last executing test programs: 7.251733986s ago: executing program 0 (id=12583): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000510000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000711828"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x148}, {0x85, 0x0, 0x0, 0xd2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f0000000600), &(0x7f0000000340)=@udp=r3, 0x1}, 0x20) r5 = gettid() sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xa0, 0x4000000}, 0x400c881) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r5) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 6.875385232s ago: executing program 0 (id=12588): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_DONE(r5, 0x0, 0xd0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) accept$alg(r3, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, 0x0, &(0x7f0000000540)=0x44) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[], 0x40}}, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300001000010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_lookup}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@loopback, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="8510000001000000646c6c2500000000002022207b1af8ff00000000bfa100000000000007010000f8ffffbfb702000008000000b703000000000128850000007600000095ddcc7cce6d19414400fc43077ae8ed598cd29dbf2bca07d557c15c6dc7e81487f1b5458e647903a93aca7f71b02549e11a24cf65ec21a2e1204ff62ec799e9e78ecefe92064cc7586460e150d78f920081bca4ec06316ec25fb518c934daaf0ca23591b32726d5fe47408f1518896cad8b6b72e48fc0a9edd59137dcd297d8954d809a46757a4cbcf34dd8bd90e85d07ad0f194497b67061f57e4ca1a82dbce4f4cadd"], &(0x7f0000000480)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf28}, 0x94) 3.695051596s ago: executing program 3 (id=12610): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140), 0x44010) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000140)="5d2e090104f1c38afbf14bb6698d08") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x130, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x240, 0x20a, 0x278, 0x240, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@srh={{0x30}, {0xc, 0x4, 0x8, 0x7, 0x81, 0x1000, 0x208}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private2, [], [], 'veth1_to_hsr\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 3.318947534s ago: executing program 3 (id=12612): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/97, 0x61}], 0x1}}], 0x1, 0x2, 0x0) 3.139522654s ago: executing program 3 (id=12615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) listen(0xffffffffffffffff, 0x568) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca7193"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xb00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.955352789s ago: executing program 2 (id=12618): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.651736563s ago: executing program 2 (id=12621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@delnexthop={0x20, 0x69, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4800) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0xfffff65e}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000040)=0x8) 2.263932179s ago: executing program 1 (id=12624): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="5106", @ANYRES32=r0, @ANYRES16], 0x14) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x1}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01009800000000000000180000000000000000000002000000001500000b00000000000000000000000d000000000000"], &(0x7f0000001b80)=""/4090, 0x32, 0xffa, 0xa, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)}, 0x10) 2.201101354s ago: executing program 3 (id=12625): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/97, 0x61}], 0x1}}], 0x1, 0x2, 0x0) 2.156368809s ago: executing program 2 (id=12626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xdd6, &(0x7f0000001380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0161b7", 0xda0, 0x2f, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "940760e83d551cdd654d75d29d98adc180c67ce4dcd7b6ae4a0e3e6dcf69679e3eded18e067644be28945ffe98d94369910bd14579409acbeeb2c08691831c5a89f1bd92555977c790813b1e5e7d107e510745222ed2dae64db49bd6f42c3af00e6483a9c034bc851d67cbf18be4f21a5295fd6bcc4833eadbb88a453da7eda9a9655e62f7c251b0a4246f4bc3430f98a704178fc3c23a9b0cbf39baa707d98adb688511df9096b88cc332e5c3d890629cf0f0c0748b91b8276c37a2a6700f23033d78a45706be76c1d6fa2dd4097f19ea09f7ce88a444dde91f0f0a584f781f499dd2e01967231d5ae0808bb64ff092c355f90e1ead3fcb2ebeafe130310daa90f8718291126973b11681bda4c738cc3b65eca89059ac6bc6eb6036016e2407f7eee264ee6bfc71500a93b87f92fdd597ec3fff65f18ff8326b3704e8293abc7cefd302cea3d0439c610467493175b1c1dab88755684f0ab045e8729c3385ba07f1393665f26daa7787bb00c936d73e0ec6fec6f190ef2a1b818fd0e42c031c8c7ef16aa70b22a14ae5f2606b393406a6761bdd1567ea16ae409351050c8a02f77e0818a749933ae7259a299682f5a176f1f24d5a46a6ee72eee38c2d9a8fd07e0fcebb55e100e6e1a2c897322707230e39e070a442f6d174288bc1986b09cc68f769be3b93aa90fa313ff416ca99b7695faa2176352fae198970109cda705a5126bcf76085a72eb750c3c5d888f3bf4fb20d9355db0d3c3149b1f2410b8104176c140294bdda5e2e40e0b0e1f620cce25416e25450441ebc719d552e8c486c59fba9b706f28c744dd6725616d34bd9ff5965c997d603b981f17de1cc96a7484e5a8779081ce434e687fbb060dc91a2e3770df58408a1b7b9b5f58b6a30d5161cdf55043c354e18be7a7f27a9279695285dc46baa41d611530a6b84e38894bdf8630870368c2f7b97ea5ef1ce168bdb0a3da036eb8230e1ef82fc8e56d1720405fa9bb28217cbc3553edf6e711fb5e2657c7a9a0388ccdb9e6ce7053f20d0b0886d9cd832f5f29bf6e3734e04a703b1d180862c81752eb65033ece7fcf054751fef708ab20dedbc724b6e33e92c3d0c4b42e63183f23ecfce132c7686fcc0256c0e0e3b9da7d89ac37d3e4a380059166a69b5353049786d9fff3dfc54a41f1f0cc15209c86546bebb32fdb7a387237edbd171dbf6dc0049b4cf02af21a90562e2ad3b0217d3b487ab1f46befd1f84e38990c5dcfb608179f1c24d6e741e67066c025cdfbbf6cc2d8083f67e6850e4e41385fb5f920e7a8473725771b4b559395598b0ea5ed98696dfc0805cfb2554d092cc43730629582da769ab83c5c52d0f81cb03c08c427242e644e40fc39b743c416057e621a5262916c091cc533f73277726a44ab2401d0ba1db8935795b8eaafb30d9992e7614b016dbea5d8369f291ca66113dcbd058fb60aa55d89bcd78fcbc1c19fd3b1383d81f71638625903c0cb931dd38fba790e5c6f79eed0ef2068d8d6378cc7730526995f5bd33610299117fc914d7ab66792786286fd75aaef9c8ded84826f7404e982f157a71327e49694d0c74750bf6c2902b7be3cd8dde0430d2e93d7afe81f5f02d2b0a7a4fc23d96d5ad12b5ebfff7a0f34051c5dda7a7304ca59f36625fa39d0166d45f67ab14e6ae82407b57f54c953b9cbde36cebc4f66812330564ef393e4b5ca188b0202af37abdba7d67bc31bdd7b6f7b409d938f80eca10e65c5e36eef59a432c612008fdc1908a0061c40cb9eb310a649e24c390637c387d212c15b0dcd33120da2f14803e6f99a38b3a7b048fe76ab438d11084b0a6f5a099d779b355dcf697c501c4bfe29c1b519f8ac349bb835a613896b400c4df5e768c5968c54661ed9426cdb66bf09a2bdcaa6bedf2b6f6b75e0deaa54ded5f08b9c9e2a42f51570e306f3a9f89b9543699d297a237c56d22c5b318afcc5b8cdc0f63fe5ff879d672e095e4439e4424b850a77408f1b1529718888a5fe56e707190f43537f7f909aabb00000000000005d3745fb448bc207295b27173792c6c3e73780f99d3b9ba788e5547e2a0f7b1c703081311e344ae3f4fc3b238fda70169d9c425b95042ba3f8879e5d5997988bcd234cbd35456fb07468840dbfec9ef110df6e02c5d9dcf458f5ffeb7d10be8efaad592e0cb091529c9d0c58dee07d54e5a23e835a058607936f8abd739ddde4d5e4b1d9d3fe1655dc19b858d063124836036ae4e5ebef7c4bbb91eb85a27edf51f0758aca7396dd81439717ff689fb3b0665dfe4498061f1e737a6181b629d76e4a426650e21e3217542ac0570e1b4b4e0eeab3270b0c1293edfb054c25034ab4d72ea24f0358590a3bdcedfea2e2aeaafef9482faf73ee0fb9154029037d706664e27973a910a8973cf52bf3e6ad0406d0dc2f8e35d3692a413fcdbc186a1e14a693b9fc44f9c88066d5a78b48a352cc585fe043e0f