369911][ T6824] netlink: 'syz.3.247': attribute type 11 has an invalid length. [ 123.387436][ T6824] netlink: 'syz.3.247': attribute type 4 has an invalid length. [ 123.405433][ T6824] netlink: 224 bytes leftover after parsing attributes in process `syz.3.247'. [ 123.546448][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.248'. [ 123.932753][ T6847] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 123.960808][ T6847] netlink: 224 bytes leftover after parsing attributes in process `syz.1.253'. [ 124.020077][ T6854] netlink: 'syz.2.257': attribute type 4 has an invalid length. [ 124.180813][ T6862] tipc: Enabled bearer , priority 0 [ 124.209604][ T6862] syzkaller0: entered promiscuous mode [ 124.248060][ T6862] syzkaller0: entered allmulticast mode [ 124.441926][ T6868] tipc: Resetting bearer [ 124.493777][ T6868] tipc: Disabling bearer [ 124.635959][ T6877] block nbd0: server does not support multiple connections per device. [ 124.673150][ T6877] block nbd0: shutting down sockets [ 124.879037][ T6880] syzkaller1: entered promiscuous mode [ 124.895614][ T6880] syzkaller1: entered allmulticast mode [ 124.998463][ T6890] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 125.025813][ T6891] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 125.202258][ T6890] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 125.211502][ T6891] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 126.289843][ T6950] openvswitch: netlink: Missing key (keys=40, expected=80) [ 126.316384][ T6952] netlink: 'syz.4.280': attribute type 4 has an invalid length. [ 126.330603][ T6952] netlink: 'syz.4.280': attribute type 8 has an invalid length. [ 126.339057][ T6952] __nla_validate_parse: 7 callbacks suppressed [ 126.339072][ T6952] netlink: 212 bytes leftover after parsing attributes in process `syz.4.280'. [ 126.380873][ T6957] netlink: 64 bytes leftover after parsing attributes in process `syz.1.281'. [ 126.598358][ T6952] dvmrp0: entered allmulticast mode [ 127.419262][ T7002] veth2: entered allmulticast mode [ 128.177861][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.298'. [ 128.438797][ T7042] tipc: Started in network mode [ 128.464554][ T7042] tipc: Node identity 1a3d197e2936, cluster identity 4711 [ 128.500494][ T7042] tipc: Enabled bearer , priority 0 [ 128.519158][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 128.552303][ T7042] syzkaller0: entered promiscuous mode [ 128.561915][ T7044] openvswitch: netlink: Missing key (keys=40, expected=80) [ 128.565863][ T7042] syzkaller0: entered allmulticast mode [ 128.602194][ T7047] tipc: Started in network mode [ 128.611261][ T7047] tipc: Node identity 663d05e004c, cluster identity 4711 [ 128.627333][ T7047] tipc: Enabled bearer , priority 0 [ 128.658950][ T7050] netlink: 'syz.1.304': attribute type 21 has an invalid length. [ 128.869275][ T7051] syzkaller0: entered promiscuous mode [ 128.880677][ T7051] syzkaller0: entered allmulticast mode [ 128.892526][ T7051] tipc: Resetting bearer [ 128.912279][ T7050] netlink: 132 bytes leftover after parsing attributes in process `syz.1.304'. [ 128.940078][ T7052] tipc: Resetting bearer [ 129.069270][ T7046] tipc: Resetting bearer [ 129.555866][ T7068] netlink: 64 bytes leftover after parsing attributes in process `syz.3.309'. [ 130.495778][ T7046] tipc: Disabling bearer [ 130.507024][ T7040] tipc: Resetting bearer [ 130.524224][ T7040] tipc: Disabling bearer [ 130.536868][ T24] tipc: Node number set to 856365438 [ 130.544072][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 130.553440][ T3111] tipc: Node number set to 1660749280 [ 130.791886][ T7082] tipc: Enabled bearer , priority 0 [ 130.809928][ T7087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.992394][ T7089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.312'. [ 131.223129][ T7073] tipc: Disabling bearer [ 131.353357][ T7094] x_tables: unsorted underflow at hook 3 [ 131.689858][ T7109] syzkaller0: entered promiscuous mode [ 131.720989][ T7109] syzkaller0: entered allmulticast mode [ 131.737692][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'. [ 131.753431][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 131.762119][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 131.774112][ T7113] netlink: 'syz.3.321': attribute type 10 has an invalid length. [ 131.788104][ T7113] netlink: 'syz.3.321': attribute type 8 has an invalid length. [ 131.802126][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 131.819033][ T9] IPVS: starting estimator thread 0... [ 131.904781][ T24] IPVS: starting estimator thread 0... [ 131.925587][ T7119] IPVS: using max 30 ests per chain, 72000 per kthread [ 131.936768][ T7113] geneve2: entered promiscuous mode [ 131.988177][ T7113] geneve2: entered allmulticast mode [ 132.005641][ T7124] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.040695][ T7129] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 132.048905][ T7129] netlink: 224 bytes leftover after parsing attributes in process `syz.4.326'. [ 132.073687][ T7112] vlan2: entered promiscuous mode [ 132.085251][ T7112] bridge0: entered promiscuous mode [ 132.143877][ T7132] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 132.155820][ T7132] netlink: 200 bytes leftover after parsing attributes in process `syz.0.327'. [ 132.207656][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.216060][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.305264][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 132.366639][ T7143] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 132.377754][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.392924][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.514249][ T7118] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 132.545148][ T7118] vlan2: left promiscuous mode [ 132.555230][ T7118] bridge0: left promiscuous mode [ 132.699486][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.713914][ T7149] netlink: 64 bytes leftover after parsing attributes in process `syz.1.331'. [ 132.887894][ T7143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.911393][ T7143] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 132.922043][ T68] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.933947][ T68] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.980896][ T68] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.161876][ T7163] netlink: 404 bytes leftover after parsing attributes in process `syz.0.334'. [ 133.197668][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'. [ 133.640176][ T7190] IPVS: Scheduler module ip_vs_sip not found [ 133.744889][ T7197] pim6reg: entered allmulticast mode [ 136.557563][ T7194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.796785][ T7231] __nla_validate_parse: 3 callbacks suppressed [ 136.796804][ T7231] netlink: 616 bytes leftover after parsing attributes in process `syz.2.354'. [ 136.890534][ T7232] netlink: 'syz.2.354': attribute type 21 has an invalid length. [ 136.913614][ T7240] sctp: [Deprecated]: syz.0.357 (pid 7240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.913614][ T7240] Use struct sctp_sack_info instead [ 136.924674][ T7232] netlink: 128 bytes leftover after parsing attributes in process `syz.2.354'. [ 136.961509][ T7232] netlink: 3 bytes leftover after parsing attributes in process `syz.2.354'. [ 137.504254][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.365'. [ 137.760549][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 137.958040][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 138.274755][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'. [ 138.407993][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.375'. [ 138.426328][ T7306] block nbd0: not configured, cannot reconfigure [ 138.647209][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.375'. [ 138.703213][ T7313] bond0: entered promiscuous mode [ 138.736929][ T7313] bond_slave_0: entered promiscuous mode [ 138.769086][ T7313] bond_slave_1: entered promiscuous mode [ 138.818005][ T7313] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 138.825928][ T7313] bond0: entered allmulticast mode [ 138.831200][ T7313] bond_slave_0: entered allmulticast mode [ 138.837459][ T7313] bond_slave_1: entered allmulticast mode [ 138.843338][ T7313] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 139.306416][ T7327] vlan2: entered promiscuous mode [ 139.312513][ T7327] bond0: entered promiscuous mode [ 139.320102][ T7327] bond_slave_0: entered promiscuous mode [ 139.326214][ T7327] bond_slave_1: entered promiscuous mode [ 139.440849][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 139.541353][ T7350] xfrm0: entered allmulticast mode [ 139.599346][ T7350] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 139.911018][ T7358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.978497][ T7358] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.395173][ T7383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.411010][ T7386] openvswitch: netlink: Missing key (keys=40, expected=80) [ 140.823508][ T7396] netlink: 'syz.4.402': attribute type 2 has an invalid length. [ 140.860180][ T7396] Bluetooth: MGMT ver 1.23 [ 141.226387][ T7405] nbd0: detected capacity change from 0 to 1 [ 141.242066][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.249397][ T5624] block nbd0: Receive control failed (result -32) [ 141.259282][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.292046][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.318247][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.369284][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.412938][ T5817] ldm_validate_partition_table(): Disk read failed. [ 141.447134][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.485074][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.527321][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.545301][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.567717][ T5817] Dev nbd0: unable to read RDB block 0 [ 141.588637][ T5817] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.614223][ T5817] nbd0: unable to read partition table [ 141.642137][ T5817] nbd0: partition table beyond EOD, truncated [ 141.901985][ T7435] sctp: [Deprecated]: syz.3.413 (pid 7435) Use of int in max_burst socket option. [ 141.901985][ T7435] Use struct sctp_assoc_value instead [ 142.275044][ T7462] batadv_slave_1: entered promiscuous mode [ 142.348102][ T7460] batadv_slave_1: left promiscuous mode [ 142.676972][ T7485] __nla_validate_parse: 7 callbacks suppressed [ 142.676992][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 142.936143][ T5624] Bluetooth: hci2: command 0x0401 tx timeout [ 142.942690][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 143.219057][ T7510] netlink: 'syz.3.434': attribute type 1 has an invalid length. [ 143.364768][ T7510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.545381][ T7535] Cannot find del_set index 3 as target [ 143.626531][ T7530] syzkaller0: entered promiscuous mode [ 143.652296][ T7530] syzkaller0: entered allmulticast mode [ 143.897382][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.443'. [ 143.940104][ T7553] geneve2: entered promiscuous mode [ 144.178544][ T7561] syzkaller0: entered promiscuous mode [ 144.189993][ T7561] syzkaller0: entered allmulticast mode [ 144.254906][ T5754] bridge0: entered promiscuous mode [ 144.293887][ T7563] netlink: 'syz.0.447': attribute type 3 has an invalid length. [ 144.325735][ T7563] netlink: 'syz.0.447': attribute type 3 has an invalid length. [ 144.407405][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 144.417570][ T7576] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 144.426568][ T7577] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 144.467125][ T7563] netlink: 16 bytes leftover after parsing attributes in process `syz.0.447'. [ 144.601874][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.453'. [ 144.830980][ T7596] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.848715][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.4.459'. [ 145.017552][ T4939] block nbd1: Receive control failed (result -32) [ 145.027843][ T50] block nbd1: Receive control failed (result -32) [ 145.027843][ T5624] block nbd1: Receive control failed (result -32) [ 145.285788][ T7625] netlink: 'syz.3.465': attribute type 5 has an invalid length. [ 145.348691][ T7625] netlink: 'syz.3.465': attribute type 5 has an invalid length. [ 145.559283][ T7638] x_tables: duplicate underflow at hook 1 [ 146.036835][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.477'. [ 146.106002][ T7665] ip6gre1: entered promiscuous mode [ 146.125441][ T7665] ip6gre1: entered allmulticast mode [ 146.460722][ T7692] bridge3: entered promiscuous mode [ 146.479803][ T7692] bridge3: entered allmulticast mode [ 146.516076][ T7692] team0: Port device bridge3 added [ 146.633409][ T7703] netlink: 324 bytes leftover after parsing attributes in process `syz.1.488'. [ 146.735361][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.761906][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.775103][ T5754] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.789622][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 146.815554][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 146.841151][ T7714] netlink: 'syz.4.492': attribute type 62 has an invalid length. [ 146.876201][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.989275][ T7714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.027532][ T7721] syzkaller0: entered promiscuous mode [ 147.045192][ T7721] syzkaller0: entered allmulticast mode [ 147.077092][ T7721] openvswitch: netlink: Multiple metadata blocks provided [ 147.258552][ T7728] sctp: [Deprecated]: syz.4.495 (pid 7728) Use of int in max_burst socket option deprecated. [ 147.258552][ T7728] Use struct sctp_assoc_value instead [ 147.392076][ T7734] ip6erspan1: entered allmulticast mode [ 147.656163][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.692149][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 147.964954][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 148.343783][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 148.402754][ T7768] IPVS: sed: FWM 3 0x00000003 - no destination available [ 148.410438][ T10] IPVS: starting estimator thread 0... [ 148.516400][ T7769] IPVS: using max 25 ests per chain, 60000 per kthread [ 148.578222][ T7773] tipc: Failed to remove unknown binding: 66,0,0/856365438:3389568925/3389568926 [ 148.619758][ T7773] tipc: Failed to remove unknown binding: 66,0,0/856365438:3389568925/3389568926 [ 148.828810][ T7779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.508'. [ 148.845105][ T7779] netlink: 240 bytes leftover after parsing attributes in process `syz.2.508'. [ 149.105778][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 149.224734][ T7790] bond2: Invalid ad_actor_system MAC address. [ 149.253891][ T7790] bond2: option ad_actor_system: invalid value (7) [ 149.283279][ T7790] bond2 (unregistering): Released all slaves [ 149.301702][ T7802] netlink: 48 bytes leftover after parsing attributes in process `syz.3.514'. [ 149.713269][ T7819] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.863638][ T7828] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003 [ 149.916553][ T7828] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003 [ 149.940817][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 150.148105][ T7843] netdevsim netdevsim0 €Â: renamed from netdevsim0 (while UP) [ 150.304420][ T7854] netlink: 96 bytes leftover after parsing attributes in process `syz.4.524'. [ 150.720881][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.753111][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.834340][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.015878][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 151.089824][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 151.118693][ T7880] team0: No ports can be present during mode change [ 151.194370][ T7880] tipc: Enabled bearer , priority 0 [ 151.201278][ T7889] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 151.210190][ T7890] syzkaller0: entered promiscuous mode [ 151.226585][ T7890] syzkaller0: entered allmulticast mode [ 152.316149][ T5754] tipc: Node number set to 2557740400 [ 152.434053][ T7942] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 152.475445][ T7945] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 152.504972][ T7942] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 152.717724][ T7953] __nla_validate_parse: 5 callbacks suppressed [ 152.717745][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 152.749891][ T7955] netlink: 20 bytes leftover after parsing attributes in process `syz.1.550'. [ 152.778506][ T7954] netlink: 'syz.3.552': attribute type 4 has an invalid length. [ 152.830147][ T7959] netlink: 'syz.3.552': attribute type 4 has an invalid length. [ 153.024656][ T7967] netlink: 48 bytes leftover after parsing attributes in process `syz.0.553'. [ 153.365170][ T7982] syzkaller0: entered promiscuous mode [ 153.370844][ T7982] syzkaller0: entered allmulticast mode [ 153.487219][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 154.060965][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 154.464470][ T7993] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 154.589965][ T8026] syzkaller0: entered promiscuous mode [ 154.613932][ T8026] syzkaller0: entered allmulticast mode [ 154.667572][ T8029] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 154.713690][ T8029] netlink: 236 bytes leftover after parsing attributes in process `syz.1.574'. [ 155.056638][ T7993] openvswitch: netlink: Message has 4 unknown bytes. [ 155.107606][ T8039] netlink: 108 bytes leftover after parsing attributes in process `syz.3.563'. [ 155.305071][ T8040] bond3: option min_links: invalid value (18446744073709551612) [ 155.353253][ T8040] bond3: option min_links: allowed values 0 - 2147483647 [ 155.375080][ T8040] bond3 (unregistering): Released all slaves [ 155.462190][ T7993] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 156.261061][ T8089] netlink: 100 bytes leftover after parsing attributes in process `syz.4.590'. [ 156.512510][ T8099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.594'. [ 156.661407][ T8104] netlink: 84 bytes leftover after parsing attributes in process `syz.3.596'. [ 156.703642][ T8107] netlink: 'syz.4.599': attribute type 21 has an invalid length. [ 156.795300][ T8105] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 156.898640][ T8113] bridge0: port 1(syz_tun) entered blocking state [ 156.924157][ T8113] bridge0: port 1(syz_tun) entered disabled state [ 156.944868][ T8113] syz_tun: entered allmulticast mode [ 156.961609][ T8117] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 156.969682][ T8113] syz_tun: entered promiscuous mode [ 156.977317][ T8113] bridge0: port 1(syz_tun) entered blocking state [ 156.984474][ T8113] bridge0: port 1(syz_tun) entered forwarding state [ 157.071253][ T8121] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 157.154595][ T8117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.189539][ T8113] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 157.628578][ T8133] hsr_slave_1 (unregistering): left promiscuous mode [ 157.641925][ T8140] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 157.688240][ T8140] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 157.703262][ T8138] fb: renamed from bridge0 (while UP) [ 157.894837][ T8150] bridge_slave_0: left allmulticast mode [ 157.926549][ T8150] bridge_slave_0: left promiscuous mode [ 157.932530][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.946163][ T8150] bridge_slave_1: left allmulticast mode [ 157.951999][ T8150] bridge_slave_1: left promiscuous mode [ 157.957921][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.971114][ T8150] bond0: (slave bond_slave_0): Releasing backup interface [ 157.980962][ T8150] bond_slave_0: left promiscuous mode [ 157.992318][ T8150] bond0: (slave bond_slave_1): Releasing backup interface [ 158.002460][ T8150] bond_slave_1: left promiscuous mode [ 158.018056][ T8150] team0: Port device team_slave_0 removed [ 158.031317][ T8150] team0: Port device team_slave_1 removed [ 158.038754][ T8150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.046797][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.056551][ T8150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.064078][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.073770][ T8150] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.383362][ T8171] __nla_validate_parse: 4 callbacks suppressed [ 158.383380][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 158.421967][ T8172] sctp: [Deprecated]: syz.0.617 (pid 8172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.421967][ T8172] Use struct sctp_sack_info instead [ 158.477794][ T8174] netlink: 76 bytes leftover after parsing attributes in process `syz.1.619'. [ 158.488724][ T8174] syzkaller0: entered promiscuous mode [ 158.494408][ T8174] syzkaller0: entered allmulticast mode [ 158.559743][ T8176] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 158.597815][ T8176] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.687895][ T8181] netlink: 44 bytes leftover after parsing attributes in process `syz.4.620'. [ 158.747343][ T8176] vlan2: entered promiscuous mode [ 158.770041][ T8176] bond4: entered promiscuous mode [ 158.785716][ T8176] vlan2: entered allmulticast mode [ 158.800770][ T8187] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 158.813322][ T8176] bond4: entered allmulticast mode [ 158.894658][ T8181] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.948641][ T8181] bond4: (slave batadv1): making interface the new active one [ 158.984318][ T8181] batadv1: entered promiscuous mode [ 158.993682][ T8199] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 159.017776][ T8181] batadv1: entered allmulticast mode [ 159.046429][ T8181] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 159.258810][ T8199] x_tables: duplicate underflow at hook 2 [ 159.575744][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.438305][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 160.564708][ T8257] ip6tnl1: entered allmulticast mode [ 160.604631][ T1170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 160.725108][ T8271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.648'. [ 161.430434][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.656'. [ 161.505141][ T8314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 161.761872][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.663'. [ 161.771447][ T8325] openvswitch: netlink: Flow actions attr not present in new flow. [ 162.277548][ T8348] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 162.284519][ T8348] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20003 [ 162.318631][ T8348] BUG: Bad page state in process syz.2.670 pfn:74e18 [ 162.325561][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x74e18 [ 162.335729][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.343215][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 162.351875][ T8348] raw: ffff888000000000 3fffffffffffffff 00000000ffffffff 0000000000000000 [ 162.360530][ T8348] page dumped because: page_pool leak [ 162.365984][ T8348] page_owner tracks the page as allocated [ 162.372764][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318506225, free_ts 162186008960 [ 162.390492][ T8348] post_alloc_hook+0x1f9/0x250 [ 162.395350][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 162.401338][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 162.407281][ T8348] __alloc_pages_noprof+0x10/0x100 [ 162.412435][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 162.418157][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 162.424274][ T8348] page_pool_alloc_frag_netmem+0x563/0x9b0 [ 162.430168][ T8348] skb_pp_cow_data+0xcf6/0x19a0 [ 162.435114][ T8348] do_xdp_generic+0x770/0x12d0 [ 162.439980][ T8348] tun_get_user+0x24f8/0x4370 [ 162.444714][ T8348] tun_chr_write_iter+0x113/0x200 [ 162.449839][ T8348] vfs_write+0x612/0xba0 [ 162.454131][ T8348] ksys_write+0x150/0x270 [ 162.458578][ T8348] do_syscall_64+0x174/0x580 [ 162.463231][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.469228][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 162.475628][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 162.480801][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 162.486019][ T8348] rcu_core+0x78b/0x10a0 [ 162.490331][ T8348] handle_softirqs+0x225/0x840 [ 162.495149][ T8348] __irq_exit_rcu+0xca/0x220 [ 162.499832][ T8348] irq_exit_rcu+0x9/0x30 [ 162.504117][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 162.509849][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.515914][ T8348] Modules linked in: [ 162.519870][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Not tainted syzkaller #0 PREEMPT(full) [ 162.519898][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 162.519922][ T8348] Call Trace: [ 162.519931][ T8348] [ 162.519941][ T8348] dump_stack_lvl+0xe8/0x150 [ 162.519979][ T8348] bad_page+0x17f/0x1c0 [ 162.520003][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 162.520042][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 162.520091][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 162.520131][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 162.520158][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 162.520212][ T8348] do_xdp_generic+0xac2/0x12d0 [ 162.520237][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 162.520268][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 162.520300][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 162.520338][ T8348] ? tun_get_user+0x23cb/0x4370 [ 162.520385][ T8348] ? tun_get_user+0x23cb/0x4370 [ 162.520414][ T8348] tun_get_user+0x24f8/0x4370 [ 162.520462][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 162.520491][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 162.520515][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 162.520548][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 162.520582][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 162.520610][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 162.520646][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 162.520678][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.520708][ T8348] ? tun_get+0x1c/0x2f0 [ 162.520751][ T8348] ? tun_get+0x1c/0x2f0 [ 162.520788][ T8348] ? tun_get+0x1c/0x2f0 [ 162.520816][ T8348] ? tun_get+0x1c/0x2f0 [ 162.520850][ T8348] tun_chr_write_iter+0x113/0x200 [ 162.520883][ T8348] vfs_write+0x612/0xba0 [ 162.520926][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 162.520971][ T8348] ? __fget_files+0x2a/0x420 [ 162.521011][ T8348] ksys_write+0x150/0x270 [ 162.521048][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 162.521091][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.521116][ T8348] do_syscall_64+0x174/0x580 [ 162.521151][ T8348] ? clear_bhb_loop+0x40/0x90 [ 162.521178][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.521201][ T8348] RIP: 0033:0x7f249555e68e [ 162.521222][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.521240][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.521263][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 162.521279][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 162.521293][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 162.521307][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.521319][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 162.521355][ T8348] [ 162.521364][ T8348] Disabling lock debugging due to kernel taint [ 162.806315][ T8348] BUG: Bad page state in process syz.2.670 pfn:749af [ 162.813108][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x749af [ 162.823244][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.830426][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 162.839086][ T8348] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 162.847722][ T8348] page dumped because: page_pool leak [ 162.853116][ T8348] page_owner tracks the page as allocated [ 162.858910][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318490831, free_ts 162186029493 [ 162.875918][ T8348] post_alloc_hook+0x1f9/0x250 [ 162.880740][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 162.886383][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 162.892238][ T8348] __alloc_pages_noprof+0x10/0x100 [ 162.897436][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 162.902939][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 162.909089][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 162.913989][ T8348] do_xdp_generic+0x770/0x12d0 [ 162.918820][ T8348] tun_get_user+0x24f8/0x4370 [ 162.923544][ T8348] tun_chr_write_iter+0x113/0x200 [ 162.928641][ T8348] vfs_write+0x612/0xba0 [ 162.932957][ T8348] ksys_write+0x150/0x270 [ 162.937372][ T8348] do_syscall_64+0x174/0x580 [ 162.942007][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.947986][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 162.954347][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 162.959573][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 162.964735][ T8348] rcu_core+0x78b/0x10a0 [ 162.969058][ T8348] handle_softirqs+0x225/0x840 [ 162.973911][ T8348] __irq_exit_rcu+0xca/0x220 [ 162.978586][ T8348] irq_exit_rcu+0x9/0x30 [ 162.982874][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 162.988593][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.994616][ T8348] Modules linked in: [ 162.998601][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 162.998634][ T8348] Tainted: [B]=BAD_PAGE [ 162.998642][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 162.998655][ T8348] Call Trace: [ 162.998664][ T8348] [ 162.998672][ T8348] dump_stack_lvl+0xe8/0x150 [ 162.998717][ T8348] bad_page+0x17f/0x1c0 [ 162.998739][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 