4e288e1101490daabab755d9bcc5ad9093801d2f2116213e18bf1f32d868d5ba2a5b6ff29c2789810a6b6903437568f95ab3b27a24f51fe43fee549a0ed12b28ab9dd9eafab808acc153b61655a60d564f15831031a3e604eec5aabd810c92da2591bfe1a4834f97bc25e42442683a90c85b62e07caf1bd65f6b164b1c09897b6a8db3434ef2be65229fc740e0e37430eb1629b8472bc9c2583e10bc1ddabbea187ae776066ce70cfd06546bb2f4eef30a2361d593b118a1afaa38a6dbb06a52221ab7707439d0845a07941adc8639f0af9cede536a2eff04091cf48f256e891a03bf9ae6fdc7892a0691304b0f9bd517ffc45bdc3c9364e62b04548c934199bc17c1deab0f8bdd84285d3398defb590a667b01971e6b87e1b4aab8a11b3bfb73b4efc310812bfdb83b7337ee72025f62dc00ee0661653f5c07de4789c172e2271e909f95cc5edd1ab43f668abf215d967fa608c22f8600a159b17dcd0a6e8c896d78f69e6ca1c6fc0c1f97691d5628ee16b1a00bda34d3fa9c91cc5519f0509d558bb61974ebb03c50a40a92ce8129ea4345e78d13cf993b47cc3af76813bd5a9220ed58f8108a70fb6892e595dbb2048d9156c040d9e0c905e3c02ba10b3e5b7c6dc808dedd90697ceb1905383e9d82b375329f06ac2ccc0606d73ff25079ae296d494fe52058d672435f5ae0178cbb3157ea6b3dfbe2d478158be3720a97f7abddbf51285196bfaaf232f6dba699f2c643aecca9b27e8c2f27568bc88e7f370a2f8051b021e8f848299d3224b45ca40af1e4ff1467d8f1cf1c5f677cb7d5b88d2d40abb289cf5d70ae71f186166caaa77566372114f22fd70c8f56ce9016401f60c61d530a31ac16a75d3a27e377c49b407b07f0809352ee0f4d1de668f8dea515db727472557aa12cc5f3ab99960bd88d3df56b732faf21aa44f7b5710be3c7e1e5930dae8bbe76a93185583d78beb2d323f787685f66dba740a3aec37e0b107bbb9f053a45a3275837f6bf4a17b411aa7592fa9c43871ae1ace9adcfe5366de7aa11baed0e56b87a14e577455f3b10c4e1cc0c8145dcb77e153cf6aec91459a8c84129becbb349bed0ab32513b4a2db926fa72a27c8153256ffe0d80d8cb9e4d5ae259b2081ef560c51eff57996905e882fa80bf25e2153cb8b2a0adde506395d8d2b69d91ef930f575f0351cfd58cd8f97d3f276fea51c53b15331fd2747c862075b2fe992a8d1aa56e4217aa8ccb2107d488daebf656df58687613572cb45e50fc33fe38dec625fdbf2035cbd4df931c4cd7b3ce5d48e8a697669dc0a49c68230a44388dd3de8825041913178b89d0a405190e4fd56fe4664bf3e4c6e637a96190a95e546b8663005df9c7b194bcb07795d3d924d234e3ad41f70fe76d4fc7b3ea7eaad8a43b15746b6ad7ba387c4564cde154284612e3717cf9349ff15bfe1de9dc870241455a53bb08b8a356b5b079092b0a77c1a709ea71b660bcb7b7f5b205d8031be97c6c3aa82c9b038c30d0dc519e867e0e25cca0b77f7905b2d64f38781ad99598357497a8da3d691fb84df106de99720a051ee2c9599b596bb33c3a11ced5d70aec94bc06cbdd0298c81b42da28317ab841d3966decc15ea4ac5b72c80661d3341fe4117d2cc2c7521e995d65640cf007eb159d6a6705fe48f2103ecec6a7014efbcaea2cbdc338782a029f441f465864e06ddee3943f5326ec4ffdf71f4aba668ccd1e8e2f6ba95226a2a162114cb1426ac380f6c6f2a666aa9832fc082943d60f0ad748eb8d0bbffa7dbd2f6d9e59fa4e701d39ec66bb721a61e8727c6d029eff5478d9ba71e342c48ff5a5523bfddde885fdf27e86b3c3d2715f8e4360bd9f19df0099cbce14ce522d98bca21b9a26cb1945d86811d17163eaf2974e9cdd36883aa2180ccea42687c80b34f960a64d164aa19e479341c2b8709f2ab59a5cbbc8d5ca152a94e58724ea36acc44b572a204c82b9879498a0e612fdac9c3040702906e285c5863a549d3f45f3772c53e870c8a6b22b0b233af7e77c0402f5ec9307427490cc36db7b21fb9d7df63681630426e01d4c8047a50e5a785242a860e57f85cc210b3ebc2e57f42476d20b410145d52594a176886db087aed5505a1b77686872a12c82c775f9c6e50aafd6769cbea5a24dd6bc31a8281d780167eb7228826384264cf3e23552be670180bc42728355906cbe71582afc2610af03a6a77440f8e3f7ca302b76c426749de0b904f1228e31f44572aeb16ef1cf5dc46987e6b257e1ac20f0f2f0a135d7d14cee97a57bd2682e6aadb"}, {}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x1, {0x403}}}, {0x8, 0x22eb, 0x5, {{0x1, 0x2, 0xdb, 0x1, 0x0, 0x1, 0x5, 0x7}, 0x2, {0x2, 0x5, 0x0, 0x13, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "95f44211a583ba234fd00a2b9b5f17801528b42d4416a9a4b62a437b530856b96636c144"}}}}}}}, 0x0) (fail_nth: 3) 1.980256718s ago: executing program 1 (id=12627): unshare(0x20000400) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "8cf0fb03dc15d356998a00"}]}}}}}}}, 0x0) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r3, &(0x7f0000000080), 0x11ffffce1) (async) sendmmsg$inet6(r3, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="035e6a3993009f85c3ce", 0xa}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB='h\x00\x00\x00\x00'], 0xc0}}], 0x2, 0x10) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) recvmmsg$unix(r7, 0x0, 0x0, 0x0, 0x0) 1.669533525s ago: executing program 2 (id=12628): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x8001, @loopback, 0xfffffffc}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000440)={@rand_addr=' \x01\x00', 0x46}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYBLOB="d7280d81cea4ab47bd1e095ae9ec553807d740d785a77f164a214031f11c99715185fdda4ad871527540e87cb461284fdcebfb3bed85f411d1f3c125d124a43bd2e0e07e6bbc1ba87274d4823ce53d4012dd85ad85", @ANYRES8=r2, @ANYRES64, @ANYRES32=r4], 0x40}}, 0x48040) socket$rxrpc(0x21, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3c0600001300000428bd7000fedbdf25100101404e234e2307000000f9ffffff45aeffff1a92ce49ff7f0000090000000010000006000000", @ANYRES16=r7, @ANYBLOB="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"], 0x63c}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4000000}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) socket(0x1e, 0x4, 0x0) 1.659395799s ago: executing program 3 (id=12629): unshare(0x400) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000340)=[{&(0x7f0000000180)="cf", 0x1}, {&(0x7f0000000400)="fd", 0x1}, {&(0x7f0000000300)='0', 0x1}, {&(0x7f00000001c0)="d5", 0x1}, {&(0x7f0000000480)='q', 0x1}], 0x5, 0xa) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000840)) r5 = getpid() socket$caif_seqpacket(0x25, 0x5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000f", @ANYRES32=0x0, @ANYBLOB="06000600000000"], 0x30}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf252b0000000a0001007770616e300000000c0005000000000000000000499284b911dc6606f7df52c7c64dee330ae7db253020d89dc916f800797ef3eef5669dbcd76e5d803b5177d02b32810705e39893f5cfc12396a951cb76e34364a16b4b35f5650bd6d07fdb5c6ae4916667079c956d51af5b5cece1565d2be45696786945e9e7620dd5ade27abb5b878d470f35c23bf6627c87e42cdad2a91e16a44ba9459d70c3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x24004005) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.519308006s ago: executing program 1 (id=12630): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xdc0, &(0x7f0000001380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0161b7", 0xda0, 0x2f, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "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"}, {}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x1, {0x403}}}, {0x8, 0x22eb, 0x5, {{0x1, 0x2, 0xdb, 0x1, 0x0, 0x1, 0x5, 0x7}, 0x2, {0x2, 0x5, 0x0, 0x13, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "95f44211a583ba234fd00a2b9b5f17801528b42d4416a9a4b62a437b530856b96636c144"}}}}}}}, 0x0) 1.518634799s ago: executing program 0 (id=12631): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000001400)={0x1, "f1"}, 0x2) (async, rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000040)=0x100, 0x4) (async, rerun: 32) socketpair(0xc, 0x804, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001c80)={0x1198, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "c40b90bc860fa573a29a77d77e052d4526acbb2f50a8eb76e4702050162d7a7cd17c2b7d"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "da74dfd7963974d2dbde8717683893e700613717bf243962b66dfd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffc0000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa, 0x3, "4cea4225fcdc"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb2d}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x484}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2e}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x19}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc771}]}]}, 0x1198}, 0x1, 0x0, 0x0, 0x40800}, 0x80) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a00), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001c40)={&(0x7f00000019c0), 0xc, &(0x7f0000001c00)={&(0x7f0000001640)=ANY=[@ANYBLOB="cb32f4961321aa7bcf324fac7f3fbfdc338b10c9a498b33b", @ANYRES16=r4, @ANYBLOB="200025bd7000fedbdf250700000000010680f50003007ada82e6756e7b8a0218f9d8d7f06848b83cfd1d8e05ddc5379263f70058362a15942cde0a4c14480a8670e480582abaf1e3101609f0fd7cfccb5c6e366d2b7d584ef67e8830836a9c4c586010e2382021cb9def36dfc338f71839d4e33ecfe9c45411b46913489f9aacc52b47ffce71badd73b06ca63db43237d85ae464fc2654347e6da054251fa10e441c761dd586867fcccbbbc0100fe7ddfe743cbb8e88b679aab16849913faa81ce3dabc0649e2bb585209b40a7cd642767b5f75d0a758ed750465afc07e6dd5e264c02124993bf9ea9101f1542afe30bc22f0a70a6f1f24389c7fc98692d75f03dbe321a484d8400000004000200900004804c000780080002000400000008000400550c000008000100040000000800030009000000080003000700000008000400010000000800020007000000080001001a00000008000400060000001300010062726f6164636173742d6c696e6b00000900010073797a31000000001300010062726f6164636173742d6c696e6b00000900010073797a3000000000"], 0x1a4}, 0x1, 0x0, 0x0, 0x10040010}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000014c0)={'gre0\x00', &(0x7f0000001480)={'gre0\x00', 0x0, 0x80, 0x1, 0x7, 0x5, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast, {[@end, @end, @end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001500)={'vcan0\x00'}) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0x5a}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001540)={'vxcan1\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000015c0), &(0x7f0000001600)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r13, @ANYBLOB="050041000000000005002f0001"], 0x2c}}, 0x18) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r11, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001940)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000229bd7080fedbdf250b0000001400038000000380000002000300000000000200fbffffff00000300040000000000010001008000670f00249697524f79f0460bfcb06f1edc80898afc2e0d91e3163a4e8ca3ec163e13dbce522d7251ded0b3c5258c85b673bb4c7cab2ca20bd9524c39d99b21c476aa8eb148200b6bc1b5a17fcad7c609f1705964f3202fdf29f93a91d93e3b2a2a016e52b5b550ae7018c8987014f72bc18628c193a8bcf999ec52233ea9011f3de636ef959a7bf1595e13dabf6bd1053541c5b244732cb32a70921580dcbd41"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) (async, rerun: 64) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000190001002dbd7000fb3beaf9089fd6344ba341882fee370237dbdf2502202000ff03ff000018000008000100ac1414aa"], 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.518002655s ago: executing program 4 (id=12632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x7}}}}}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000280), &(0x7f0000000000)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000004c0)={@local, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@snap={0x1, 0x1, "8b", "d3d9e4"}}}}}}, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) 1.296123956s ago: executing program 0 (id=12633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYBLOB="2009df9ffb31574cf96d2e77dfa881793852831ac294b04b40b37d50cfa676d1", @ANYRES32=r0, @ANYBLOB="ac1414bb0000000000000000000000000000002032000000fc000000000000000000000000000001000000000000000007dd000000000000000000000000000004000000000000000000000000000020040000000000000006942a0e7f000000000000000000000000000000010000f1000000000800000000000000cc000000000000000800000000000000f800000000d1c0d03100000000000000040000000ac1527abbc3c7e0e42f7ab8032061c8aaa0f9c4b13b2667f57f7c48dad8378d942d61e518f726cd37bd7237493ed347eb53fefa652d61aed2e5cdeeebf29cac6e43abf6409ca54c72e90b25a55b27de14882f794d"], 0x13c}}, 0x844) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000002000010027bd7000000000000a0080800000f4031600000014000200fc02"], 0x30}}, 0x40000) r3 = socket$pptp(0x18, 0x1, 0x2) getsockopt(r3, 0x8, 0xdc, &(0x7f0000000040)=""/59, &(0x7f00000000c0)=0x3b) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}}, 0x4000000) 1.230349839s ago: executing program 1 (id=12634): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r6) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1ae9ff000707cf6e6b8d415eba8d090c2855396b1bd149b92da1abf3d5ce99c840ba3289c54cf632918cd99eff8f7f351e2dfbd7001f926d3e6a0d615c4ce424618f2037c20461797506e717c0997031c7", @ANYRES16=r8, @ANYBLOB="c4402cbd7000ffdbdf25150000006400018008000100", @ANYRES32=r7, @ANYBLOB="08000300020000001400020070696d36726567300000000000000000140002006970766c616e310000000000000000001400020077673200000000000000000000000000140002006e696376663000"/88], 0x78}, 0x1, 0x0, 0x0, 0x24004040}, 0x91) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x7, 0x8001, 0x7, 0x0, r3, 0x4, '\x00', r7, r9, 0x2, 0x2, 0x3, 0x6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000c40)="932b66a3ae492e0d1452dceb09a7350a314894aab5265f706dfa99176d72d8359a036764be2cfbcaf83163bbe23b8463fa27bd52997e266be9e4dd65f5def25ffda9637fde63e55b518864ab448fd056a991aeb25f3bac415c90bba508ad1436dfbfe2c4c9aef9a8d9bdfa6904d1c28edc007b8c87506f20e41148b87cd4faf4771c35bb9a7d263c2ff71fd0bccc56b76826fcab79f9dbfd624d0f0e089c", 0xfffffffb, r10}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000005c0)={r6, &(0x7f0000000140)='\x00', 0x404880, &(0x7f00000001c0)={@_ha_fsid={[0x3, 0x9]}, {0x7, 0x1, 0x0, 0x4}}, 0x7, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x5}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xf, 0x4, 0x8, 0x0, 0x110, 0x1, 0x0, '\x00', r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r13, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r15 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r15) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1.221643214s ago: executing program 0 (id=12635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) listen(0xffffffffffffffff, 0x568) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xc00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.158795796s ago: executing program 4 (id=12636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00e800", 0x18, 0x11, 0x0, @local, @empty, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x7fff}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a3c000000120a09"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "00e800", 0x18, 0x11, 0x0, @local, @empty, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x7fff}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a3c000000120a09"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) 890.525759ms ago: executing program 4 (id=12637): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000001940)=@ethtool_ringparam={0x10, 0x80000011, 0xe, 0x812, 0x0, 0x0, 0x2, 0x5, 0x7ff}}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 691.085229ms ago: executing program 4 (id=12638): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x2c020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00MG\x00'/25], 0x50) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000ff8b00000000000000000010ff020000000000000000000000000001"], 0x340a) 497.790506ms ago: executing program 4 (id=12639): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/97, 0x61}], 0x1}}], 0x1, 0x2, 0x0) 265.01941ms ago: executing program 1 (id=12640): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000480), 