162.998771][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 162.998805][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 162.998839][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 162.998859][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 162.998896][ T8348] do_xdp_generic+0xac2/0x12d0 [ 162.998919][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 162.998949][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 162.998974][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 162.999003][ T8348] ? tun_get_user+0x23cb/0x4370 [ 162.999039][ T8348] ? tun_get_user+0x23cb/0x4370 [ 162.999066][ T8348] tun_get_user+0x24f8/0x4370 [ 162.999102][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 162.999127][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 162.999149][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 162.999178][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 162.999207][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 162.999233][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 162.999265][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 162.999293][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.999318][ T8348] ? tun_get+0x1c/0x2f0 [ 162.999345][ T8348] ? tun_get+0x1c/0x2f0 [ 162.999375][ T8348] ? tun_get+0x1c/0x2f0 [ 162.999401][ T8348] ? tun_get+0x1c/0x2f0 [ 162.999432][ T8348] tun_chr_write_iter+0x113/0x200 [ 162.999479][ T8348] vfs_write+0x612/0xba0 [ 162.999517][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 162.999554][ T8348] ? __fget_files+0x2a/0x420 [ 162.999587][ T8348] ksys_write+0x150/0x270 [ 162.999622][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 162.999660][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.999684][ T8348] do_syscall_64+0x174/0x580 [ 162.999734][ T8348] ? clear_bhb_loop+0x40/0x90 [ 162.999759][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.999781][ T8348] RIP: 0033:0x7f249555e68e [ 162.999799][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.999817][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.999840][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 162.999856][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 162.999870][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 162.999884][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.999897][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 162.999923][ T8348] [ 162.999934][ T8348] BUG: Bad page state in process syz.2.670 pfn:28549 [ 163.290967][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x28549 [ 163.301102][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 163.308288][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 163.316937][ T8348] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 163.325602][ T8348] page dumped because: page_pool leak [ 163.330997][ T8348] page_owner tracks the page as allocated [ 163.336788][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318476954, free_ts 162186066827 [ 163.353796][ T8348] post_alloc_hook+0x1f9/0x250 [ 163.358649][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 163.364238][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 163.370115][ T8348] __alloc_pages_noprof+0x10/0x100 [ 163.375263][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 163.380776][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 163.386907][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 163.391795][ T8348] do_xdp_generic+0x770/0x12d0 [ 163.396611][ T8348] tun_get_user+0x24f8/0x4370 [ 163.401337][ T8348] tun_chr_write_iter+0x113/0x200 [ 163.406425][ T8348] vfs_write+0x612/0xba0 [ 163.410735][ T8348] ksys_write+0x150/0x270 [ 163.415077][ T8348] do_syscall_64+0x174/0x580 [ 163.419732][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.425685][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 163.432022][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 163.437196][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 163.442360][ T8348] rcu_core+0x78b/0x10a0 [ 163.446669][ T8348] handle_softirqs+0x225/0x840 [ 163.451493][ T8348] __irq_exit_rcu+0xca/0x220 [ 163.456173][ T8348] irq_exit_rcu+0x9/0x30 [ 163.460448][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 163.466190][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.472203][ T8348] Modules linked in: [ 163.476151][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 163.476182][ T8348] Tainted: [B]=BAD_PAGE [ 163.476190][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 163.476203][ T8348] Call Trace: [ 163.476211][ T8348] [ 163.476219][ T8348] dump_stack_lvl+0xe8/0x150 [ 163.476254][ T8348] bad_page+0x17f/0x1c0 [ 163.476277][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 163.476309][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 163.476348][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 163.476385][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 163.476405][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 163.476445][ T8348] do_xdp_generic+0xac2/0x12d0 [ 163.476469][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 163.476500][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 163.476527][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 163.476557][ T8348] ? tun_get_user+0x23cb/0x4370 [ 163.476596][ T8348] ? tun_get_user+0x23cb/0x4370 [ 163.476625][ T8348] tun_get_user+0x24f8/0x4370 [ 163.476663][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 163.476699][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 163.476722][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 163.476753][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 163.476785][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 163.476812][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 163.476846][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 163.476875][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 163.476903][ T8348] ? tun_get+0x1c/0x2f0 [ 163.476931][ T8348] ? tun_get+0x1c/0x2f0 [ 163.476962][ T8348] ? tun_get+0x1c/0x2f0 [ 163.476990][ T8348] ? tun_get+0x1c/0x2f0 [ 163.477020][ T8348] tun_chr_write_iter+0x113/0x200 [ 163.477051][ T8348] vfs_write+0x612/0xba0 [ 163.477088][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 163.477127][ T8348] ? __fget_files+0x2a/0x420 [ 163.477161][ T8348] ksys_write+0x150/0x270 [ 163.477195][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 163.477246][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.477269][ T8348] do_syscall_64+0x174/0x580 [ 163.477302][ T8348] ? clear_bhb_loop+0x40/0x90 [ 163.477327][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.477348][ T8348] RIP: 0033:0x7f249555e68e [ 163.477367][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.477385][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.477406][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 163.477422][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 163.477434][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 163.477445][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.477455][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 163.477480][ T8348] [ 163.477491][ T8348] BUG: Bad page state in process syz.2.670 pfn:2a45a [ 163.767729][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2a45a [ 163.777845][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 163.784990][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 163.793653][ T8348] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 163.802306][ T8348] page dumped because: page_pool leak [ 163.807735][ T8348] page_owner tracks the page as allocated [ 163.813484][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318463506, free_ts 162186103168 [ 163.830490][ T8348] post_alloc_hook+0x1f9/0x250 [ 163.835331][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 163.840943][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 163.846814][ T8348] __alloc_pages_noprof+0x10/0x100 [ 163.851958][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 163.857474][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 163.863582][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 163.868516][ T8348] do_xdp_generic+0x770/0x12d0 [ 163.873308][ T8348] tun_get_user+0x24f8/0x4370 [ 163.878046][ T8348] tun_chr_write_iter+0x113/0x200 [ 163.883115][ T8348] vfs_write+0x612/0xba0 [ 163.887469][ T8348] ksys_write+0x150/0x270 [ 163.891836][ T8348] do_syscall_64+0x174/0x580 [ 163.896492][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.902413][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 163.908808][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 163.913947][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 163.919114][ T8348] rcu_core+0x78b/0x10a0 [ 163.923389][ T8348] handle_softirqs+0x225/0x840 [ 163.928192][ T8348] __irq_exit_rcu+0xca/0x220 [ 163.932802][ T8348] irq_exit_rcu+0x9/0x30 [ 163.937123][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 163.942794][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 163.948831][ T8348] Modules linked in: [ 163.952762][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 163.952793][ T8348] Tainted: [B]=BAD_PAGE [ 163.952802][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 163.952819][ T8348] Call Trace: [ 163.952825][ T8348] [ 163.952831][ T8348] dump_stack_lvl+0xe8/0x150 [ 163.952855][ T8348] bad_page+0x17f/0x1c0 [ 163.952870][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 163.952891][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 163.952916][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 163.952941][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 163.952954][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 163.952980][ T8348] do_xdp_generic+0xac2/0x12d0 [ 163.952995][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 163.953016][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 163.953034][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 163.953053][ T8348] ? tun_get_user+0x23cb/0x4370 [ 163.953078][ T8348] ? tun_get_user+0x23cb/0x4370 [ 163.953097][ T8348] tun_get_user+0x24f8/0x4370 [ 163.953122][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 163.953140][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 163.953155][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 163.953177][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 163.953199][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 163.953228][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 163.953249][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 163.953267][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 163.953284][ T8348] ? tun_get+0x1c/0x2f0 [ 163.953302][ T8348] ? tun_get+0x1c/0x2f0 [ 163.953321][ T8348] ? tun_get+0x1c/0x2f0 [ 163.953338][ T8348] ? tun_get+0x1c/0x2f0 [ 163.953357][ T8348] tun_chr_write_iter+0x113/0x200 [ 163.953376][ T8348] vfs_write+0x612/0xba0 [ 163.953400][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 163.953424][ T8348] ? __fget_files+0x2a/0x420 [ 163.953445][ T8348] ksys_write+0x150/0x270 [ 163.953478][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 163.953501][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.953514][ T8348] do_syscall_64+0x174/0x580 [ 163.953534][ T8348] ? clear_bhb_loop+0x40/0x90 [ 163.953549][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.953561][ T8348] RIP: 0033:0x7f249555e68e [ 163.953572][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 163.953583][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.953614][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 163.953624][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 163.953633][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 163.953641][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.953649][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 163.953670][ T8348] [ 163.953678][ T8348] BUG: Bad page state in process syz.2.670 pfn:74c48 [ 164.243613][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888074c483c0 pfn:0x74c48 [ 164.253771][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 164.260961][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 164.269604][ T8348] raw: ffff888074c483c0 0000000000000001 00000000ffffffff 0000000000000000 [ 164.278242][ T8348] page dumped because: page_pool leak [ 164.283611][ T8348] page_owner tracks the page as allocated [ 164.289407][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318450247, free_ts 162186123912 [ 164.306809][ T8348] post_alloc_hook+0x1f9/0x250 [ 164.311657][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 164.317274][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 164.323105][ T8348] __alloc_pages_noprof+0x10/0x100 [ 164.328291][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 164.333775][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 164.339932][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 164.344816][ T8348] do_xdp_generic+0x770/0x12d0 [ 164.349657][ T8348] tun_get_user+0x24f8/0x4370 [ 164.354364][ T8348] tun_chr_write_iter+0x113/0x200 [ 164.359471][ T8348] vfs_write+0x612/0xba0 [ 164.363773][ T8348] ksys_write+0x150/0x270 [ 164.368181][ T8348] do_syscall_64+0x174/0x580 [ 164.372808][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.378774][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 164.385126][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 164.390300][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 164.395485][ T8348] rcu_core+0x78b/0x10a0 [ 164.399757][ T8348] handle_softirqs+0x225/0x840 [ 164.404533][ T8348] __irq_exit_rcu+0xca/0x220 [ 164.409214][ T8348] irq_exit_rcu+0x9/0x30 [ 164.413483][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 164.419176][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.425210][ T8348] Modules linked in: [ 164.429166][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 164.429193][ T8348] Tainted: [B]=BAD_PAGE [ 164.429199][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 164.429210][ T8348] Call Trace: [ 164.429216][ T8348] [ 164.429223][ T8348] dump_stack_lvl+0xe8/0x150 [ 164.429253][ T8348] bad_page+0x17f/0x1c0 [ 164.429272][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 164.429300][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 164.429333][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 164.429365][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 164.429383][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 164.429416][ T8348] do_xdp_generic+0xac2/0x12d0 [ 164.429435][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 164.429461][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 164.429484][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 164.429509][ T8348] ? tun_get_user+0x23cb/0x4370 [ 164.429541][ T8348] ? tun_get_user+0x23cb/0x4370 [ 164.429565][ T8348] tun_get_user+0x24f8/0x4370 [ 164.429596][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 164.429618][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 164.429638][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 164.429680][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 164.429708][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 164.429732][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 164.429762][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 164.429787][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 164.429812][ T8348] ? tun_get+0x1c/0x2f0 [ 164.429837][ T8348] ? tun_get+0x1c/0x2f0 [ 164.429865][ T8348] ? tun_get+0x1c/0x2f0 [ 164.429889][ T8348] ? tun_get+0x1c/0x2f0 [ 164.429923][ T8348] tun_chr_write_iter+0x113/0x200 [ 164.429948][ T8348] vfs_write+0x612/0xba0 [ 164.429980][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 164.430013][ T8348] ? __fget_files+0x2a/0x420 [ 164.430041][ T8348] ksys_write+0x150/0x270 [ 164.430071][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 164.430111][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.430131][ T8348] do_syscall_64+0x174/0x580 [ 164.430159][ T8348] ? clear_bhb_loop+0x40/0x90 [ 164.430180][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.430199][ T8348] RIP: 0033:0x7f249555e68e [ 164.430216][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.430231][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.430250][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 164.430264][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 164.430277][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 164.430306][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.430318][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 164.430341][ T8348] [ 164.430351][ T8348] BUG: Bad page state in process syz.2.670 pfn:58321 [ 164.720921][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058321a50 pfn:0x58321 [ 164.731068][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 164.738231][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 164.747031][ T8348] raw: ffff888058321a50 0000000000000001 00000000ffffffff 0000000000000000 [ 164.755689][ T8348] page dumped because: page_pool leak [ 164.761076][ T8348] page_owner tracks the page as allocated [ 164.766845][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318437029, free_ts 162186162759 [ 164.783860][ T8348] post_alloc_hook+0x1f9/0x250 [ 164.788742][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 164.794326][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 164.800224][ T8348] __alloc_pages_noprof+0x10/0x100 [ 164.805376][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 164.810916][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 164.817059][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 164.821927][ T8348] do_xdp_generic+0x770/0x12d0 [ 164.826749][ T8348] tun_get_user+0x24f8/0x4370 [ 164.831466][ T8348] tun_chr_write_iter+0x113/0x200 [ 164.836558][ T8348] vfs_write+0x612/0xba0 [ 164.840857][ T8348] ksys_write+0x150/0x270 [ 164.845198][ T8348] do_syscall_64+0x174/0x580 [ 164.849871][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.855804][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 164.862129][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 164.867323][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 164.872478][ T8348] rcu_core+0x78b/0x10a0 [ 164.876788][ T8348] handle_softirqs+0x225/0x840 [ 164.881678][ T8348] __irq_exit_rcu+0xca/0x220 [ 164.886459][ T8348] irq_exit_rcu+0x9/0x30 [ 164.890742][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 164.896467][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.903010][ T8348] Modules linked in: [ 164.906981][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 164.907013][ T8348] Tainted: [B]=BAD_PAGE [ 164.907021][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 164.907034][ T8348] Call Trace: [ 164.907042][ T8348] [ 164.907051][ T8348] dump_stack_lvl+0xe8/0x150 [ 164.907087][ T8348] bad_page+0x17f/0x1c0 [ 164.907109][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 164.907142][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 164.907179][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 164.907217][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 164.907237][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 164.907277][ T8348] do_xdp_generic+0xac2/0x12d0 [ 164.907301][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 164.907343][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 164.907370][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 164.907399][ T8348] ? tun_get_user+0x23cb/0x4370 [ 164.907437][ T8348] ? tun_get_user+0x23cb/0x4370 [ 164.907463][ T8348] tun_get_user+0x24f8/0x4370 [ 164.907499][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 164.907525][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 164.907547][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 164.907577][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 164.907608][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 164.907634][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 