0x10) close(r0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x60, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x11, 0x4, 0x3, 0x3a, 0x7ff, 0x6a, 0x1ce2, 0xd9, 0x32, 0xe5c, @rand_addr=0x64010106, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88022eba18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071105b00000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 260.170991ms ago: executing program 3 (id=12641): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xffffffb0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@ifindex, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r1, r3, 0x2f, 0x2030, 0x4, @void, @void, @value=r4}, 0x20) 259.68018ms ago: executing program 4 (id=12642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200000}, 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x3, 0xb}, {0x7, 0xb}, {0x10, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000873}, 0x8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c00078008000640000000230800134000000002080012"], 0x68}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x80000}]}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0xa3}, 0x28) accept4(r1, &(0x7f00000002c0)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x80000) 102.06313ms ago: executing program 0 (id=12643): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 100.44887ms ago: executing program 1 (id=12644): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x11dc0, &(0x7f0000001380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0161b7", 0xda0, 0x2f, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "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"}, {}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x1, {0x403}}}, {0x8, 0x22eb, 0x5, {{0x1, 0x2, 0xdb, 0x1, 0x0, 0x1, 0x5, 0x7}, 0x2, {0x2, 0x5, 0x0, 0x13, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "95f44211a583ba234fd00a2b9b5f17801528b42d4416a9a4b62a437b530856b96636c144"}}}}}}}, 0x0) 47.970253ms ago: executing program 2 (id=12645): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x69) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100000b9b99fce2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x1}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x5f, 0x61]}}, &(0x7f00000000c0)=""/36, 0x35, 0x24, 0x1, 0xb}, 0x28) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000240)="d9952e438937bfbfe79f7561d6183bbcaf643baa899a4531793fad476b871f6b322fae668e0b4d77292a24a0d92f4b33aaa1226838241836c04e1ee708b70d7b64643399abf38b17f3390b293d50a85f91fc65f59d21") 0s ago: executing program 2 (id=12646): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r3}}}, @hopopts={{0x18, 0x29, 0x36, {0x8}}}], 0x40}}], 0x1, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', r3, r4, 0x2, 0x1, 0x3}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1517000007fe800008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d616376746170000200028008000500", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x8000002) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001c00)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x0, 0x1c0, 0xffffffff, 0x1c0, 0x2b8, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, 0x0, {[{{@ip={@private=0xa010100, @loopback, 0xff, 0x0, 'veth0_virt_wifi\x00', 'veth0\x00', {0xff}, {}, 0x11, 0x1, 0x10}, 0x0, 0x70, 0x388}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xa, @broadcast, @rand_addr=0x64010100, @gre_key=0x6, @gre_key=0xfffc}}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0xffffff00, 'ip_vti0\x00', 'rose0\x00', {}, {}, 0x21, 0x3, 0x20}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x7, @ipv4=@rand_addr=0x64010102, @ipv4=@remote, @icmp_id=0x68, @port=0x4e22}}}, {{@ip={@broadcast, @multicast1, 0xffffffff, 0xffffff00, 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x1d, 0x7, 0x10}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @loopback, @gre_key=0x1, @gre_key=0x3fd3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xd, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x68, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x862b, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000ffffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100020100009500000000000000c500feff0800000018000000060000000000000009000020bf910000000011696a728e5d155315b7a2200000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) kernel console output (not intermixed with test programs): 5716] netlink: 592 bytes leftover after parsing attributes in process `syz.1.11943'. [ 1407.595951][T25720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11946'. [ 1407.620625][T25721] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1407.962656][T25753] FAULT_INJECTION: forcing a failure. [ 1407.962656][T25753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1407.982277][T25753] CPU: 1 UID: 0 PID: 25753 Comm: syz.3.11953 Not tainted syzkaller #0 PREEMPT(full) [ 1407.982303][T25753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1407.982314][T25753] Call Trace: [ 1407.982321][T25753] [ 1407.982329][T25753] dump_stack_lvl+0xe8/0x150 [ 1407.982359][T25753] should_fail_ex+0x412/0x560 [ 1407.982385][T25753] _copy_from_iter+0x1d3/0x1670 [ 1407.982410][T25753] ? rep_movs_alternative+0x4a/0x90 [ 1407.982441][T25753] ? __pfx__copy_from_iter+0x10/0x10 [ 1407.982461][T25753] ? sock_alloc_send_pskb+0x896/0x990 [ 1407.982484][T25753] ? __pfx__copy_from_iter+0x10/0x10 [ 1407.982508][T25753] ? page_copy_sane+0x16a/0x270 [ 1407.982531][T25753] copy_page_from_iter+0xdd/0x170 [ 1407.982559][T25753] skb_copy_datagram_from_iter+0x306/0x710 [ 1407.982589][T25753] unix_stream_sendmsg+0x5f3/0xe80 [ 1407.982628][T25753] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1407.982653][T25753] ? aa_sock_msg_perm+0xda/0x1b0 [ 1407.982677][T25753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1407.982699][T25753] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1407.982718][T25753] ____sys_sendmsg+0xa68/0xad0 [ 1407.982751][T25753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1407.982787][T25753] ? import_iovec+0x73/0xa0 [ 1407.982814][T25753] ___sys_sendmsg+0x2a5/0x360 [ 1407.982846][T25753] ? __pfx____sys_sendmsg+0x10/0x10 [ 1407.982914][T25753] ? __fget_files+0x2a/0x420 [ 1407.982938][T25753] ? __fget_files+0x3a0/0x420 [ 1407.982972][T25753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1407.983001][T25753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1407.983036][T25753] ? __pfx_ksys_write+0x10/0x10 [ 1407.983067][T25753] do_syscall_64+0x14d/0xf80 [ 1407.983083][T25753] ? trace_irq_disable+0x3b/0x150 [ 1407.983110][T25753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.983128][T25753] ? clear_bhb_loop+0x40/0x90 [ 1407.983150][T25753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.983167][T25753] RIP: 0033:0x7fdd19d9c799 [ 1407.983185][T25753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.983201][T25753] RSP: 002b:00007fdd1ac94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.983220][T25753] RAX: ffffffffffffffda RBX: 00007fdd1a015fa0 RCX: 00007fdd19d9c799 [ 1407.983232][T25753] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1407.983241][T25753] RBP: 00007fdd1ac94090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.983252][T25753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1407.983262][T25753] R13: 00007fdd1a016038 R14: 00007fdd1a015fa0 R15: 00007ffc0f7bd218 [ 1407.983289][T25753] [ 1408.485691][T25768] netlink: 'syz.4.11957': attribute type 10 has an invalid length. [ 1408.494433][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11958'. [ 1409.136140][T25157] net_ratelimit: 30 callbacks suppressed [ 1409.136161][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1409.255620][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1409.376870][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1409.486059][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1409.597612][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1409.716324][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1409.836048][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1409.945607][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1410.056206][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1410.165562][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1410.633380][T25725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1410.905000][T25790] lo speed is unknown, defaulting to 1000 [ 1410.968895][T25804] netlink: 'syz.3.11966': attribute type 10 has an invalid length. [ 1411.204615][T25790] lo speed is unknown, defaulting to 1000 [ 1411.281122][T25813] FAULT_INJECTION: forcing a failure. [ 1411.281122][T25813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.295166][T25813] CPU: 0 UID: 0 PID: 25813 Comm: syz.3.11971 Not tainted syzkaller #0 PREEMPT(full) [ 1411.295192][T25813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1411.295204][T25813] Call Trace: [ 1411.295212][T25813] [ 1411.295220][T25813] dump_stack_lvl+0xe8/0x150 [ 1411.295251][T25813] should_fail_ex+0x412/0x560 [ 1411.295278][T25813] _copy_from_user+0x2d/0xb0 [ 1411.295303][T25813] ___sys_sendmsg+0x1c6/0x360 [ 1411.295334][T25813] ? __pfx____sys_sendmsg+0x10/0x10 [ 1411.295396][T25813] ? __fget_files+0x2a/0x420 [ 1411.295418][T25813] ? __fget_files+0x3a0/0x420 [ 1411.295449][T25813] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1411.295476][T25813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1411.295516][T25813] ? __pfx_ksys_write+0x10/0x10 [ 1411.295545][T25813] do_syscall_64+0x14d/0xf80 [ 1411.295562][T25813] ? trace_irq_disable+0x3b/0x150 [ 1411.295584][T25813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.295599][T25813] ? clear_bhb_loop+0x40/0x90 [ 1411.295619][T25813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.295637][T25813] RIP: 0033:0x7fdd19d9c799 [ 1411.295654][T25813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.295670][T25813] RSP: 002b:00007fdd1ac94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.295688][T25813] RAX: ffffffffffffffda RBX: 00007fdd1a015fa0 RCX: 00007fdd19d9c799 [ 1411.295700][T25813] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1411.295711][T25813] RBP: 00007fdd1ac94090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.295721][T25813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.295730][T25813] R13: 00007fdd1a016038 R14: 00007fdd1a015fa0 R15: 00007ffc0f7bd218 [ 1411.295755][T25813] [ 1411.560549][T25816] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11972'. [ 1411.573198][T25816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11972'. [ 1411.972830][T25832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11979'. [ 1411.986576][T25831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11979'. [ 1412.226078][T25847] FAULT_INJECTION: forcing a failure. [ 1412.226078][T25847] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.249291][T25845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11978'. [ 1412.279616][T25847] CPU: 0 UID: 0 PID: 25847 Comm: syz.0.11982 Not tainted syzkaller #0 PREEMPT(full) [ 1412.279642][T25847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1412.279653][T25847] Call Trace: [ 1412.279660][T25847] [ 1412.279668][T25847] dump_stack_lvl+0xe8/0x150 [ 1412.279697][T25847] should_fail_ex+0x412/0x560 [ 1412.279724][T25847] should_failslab+0xa8/0x100 [ 1412.279748][T25847] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1412.279777][T25847] ? __alloc_skb+0x186/0x7d0 [ 1412.279800][T25847] ? __alloc_skb+0x1d0/0x7d0 [ 1412.279818][T25847] ? __local_bh_enable_ip+0xd0/0x130 [ 1412.279846][T25847] __alloc_skb+0x1d0/0x7d0 [ 1412.279875][T25847] netlink_sendmsg+0x5d4/0xb40 [ 1412.279904][T25847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1412.279934][T25847] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1412.279956][T25847] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1412.279973][T25847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1412.279994][T25847] ____sys_sendmsg+0xa68/0xad0 [ 1412.280027][T25847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1412.280057][T25847] ? import_iovec+0x73/0xa0 [ 1412.280083][T25847] ___sys_sendmsg+0x2a5/0x360 [ 1412.280111][T25847] ? __pfx____sys_sendmsg+0x10/0x10 [ 1412.280165][T25847] ? __fget_files+0x2a/0x420 [ 1412.280187][T25847] ? __fget_files+0x3a0/0x420 [ 1412.280217][T25847] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1412.280244][T25847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1412.280277][T25847] ? __pfx_ksys_write+0x10/0x10 [ 1412.280307][T25847] do_syscall_64+0x14d/0xf80 [ 1412.280323][T25847] ? trace_irq_disable+0x3b/0x150 [ 1412.280346][T25847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.280365][T25847] ? clear_bhb_loop+0x40/0x90 [ 1412.280383][T25847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.280398][T25847] RIP: 0033:0x7fd4e379c799 [ 1412.280409][T25847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.280419][T25847] RSP: 002b:00007fd4e45c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1412.280433][T25847] RAX: ffffffffffffffda RBX: 00007fd4e3a15fa0 RCX: 00007fd4e379c799 [ 1412.280441][T25847] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1412.280448][T25847] RBP: 00007fd4e45c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.280454][T25847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.280460][T25847] R13: 00007fd4e3a16038 R14: 00007fd4e3a15fa0 R15: 00007ffd27146ce8 [ 1412.280476][T25847] [ 1412.863220][T25855] netlink: 'syz.0.11985': attribute type 1 has an invalid length. [ 1412.949344][T25870] netlink: 'syz.1.11988': attribute type 10 has an invalid length. [ 1412.969831][T25870] netlink: 55 bytes leftover after parsing attributes in process `syz.1.11988'. [ 1412.987556][T25855] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1413.506909][T25885] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11994'. [ 1413.640558][T13712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1413.659871][T13712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1413.668499][T13712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1413.683085][T13712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1413.700862][T13712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1413.937402][T25891] lo speed is unknown, defaulting to 1000 [ 1414.055193][T25920] FAULT_INJECTION: forcing a failure. [ 1414.055193][T25920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1414.080658][T25920] CPU: 0 UID: 0 PID: 25920 Comm: syz.2.12001 Not tainted syzkaller #0 PREEMPT(full) [ 1414.080683][T25920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1414.080693][T25920] Call Trace: [ 1414.080701][T25920] [ 1414.080709][T25920] dump_stack_lvl+0xe8/0x150 [ 1414.080750][T25920] should_fail_ex+0x412/0x560 [ 1414.080777][T25920] _copy_from_iter+0x1d3/0x1670 [ 1414.080803][T25920] ? rcu_is_watching+0x15/0xb0 [ 1414.080832][T25920] ? __pfx__copy_from_iter+0x10/0x10 [ 1414.080860][T25920] ? netlink_sendmsg+0x650/0xb40 [ 1414.080885][T25920] ? skb_put+0x11b/0x210 [ 1414.080912][T25920] netlink_sendmsg+0x6c0/0xb40 [ 1414.080939][T25920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.080962][T25920] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1414.080984][T25920] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1414.081004][T25920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.081022][T25920] ____sys_sendmsg+0xa68/0xad0 [ 1414.081051][T25920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1414.081081][T25920] ? import_iovec+0x73/0xa0 [ 1414.081109][T25920] ___sys_sendmsg+0x2a5/0x360 [ 1414.081138][T25920] ? __pfx____sys_sendmsg+0x10/0x10 [ 1414.081194][T25920] ? __fget_files+0x2a/0x420 [ 1414.081221][T25920] ? __fget_files+0x3a0/0x420 [ 1414.081254][T25920] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1414.081281][T25920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1414.081313][T25920] ? __pfx_ksys_write+0x10/0x10 [ 1414.081342][T25920] do_syscall_64+0x14d/0xf80 [ 1414.081357][T25920] ? trace_irq_disable+0x3b/0x150 [ 1414.081380][T25920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.081398][T25920] ? clear_bhb_loop+0x40/0x90 [ 1414.081419][T25920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.081435][T25920] RIP: 0033:0x7f08a279c799 [ 1414.081454][T25920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.081468][T25920] RSP: 002b:00007f08a35ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1414.081488][T25920] RAX: ffffffffffffffda RBX: 00007f08a2a15fa0 RCX: 00007f08a279c799 [ 1414.081501][T25920] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1414.081511][T25920] RBP: 00007f08a35ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.081522][T25920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.081532][T25920] R13: 00007f08a2a16038 R14: 00007f08a2a15fa0 R15: 00007ffd06348e58 [ 1414.081557][T25920] [ 1414.430630][T25924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12002'. [ 1414.441880][T25924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12002'. [ 1414.466430][T19041] net_ratelimit: 28 callbacks suppressed [ 1414.466448][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1415.763830][ T5827] Bluetooth: hci3: command tx timeout [ 1416.412685][T13712] Bluetooth: hci1: command 0x0406 tx timeout [ 1416.658814][T25891] lo speed is unknown, defaulting to 1000 [ 1416.660600][T25941] netlink: 'syz.1.12008': attribute type 4 has an invalid length. [ 1416.679759][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1416.746348][T25947] lo speed is unknown, defaulting to 1000 [ 1416.866532][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1416.976126][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1417.098422][T25965] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12015'. [ 1417.127458][T25965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1417.158761][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1417.352234][T25972] tipc: Enabling of bearer rejected, failed to enable media [ 1417.392832][T25956] sock: sock_timestamping_bind_phc: sock not bind to device [ 1417.422926][T25947] lo speed is unknown, defaulting to 1000 [ 1417.436256][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1417.644326][T25977] netlink: 'syz.1.12018': attribute type 1 has an invalid length. [ 1417.676905][T25977] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12018'. [ 1417.720768][T25977] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12018'. [ 1417.746516][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1417.762671][ T9779] vlan1: left promiscuous mode [ 1417.780760][ T9779] bridge_slave_0: left promiscuous mode [ 1417.800813][ T9779] bridge0: port 1(vlan1) entered disabled state [ 1417.811092][T25977] netlink: 658 bytes leftover after parsing attributes in process `syz.1.12018'. [ 1417.845575][T13712] Bluetooth: hci3: command tx timeout [ 1417.984534][ T9779] pimreg3: left allmulticast mode [ 1418.358275][ T9779] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1418.619444][ T9779] bond8 (unregistering): (slave bridge6): Releasing active interface [ 1418.660137][ T9779] bond8 (unregistering): (slave bridge7): Releasing active interface [ 1418.804881][ T9779] bond0 (unregistering): Released all slaves [ 1418.815091][ T9779] bond1 (unregistering): Released all slaves [ 1418.827953][ T9779] bond2 (unregistering): Released all slaves [ 1418.842430][ T9779] bond3 (unregistering): Released all slaves [ 1418.860584][ T9779] bond4 (unregistering): Released all slaves [ 1418.875678][ T9779] bond5 (unregistering): Released all slaves [ 1418.888755][ T9779] bond6 (unregistering): Released all slaves [ 1418.901891][ T9779] bond7 (unregistering): Released all slaves [ 1418.921832][ T9779] bond8 (unregistering): Released all slaves [ 1418.934112][ T9779] bond9 (unregistering): Released all slaves [ 1418.948055][ T9779] bond10 (unregistering): Released all slaves [ 1418.970084][ T9779] bond11 (unregistering): Released all slaves [ 1418.985078][ T9779] bond12 (unregistering): Released all slaves [ 1419.175475][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1419.241236][ T9779] tipc: Disabling bearer [ 1419.295030][ T9779] tipc: Disabling bearer [ 1419.307650][ T9779] tipc: Left network mode [ 1419.916338][T13712] Bluetooth: hci3: command tx timeout [ 1421.595285][T26036] gre0: entered promiscuous mode [ 1421.601144][T26036] gre0: entered allmulticast mode [ 1421.636502][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1421.740093][T26045] netlink: 'syz.1.12026': attribute type 10 has an invalid length. [ 1421.809449][T26045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.818284][T26045] team0: Port device bond0 added [ 1421.870647][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1421.894467][T26052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12028'. [ 1421.920341][T25891] chnl_net:caif_netlink_parms(): no params data found [ 1421.995627][T13712] Bluetooth: hci3: command tx timeout [ 1422.038200][T26054] lo speed is unknown, defaulting to 1000 [ 1422.062991][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1422.489614][T26054] lo speed is unknown, defaulting to 1000 [ 1422.499453][T25891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.528707][T25891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.545728][T25891] bridge_slave_0: entered allmulticast mode [ 1422.610157][T25891] bridge_slave_0: entered promiscuous mode [ 1422.647447][T25891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.667550][T25891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.683207][T25891] bridge_slave_1: entered allmulticast mode [ 1422.704038][T25891] bridge_slave_1: entered promiscuous mode [ 1422.939213][T25891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.999567][T25891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.107599][T25891] team0: Port device team_slave_0 added [ 1423.119546][T25891] team0: Port device team_slave_1 added [ 1423.246299][T25891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.263498][T25891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.299112][T25891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.337232][T25891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.357125][T25891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.464008][T25891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.521224][T26098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12037'. [ 1423.525916][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1423.531886][T26098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12037'. [ 