164.907667][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 164.907704][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 164.907730][ T8348] ? tun_get+0x1c/0x2f0 [ 164.907757][ T8348] ? tun_get+0x1c/0x2f0 [ 164.907787][ T8348] ? tun_get+0x1c/0x2f0 [ 164.907813][ T8348] ? tun_get+0x1c/0x2f0 [ 164.907842][ T8348] tun_chr_write_iter+0x113/0x200 [ 164.907872][ T8348] vfs_write+0x612/0xba0 [ 164.907909][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 164.907947][ T8348] ? __fget_files+0x2a/0x420 [ 164.907978][ T8348] ksys_write+0x150/0x270 [ 164.908012][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 164.908050][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.908072][ T8348] do_syscall_64+0x174/0x580 [ 164.908106][ T8348] ? clear_bhb_loop+0x40/0x90 [ 164.908130][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.908151][ T8348] RIP: 0033:0x7f249555e68e [ 164.908170][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 164.908188][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.908210][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 164.908226][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 164.908240][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 164.908254][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.908266][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 164.908292][ T8348] [ 164.908304][ T8348] BUG: Bad page state in process syz.2.670 pfn:74901 [ 165.198796][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x74901 [ 165.208919][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 165.216108][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 165.224719][ T8348] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 165.233337][ T8348] page dumped because: page_pool leak [ 165.238740][ T8348] page_owner tracks the page as allocated [ 165.244539][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318423968, free_ts 162186201095 [ 165.261536][ T8348] post_alloc_hook+0x1f9/0x250 [ 165.266374][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 165.271957][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 165.277819][ T8348] __alloc_pages_noprof+0x10/0x100 [ 165.282966][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 165.288474][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 165.294624][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 165.299558][ T8348] do_xdp_generic+0x770/0x12d0 [ 165.304353][ T8348] tun_get_user+0x24f8/0x4370 [ 165.309082][ T8348] tun_chr_write_iter+0x113/0x200 [ 165.314130][ T8348] vfs_write+0x612/0xba0 [ 165.318437][ T8348] ksys_write+0x150/0x270 [ 165.322802][ T8348] do_syscall_64+0x174/0x580 [ 165.327448][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.333371][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 165.339741][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 165.344886][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 165.350041][ T8348] rcu_core+0x78b/0x10a0 [ 165.354314][ T8348] handle_softirqs+0x225/0x840 [ 165.359141][ T8348] __irq_exit_rcu+0xca/0x220 [ 165.363770][ T8348] irq_exit_rcu+0x9/0x30 [ 165.368059][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 165.373729][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 165.379775][ T8348] Modules linked in: [ 165.383699][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 165.383721][ T8348] Tainted: [B]=BAD_PAGE [ 165.383726][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 165.383735][ T8348] Call Trace: [ 165.383752][ T8348] [ 165.383758][ T8348] dump_stack_lvl+0xe8/0x150 [ 165.383781][ T8348] bad_page+0x17f/0x1c0 [ 165.383795][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 165.383815][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 165.383839][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 165.383884][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 165.383903][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 165.383942][ T8348] do_xdp_generic+0xac2/0x12d0 [ 165.383957][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 165.383976][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 165.383993][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 165.384011][ T8348] ? tun_get_user+0x23cb/0x4370 [ 165.384036][ T8348] ? tun_get_user+0x23cb/0x4370 [ 165.384055][ T8348] tun_get_user+0x24f8/0x4370 [ 165.384106][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 165.384132][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 165.384154][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 165.384183][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 165.384205][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 165.384223][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 165.384246][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 165.384265][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.384283][ T8348] ? tun_get+0x1c/0x2f0 [ 165.384302][ T8348] ? tun_get+0x1c/0x2f0 [ 165.384323][ T8348] ? tun_get+0x1c/0x2f0 [ 165.384341][ T8348] ? tun_get+0x1c/0x2f0 [ 165.384361][ T8348] tun_chr_write_iter+0x113/0x200 [ 165.384381][ T8348] vfs_write+0x612/0xba0 [ 165.384408][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 165.384434][ T8348] ? __fget_files+0x2a/0x420 [ 165.384456][ T8348] ksys_write+0x150/0x270 [ 165.384479][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 165.384505][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.384520][ T8348] do_syscall_64+0x174/0x580 [ 165.384548][ T8348] ? clear_bhb_loop+0x40/0x90 [ 165.384565][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.384580][ T8348] RIP: 0033:0x7f249555e68e [ 165.384593][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.384605][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.384621][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 165.384632][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 165.384642][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 165.384651][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.384660][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 165.384677][ T8348] [ 165.384685][ T8348] BUG: Bad page state in process syz.2.670 pfn:5a397 [ 165.675317][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a397b40 pfn:0x5a397 [ 165.685457][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 165.692604][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 165.701330][ T8348] raw: ffff88805a397b40 0000000000000001 00000000ffffffff 0000000000000000 [ 165.709996][ T8348] page dumped because: page_pool leak [ 165.715378][ T8348] page_owner tracks the page as allocated [ 165.721129][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318410789, free_ts 162186220666 [ 165.738124][ T8348] post_alloc_hook+0x1f9/0x250 [ 165.742904][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 165.748539][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 165.754408][ T8348] __alloc_pages_noprof+0x10/0x100 [ 165.759583][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 165.765078][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 165.771202][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 165.776139][ T8348] do_xdp_generic+0x770/0x12d0 [ 165.780915][ T8348] tun_get_user+0x24f8/0x4370 [ 165.785648][ T8348] tun_chr_write_iter+0x113/0x200 [ 165.790709][ T8348] vfs_write+0x612/0xba0 [ 165.794963][ T8348] ksys_write+0x150/0x270 [ 165.799399][ T8348] do_syscall_64+0x174/0x580 [ 165.804042][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.810004][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 165.816388][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 165.821513][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 165.826675][ T8348] rcu_core+0x78b/0x10a0 [ 165.830980][ T8348] handle_softirqs+0x225/0x840 [ 165.835800][ T8348] __irq_exit_rcu+0xca/0x220 [ 165.840437][ T8348] irq_exit_rcu+0x9/0x30 [ 165.844702][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 165.850421][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 165.856456][ T8348] Modules linked in: [ 165.860364][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 165.860386][ T8348] Tainted: [B]=BAD_PAGE [ 165.860392][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 165.860401][ T8348] Call Trace: [ 165.860407][ T8348] [ 165.860413][ T8348] dump_stack_lvl+0xe8/0x150 [ 165.860463][ T8348] bad_page+0x17f/0x1c0 [ 165.860498][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 165.860527][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 165.860552][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 165.860602][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 165.860631][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 165.860658][ T8348] do_xdp_generic+0xac2/0x12d0 [ 165.860673][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 165.860694][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 165.860712][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 165.860732][ T8348] ? tun_get_user+0x23cb/0x4370 [ 165.860757][ T8348] ? tun_get_user+0x23cb/0x4370 [ 165.860776][ T8348] tun_get_user+0x24f8/0x4370 [ 165.860801][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 165.860819][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 165.860834][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 165.860854][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 165.860875][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 165.860893][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 165.860916][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 165.860935][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.860954][ T8348] ? tun_get+0x1c/0x2f0 [ 165.860972][ T8348] ? tun_get+0x1c/0x2f0 [ 165.860993][ T8348] ? tun_get+0x1c/0x2f0 [ 165.861011][ T8348] ? tun_get+0x1c/0x2f0 [ 165.861031][ T8348] tun_chr_write_iter+0x113/0x200 [ 165.861051][ T8348] vfs_write+0x612/0xba0 [ 165.861079][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 165.861105][ T8348] ? __fget_files+0x2a/0x420 [ 165.861128][ T8348] ksys_write+0x150/0x270 [ 165.861169][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 165.861195][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.861211][ T8348] do_syscall_64+0x174/0x580 [ 165.861235][ T8348] ? clear_bhb_loop+0x40/0x90 [ 165.861252][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.861268][ T8348] RIP: 0033:0x7f249555e68e [ 165.861281][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 165.861293][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.861309][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 165.861321][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 165.861330][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 165.861340][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.861348][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 165.861366][ T8348] [ 165.861375][ T8348] BUG: Bad page state in process syz.2.670 pfn:5910b [ 166.151604][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805910b000 pfn:0x5910b [ 166.161801][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 166.168962][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 166.177600][ T8348] raw: ffff88805910b000 0000000000000001 00000000ffffffff 0000000000000000 [ 166.186221][ T8348] page dumped because: page_pool leak [ 166.191603][ T8348] page_owner tracks the page as allocated [ 166.197384][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318394512, free_ts 162186258430 [ 166.214377][ T8348] post_alloc_hook+0x1f9/0x250 [ 166.219223][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 166.224824][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 166.230687][ T8348] __alloc_pages_noprof+0x10/0x100 [ 166.235871][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 166.241368][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 166.247494][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 166.252401][ T8348] do_xdp_generic+0x770/0x12d0 [ 166.257219][ T8348] tun_get_user+0x24f8/0x4370 [ 166.261929][ T8348] tun_chr_write_iter+0x113/0x200 [ 166.267008][ T8348] vfs_write+0x612/0xba0 [ 166.271286][ T8348] ksys_write+0x150/0x270 [ 166.275688][ T8348] do_syscall_64+0x174/0x580 [ 166.280337][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.286299][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 166.292642][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 166.297813][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 166.302959][ T8348] rcu_core+0x78b/0x10a0 [ 166.307277][ T8348] handle_softirqs+0x225/0x840 [ 166.312079][ T8348] __irq_exit_rcu+0xca/0x220 [ 166.316721][ T8348] irq_exit_rcu+0x9/0x30 [ 166.321013][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 166.326719][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.332730][ T8348] Modules linked in: [ 166.336685][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 166.336716][ T8348] Tainted: [B]=BAD_PAGE [ 166.336724][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 166.336736][ T8348] Call Trace: [ 166.336744][ T8348] [ 166.336753][ T8348] dump_stack_lvl+0xe8/0x150 [ 166.336788][ T8348] bad_page+0x17f/0x1c0 [ 166.336811][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 166.336844][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 166.336883][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 166.336920][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 166.336940][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 166.336979][ T8348] do_xdp_generic+0xac2/0x12d0 [ 166.337003][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 166.337034][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 166.337061][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 166.337091][ T8348] ? tun_get_user+0x23cb/0x4370 [ 166.337130][ T8348] ? tun_get_user+0x23cb/0x4370 [ 166.337159][ T8348] tun_get_user+0x24f8/0x4370 [ 166.337209][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 166.337235][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 166.337257][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 166.337287][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 166.337318][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 166.337344][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 166.337377][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 166.337405][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.337431][ T8348] ? tun_get+0x1c/0x2f0 [ 166.337456][ T8348] ? tun_get+0x1c/0x2f0 [ 166.337485][ T8348] ? tun_get+0x1c/0x2f0 [ 166.337521][ T8348] ? tun_get+0x1c/0x2f0 [ 166.337551][ T8348] tun_chr_write_iter+0x113/0x200 [ 166.337580][ T8348] vfs_write+0x612/0xba0 [ 166.337618][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 166.337655][ T8348] ? __fget_files+0x2a/0x420 [ 166.337688][ T8348] ksys_write+0x150/0x270 [ 166.337722][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 166.337760][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.337783][ T8348] do_syscall_64+0x174/0x580 [ 166.337816][ T8348] ? clear_bhb_loop+0x40/0x90 [ 166.337852][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.337872][ T8348] RIP: 0033:0x7f249555e68e [ 166.337890][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.337909][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.337930][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 166.337945][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 166.337958][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 166.337970][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.337982][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 166.338005][ T8348] [ 166.338017][ T8348] BUG: Bad page state in process syz.2.670 pfn:748f8 [ 166.628852][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880748f8d20 pfn:0x748f8 [ 166.638959][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 166.646119][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 166.654719][ T8348] raw: ffff8880748f8d20 0000000000000001 00000000ffffffff 0000000000000000 [ 166.663352][ T8348] page dumped because: page_pool leak [ 166.668759][ T8348] page_owner tracks the page as allocated [ 166.674482][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318378914, free_ts 162186296247 [ 166.692120][ T8348] post_alloc_hook+0x1f9/0x250 [ 166.696959][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 166.702560][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 166.708445][ T8348] __alloc_pages_noprof+0x10/0x100 [ 166.713601][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 166.719125][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 166.725237][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 166.730140][ T8348] do_xdp_generic+0x770/0x12d0 [ 166.734925][ T8348] tun_get_user+0x24f8/0x4370 [ 166.739663][ T8348] tun_chr_write_iter+0x113/0x200 [ 166.744719][ T8348] vfs_write+0x612/0xba0 [ 166.749055][ T8348] ksys_write+0x150/0x270 [ 166.753419][ T8348] do_syscall_64+0x174/0x580 [ 166.758069][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.763988][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 166.770354][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 166.775521][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 166.780680][ T8348] rcu_core+0x78b/0x10a0 [ 166.784948][ T8348] handle_softirqs+0x225/0x840 [ 166.789752][ T8348] __irq_exit_rcu+0xca/0x220 [ 166.794362][ T8348] irq_exit_rcu+0x9/0x30 [ 166.798668][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 166.804337][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 166.810378][ T8348] Modules linked in: [ 166.814304][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 166.814326][ T8348] Tainted: [B]=BAD_PAGE [ 166.814332][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 166.814341][ T8348] Call Trace: [ 166.814347][ T8348] [ 166.814353][ T8348] dump_stack_lvl+0xe8/0x150 [ 166.814378][ T8348] bad_page+0x17f/0x1c0 [ 166.814393][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 166.814416][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 166.814442][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 166.814473][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 166.814487][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 166.814515][ T8348] do_xdp_generic+0xac2/0x12d0 [ 166.814531][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 166.814552][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 166.814571][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 166.814591][ T8348] ? tun_get_user+0x23cb/0x4370 [ 166.814618][ T8348] ? tun_get_user+0x23cb/0x4370 [ 166.814637][ T8348] tun_get_user+0x24f8/0x4370 [ 166.814682][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 166.814710][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 166.814733][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 166.814755][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 166.814777][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 166.814795][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 166.814819][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 166.814838][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.814857][ T8348] ? tun_get+0x1c/0x2f0 [ 166.814876][ T8348] ? tun_get+0x1c/0x2f0 [ 166.814898][ T8348] ? tun_get+0x1c/0x2f0 [ 166.814916][ T8348] ? tun_get+0x1c/0x2f0 [ 166.814937][ T8348] tun_chr_write_iter+0x113/0x200 [ 166.814960][ T8348] vfs_write+0x612/0xba0 [ 166.814987][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 166.815014][ T8348] ? __fget_files+0x2a/0x420 [ 166.815038][ T8348] ksys_write+0x150/0x270 [ 166.815062][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 166.815088][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.815104][ T8348] do_syscall_64+0x174/0x580 [ 166.815128][ T8348] ? clear_bhb_loop+0x40/0x90 [ 166.815145][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.815160][ T8348] RIP: 0033:0x7f249555e68e [ 166.815174][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.815187][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.815202][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 