1423.549327][T26098] netlink: 'syz.3.12037': attribute type 14 has an invalid length. [ 1423.557967][T26098] netlink: 'syz.3.12037': attribute type 13 has an invalid length. [ 1423.700970][T25891] hsr_slave_0: entered promiscuous mode [ 1423.708484][T25891] hsr_slave_1: entered promiscuous mode [ 1424.492373][ T9779] hsr_slave_0: left promiscuous mode [ 1424.508114][ T9779] hsr_slave_1: left promiscuous mode [ 1424.527539][ T9779] veth1: left allmulticast mode [ 1424.532491][ T9779] veth0_vlan: left promiscuous mode [ 1424.567232][T26128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12042'. [ 1424.622536][T26129] sctp: [Deprecated]: syz.1.12042 (pid 26129) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1424.622536][T26129] Use struct sctp_sack_info instead [ 1424.741939][T25157] smc: removing ib device syz1 [ 1424.833766][ T9779] team0 (unregistering): Port device vxcan1 removed [ 1424.978226][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1425.227819][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1425.237956][T26142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12046'. [ 1425.379652][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1425.479009][T26149] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12046'. [ 1425.569877][T26144] lo speed is unknown, defaulting to 1000 [ 1425.580906][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1425.730201][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1425.906618][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1426.345007][T25891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1426.393551][T25891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1426.412559][T25891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1426.458311][T25891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1426.707307][ T5930] net_ratelimit: 1 callbacks suppressed [ 1426.707323][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1426.805115][T25891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.898135][T25891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.905209][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1426.955659][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.962877][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.003881][T25159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.011074][T25159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.087216][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1427.188907][T26144] lo speed is unknown, defaulting to 1000 [ 1427.196646][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1427.346593][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1427.466697][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1427.577653][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1427.708257][T25891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.717399][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1427.818658][T25891] veth0_vlan: entered promiscuous mode [ 1427.826649][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1427.850737][T25891] veth1_vlan: entered promiscuous mode [ 1427.948870][T25891] veth0_macvtap: entered promiscuous mode [ 1428.003806][T25891] veth1_macvtap: entered promiscuous mode [ 1428.198834][T25891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.207176][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1428.224032][T25891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.256161][T25159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.264933][T25159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.389055][T25159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.422890][T25159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.554812][T26231] : entered promiscuous mode [ 1429.318349][T25159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.329292][T25159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.458750][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1429.623855][T26252] nbd: couldn't find a device at index 2 [ 1429.643922][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.665721][T26252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12062'. [ 1429.695865][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.894687][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11992'. [ 1429.909546][T26263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12064'. [ 1430.016826][T26270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11992'. [ 1430.027708][T26265] geneve2: entered promiscuous mode [ 1430.032946][T26265] geneve2: entered allmulticast mode [ 1430.159983][T26270] ip6gretap1: entered promiscuous mode [ 1430.175524][T26270] ip6gretap1: entered allmulticast mode [ 1430.639897][ T9779] IPVS: stop unused estimator thread 0... [ 1430.878417][T26273] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1430.888146][T26273] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1431.200010][T26325] netlink: 292 bytes leftover after parsing attributes in process `syz.1.12078'. [ 1431.220702][T26325] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12078'. [ 1431.299877][T26325] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12078'. [ 1431.806779][ T9779] net_ratelimit: 17 callbacks suppressed [ 1431.806800][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1431.897133][T26359] bond0: entered promiscuous mode [ 1431.906585][T26359] batadv0: entered promiscuous mode [ 1431.913640][T26359] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1431.934052][T26359] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1431.946635][T26359] bond0: left promiscuous mode [ 1431.957149][T26359] batadv0: left promiscuous mode [ 1432.000232][T26368] rdma_rxe: rxe_newlink: failed to add lo [ 1432.008824][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1432.130213][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1432.192268][T26373] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 1432.259609][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1432.348183][T26376] netlink: 'syz.3.12088': attribute type 11 has an invalid length. [ 1432.387642][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1432.523265][T26386] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12090'. [ 1432.579959][T26379] bond1: option arp_all_targets: invalid value (129) [ 1432.587458][T26358] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1432.595758][T26358] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1432.650110][T26379] bond1 (unregistering): Released all slaves [ 1432.745652][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1432.866507][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1432.881015][T26397] sock: sock_timestamping_bind_phc: sock not bind to device [ 1432.930707][T26403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12094'. [ 1433.017069][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1433.053328][T26401] team_slave_0: entered promiscuous mode [ 1433.059237][T26401] team_slave_1: entered promiscuous mode [ 1433.087808][T26401] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1433.135468][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1433.651046][T26432] netlink: 'syz.3.12098': attribute type 11 has an invalid length. [ 1435.125678][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1435.133774][ C0] lec:lec_tx_timeout: lec0 [ 1435.407828][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12105'. [ 1435.481666][T26476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12107'. [ 