166.815214][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 166.815223][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 166.815233][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.815242][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 166.815259][ T8348] [ 166.815268][ T8348] BUG: Bad page state in process syz.2.670 pfn:58bfd [ 167.105515][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888058bfd2d0 pfn:0x58bfd [ 167.115659][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 167.122796][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 167.131427][ T8348] raw: ffff888058bfd2d0 0000000000000001 00000000ffffffff 0000000000000000 [ 167.140050][ T8348] page dumped because: page_pool leak [ 167.145426][ T8348] page_owner tracks the page as allocated [ 167.151195][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318361978, free_ts 162186333920 [ 167.168176][ T8348] post_alloc_hook+0x1f9/0x250 [ 167.173064][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 167.178674][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 167.184519][ T8348] __alloc_pages_noprof+0x10/0x100 [ 167.189695][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 167.195204][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 167.201322][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 167.206227][ T8348] do_xdp_generic+0x770/0x12d0 [ 167.211000][ T8348] tun_get_user+0x24f8/0x4370 [ 167.215742][ T8348] tun_chr_write_iter+0x113/0x200 [ 167.220804][ T8348] vfs_write+0x612/0xba0 [ 167.225077][ T8348] ksys_write+0x150/0x270 [ 167.229474][ T8348] do_syscall_64+0x174/0x580 [ 167.234131][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.240076][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 167.246454][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 167.251586][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 167.256775][ T8348] rcu_core+0x78b/0x10a0 [ 167.261065][ T8348] handle_softirqs+0x225/0x840 [ 167.265889][ T8348] __irq_exit_rcu+0xca/0x220 [ 167.270515][ T8348] irq_exit_rcu+0x9/0x30 [ 167.274787][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 167.280490][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.286520][ T8348] Modules linked in: [ 167.290449][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 167.290470][ T8348] Tainted: [B]=BAD_PAGE [ 167.290476][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 167.290485][ T8348] Call Trace: [ 167.290491][ T8348] [ 167.290497][ T8348] dump_stack_lvl+0xe8/0x150 [ 167.290522][ T8348] bad_page+0x17f/0x1c0 [ 167.290537][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 167.290559][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 167.290586][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 167.290612][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 167.290626][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 167.290667][ T8348] do_xdp_generic+0xac2/0x12d0 [ 167.290692][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 167.290726][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 167.290746][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 167.290766][ T8348] ? tun_get_user+0x23cb/0x4370 [ 167.290793][ T8348] ? tun_get_user+0x23cb/0x4370 [ 167.290813][ T8348] tun_get_user+0x24f8/0x4370 [ 167.290839][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 167.290857][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 167.290872][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 167.290894][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 167.290916][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 167.290937][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 167.290961][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 167.290981][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 167.291000][ T8348] ? tun_get+0x1c/0x2f0 [ 167.291019][ T8348] ? tun_get+0x1c/0x2f0 [ 167.291041][ T8348] ? tun_get+0x1c/0x2f0 [ 167.291060][ T8348] ? tun_get+0x1c/0x2f0 [ 167.291081][ T8348] tun_chr_write_iter+0x113/0x200 [ 167.291107][ T8348] vfs_write+0x612/0xba0 [ 167.291134][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 167.291167][ T8348] ? __fget_files+0x2a/0x420 [ 167.291190][ T8348] ksys_write+0x150/0x270 [ 167.291214][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 167.291241][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.291257][ T8348] do_syscall_64+0x174/0x580 [ 167.291281][ T8348] ? clear_bhb_loop+0x40/0x90 [ 167.291298][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.291313][ T8348] RIP: 0033:0x7f249555e68e [ 167.291327][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.291339][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.291360][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 167.291371][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 167.291381][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 167.291391][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.291399][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 167.291423][ T8348] [ 167.291431][ T8348] BUG: Bad page state in process syz.2.670 pfn:33678 [ 167.581581][ T8348] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888033678000 pfn:0x33678 [ 167.591720][ T8348] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 167.598922][ T8348] raw: 00fff00000000000 dead000000000040 ffff8880236f6000 0000000000000000 [ 167.607573][ T8348] raw: ffff888033678000 0000000000000001 00000000ffffffff 0000000000000000 [ 167.616209][ T8348] page dumped because: page_pool leak [ 167.621600][ T8348] page_owner tracks the page as allocated [ 167.627368][ T8348] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8348, tgid 8346 (syz.2.670), ts 162318324201, free_ts 162186372361 [ 167.644372][ T8348] post_alloc_hook+0x1f9/0x250 [ 167.649200][ T8348] get_page_from_freelist+0x21fa/0x2270 [ 167.654789][ T8348] __alloc_frozen_pages_noprof+0x18d/0x380 [ 167.660683][ T8348] __alloc_pages_noprof+0x10/0x100 [ 167.665858][ T8348] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 167.671360][ T8348] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 167.677495][ T8348] skb_pp_cow_data+0xcd0/0x19a0 [ 167.682404][ T8348] do_xdp_generic+0x770/0x12d0 [ 167.687219][ T8348] tun_get_user+0x24f8/0x4370 [ 167.691930][ T8348] tun_chr_write_iter+0x113/0x200 [ 167.697013][ T8348] vfs_write+0x612/0xba0 [ 167.701304][ T8348] ksys_write+0x150/0x270 [ 167.705731][ T8348] do_syscall_64+0x174/0x580 [ 167.710358][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.716317][ T8348] page last free pid 5817 tgid 5817 stack trace: [ 167.722685][ T8348] __free_frozen_pages+0xc1e/0xd10 [ 167.727873][ T8348] tlb_remove_table_rcu+0x85/0x100 [ 167.733014][ T8348] rcu_core+0x78b/0x10a0 [ 167.737311][ T8348] handle_softirqs+0x225/0x840 [ 167.742103][ T8348] __irq_exit_rcu+0xca/0x220 [ 167.746743][ T8348] irq_exit_rcu+0x9/0x30 [ 167.751025][ T8348] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 167.756751][ T8348] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 167.762764][ T8348] Modules linked in: [ 167.766724][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.670 Tainted: G B syzkaller #0 PREEMPT(full) [ 167.766753][ T8348] Tainted: [B]=BAD_PAGE [ 167.766761][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 167.766773][ T8348] Call Trace: [ 167.766781][ T8348] [ 167.766790][ T8348] dump_stack_lvl+0xe8/0x150 [ 167.766826][ T8348] bad_page+0x17f/0x1c0 [ 167.766848][ T8348] __free_frozen_pages+0xcc2/0xd10 [ 167.766880][ T8348] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 167.766918][ T8348] bpf_xdp_adjust_tail+0x1ce/0x210 [ 167.766956][ T8348] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 167.766977][ T8348] bpf_prog_run_generic_xdp+0x5e3/0x14b0 [ 167.767017][ T8348] do_xdp_generic+0xac2/0x12d0 [ 167.767041][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 167.767072][ T8348] ? do_xdp_generic+0x6ba/0x12d0 [ 167.767099][ T8348] ? __pfx_do_xdp_generic+0x10/0x10 [ 167.767129][ T8348] ? tun_get_user+0x23cb/0x4370 [ 167.767168][ T8348] ? tun_get_user+0x23cb/0x4370 [ 167.767197][ T8348] tun_get_user+0x24f8/0x4370 [ 167.767235][ T8348] ? aa_file_perm+0x18b/0x15f0 [ 167.767273][ T8348] ? aa_file_perm+0x4ed/0x15f0 [ 167.767295][ T8348] ? __pfx_tun_get_user+0x10/0x10 [ 167.767325][ T8348] ? __lock_acquire+0x683/0x2cf0 [ 167.767356][ T8348] ? preempt_schedule_thunk+0x16/0x40 [ 167.767391][ T8348] ? preempt_schedule_common+0x82/0xd0 [ 167.767425][ T8348] ? ref_tracker_alloc+0x341/0x4b0 [ 167.767453][ T8348] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 167.767479][ T8348] ? tun_get+0x1c/0x2f0 [ 167.767507][ T8348] ? tun_get+0x1c/0x2f0 [ 167.767537][ T8348] ? tun_get+0x1c/0x2f0 [ 167.767564][ T8348] ? tun_get+0x1c/0x2f0 [ 167.767594][ T8348] tun_chr_write_iter+0x113/0x200 [ 167.767624][ T8348] vfs_write+0x612/0xba0 [ 167.767660][ T8348] ? __pfx_vfs_write+0x10/0x10 [ 167.767699][ T8348] ? __fget_files+0x2a/0x420 [ 167.767731][ T8348] ksys_write+0x150/0x270 [ 167.767765][ T8348] ? __pfx_ksys_write+0x10/0x10 [ 167.767802][ T8348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.767825][ T8348] do_syscall_64+0x174/0x580 [ 167.767859][ T8348] ? clear_bhb_loop+0x40/0x90 [ 167.767884][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.767905][ T8348] RIP: 0033:0x7f249555e68e [ 167.767924][ T8348] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 167.767942][ T8348] RSP: 002b:00007f24964a4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.767965][ T8348] RAX: ffffffffffffffda RBX: 00007f24964a56c0 RCX: 00007f249555e68e [ 167.767981][ T8348] RDX: 000000000000ff76 RSI: 0000200000000000 RDI: 00000000000000c8 [ 167.767995][ T8348] RBP: 00007f2495633e6f R08: 0000000000000000 R09: 0000000000000000 [ 167.768009][ T8348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.768021][ T8348] R13: 00007f2495826038 R14: 00007f2495825fa0 R15: 00007fffe358be98 [ 167.768046][ T8348] [ 168.053854][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!