1435.601975][T25157] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.611534][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12105'. [ 1435.631709][T25157] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.647784][T25157] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.668499][T25157] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1435.738594][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12105'. [ 1436.334672][T26483] FAULT_INJECTION: forcing a failure. [ 1436.334672][T26483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.375809][T26483] CPU: 1 UID: 0 PID: 26483 Comm: syz.3.12109 Not tainted syzkaller #0 PREEMPT(full) [ 1436.375834][T26483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1436.375845][T26483] Call Trace: [ 1436.375853][T26483] [ 1436.375861][T26483] dump_stack_lvl+0xe8/0x150 [ 1436.375892][T26483] should_fail_ex+0x412/0x560 [ 1436.375918][T26483] _copy_from_iter+0x1d3/0x1670 [ 1436.375944][T26483] ? rep_movs_alternative+0x4a/0x90 [ 1436.375976][T26483] ? __pfx__copy_from_iter+0x10/0x10 [ 1436.375995][T26483] ? sock_alloc_send_pskb+0x896/0x990 [ 1436.376020][T26483] ? __pfx__copy_from_iter+0x10/0x10 [ 1436.376049][T26483] ? page_copy_sane+0x16a/0x270 [ 1436.376074][T26483] copy_page_from_iter+0xdd/0x170 [ 1436.376100][T26483] skb_copy_datagram_from_iter+0x306/0x710 [ 1436.376131][T26483] unix_stream_sendmsg+0x5f3/0xe80 [ 1436.376170][T26483] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1436.376196][T26483] ? aa_sock_msg_perm+0xda/0x1b0 [ 1436.376218][T26483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1436.376239][T26483] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1436.376257][T26483] ____sys_sendmsg+0xa68/0xad0 [ 1436.376292][T26483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1436.376326][T26483] ? import_iovec+0x73/0xa0 [ 1436.376354][T26483] ___sys_sendmsg+0x2a5/0x360 [ 1436.376385][T26483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1436.376443][T26483] ? __fget_files+0x2a/0x420 [ 1436.376467][T26483] ? __fget_files+0x3a0/0x420 [ 1436.376501][T26483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1436.376530][T26483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1436.376564][T26483] ? __pfx_ksys_write+0x10/0x10 [ 1436.376594][T26483] do_syscall_64+0x14d/0xf80 [ 1436.376611][T26483] ? trace_irq_disable+0x3b/0x150 [ 1436.376636][T26483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.376654][T26483] ? clear_bhb_loop+0x40/0x90 [ 1436.376676][T26483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.376694][T26483] RIP: 0033:0x7fdd19d9c799 [ 1436.376719][T26483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.376734][T26483] RSP: 002b:00007fdd1ac94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.376754][T26483] RAX: ffffffffffffffda RBX: 00007fdd1a015fa0 RCX: 00007fdd19d9c799 [ 1436.376767][T26483] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1436.376779][T26483] RBP: 00007fdd1ac94090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.376790][T26483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1436.376801][T26483] R13: 00007fdd1a016038 R14: 00007fdd1a015fa0 R15: 00007ffc0f7bd218 [ 1436.376831][T26483] [ 1436.516321][T26492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12108'. [ 1436.758662][T26492] bridge0: port 1(macvtap0) entered blocking state [ 1436.768702][T26492] bridge0: port 1(macvtap0) entered disabled state [ 1436.785888][T26492] macvtap0: entered allmulticast mode [ 1436.793800][T26492] macvtap0: left allmulticast mode [ 1436.810838][T26501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12114'. [ 1436.857217][ T9779] net_ratelimit: 11 callbacks suppressed [ 1436.857239][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1437.005603][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1437.125628][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1437.245554][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1437.378279][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1437.510214][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1437.607085][T26528] FAULT_INJECTION: forcing a failure. [ 1437.607085][T26528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.626382][T26528] CPU: 0 UID: 0 PID: 26528 Comm: syz.3.12122 Not tainted syzkaller #0 PREEMPT(full) [ 1437.626408][T26528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1437.626419][T26528] Call Trace: [ 1437.626427][T26528] [ 1437.626435][T26528] dump_stack_lvl+0xe8/0x150 [ 1437.626465][T26528] should_fail_ex+0x412/0x560 [ 1437.626491][T26528] _copy_from_iter+0x1d3/0x1670 [ 1437.626517][T26528] ? rep_movs_alternative+0x4a/0x90 [ 1437.626547][T26528] ? __pfx__copy_from_iter+0x10/0x10 [ 1437.626567][T26528] ? sock_alloc_send_pskb+0x896/0x990 [ 1437.626591][T26528] ? __pfx__copy_from_iter+0x10/0x10 [ 1437.626615][T26528] ? page_copy_sane+0x16a/0x270 [ 1437.626650][T26528] copy_page_from_iter+0xdd/0x170 [ 1437.626677][T26528] skb_copy_datagram_from_iter+0x306/0x710 [ 1437.626705][T26528] unix_stream_sendmsg+0x5f3/0xe80 [ 1437.626743][T26528] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1437.626769][T26528] ? aa_sock_msg_perm+0xda/0x1b0 [ 1437.626792][T26528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1437.626813][T26528] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1437.626832][T26528] ____sys_sendmsg+0xa68/0xad0 [ 1437.626866][T26528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1437.626901][T26528] ? import_iovec+0x73/0xa0 [ 1437.626929][T26528] ___sys_sendmsg+0x2a5/0x360 [ 1437.626960][T26528] ? __pfx____sys_sendmsg+0x10/0x10 [ 1437.627019][T26528] ? __fget_files+0x2a/0x420 [ 1437.627044][T26528] ? __fget_files+0x3a0/0x420 [ 1437.627078][T26528] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1437.627106][T26528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1437.627137][T26528] ? __pfx_ksys_write+0x10/0x10 [ 1437.627166][T26528] do_syscall_64+0x14d/0xf80 [ 1437.627183][T26528] ? trace_irq_disable+0x3b/0x150 [ 1437.627208][T26528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.627226][T26528] ? clear_bhb_loop+0x40/0x90 [ 1437.627248][T26528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.627266][T26528] RIP: 0033:0x7fdd19d9c799 [ 1437.627284][T26528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.627299][T26528] RSP: 002b:00007fdd1ac94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1437.627319][T26528] RAX: ffffffffffffffda RBX: 00007fdd1a015fa0 RCX: 00007fdd19d9c799 [ 1437.627332][T26528] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1437.627344][T26528] RBP: 00007fdd1ac94090 R08: 0000000000000000 R09: 0000000000000000 [ 1437.627355][T26528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1437.627365][T26528] R13: 00007fdd1a016038 R14: 00007fdd1a015fa0 R15: 00007ffc0f7bd218 [ 1437.627395][T26528] [ 1437.665807][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1438.005691][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1438.114338][T26540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12124'. [ 1438.123776][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1438.139781][T26538] lo speed is unknown, defaulting to 1000 [ 1438.169596][T26541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12126'. [ 1438.245618][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1438.290479][T26525] netlink: 'syz.1.12121': attribute type 16 has an invalid length. [ 1438.325669][T26525] netlink: 'syz.1.12121': attribute type 17 has an invalid length. [ 1438.473196][T26542] lo speed is unknown, defaulting to 1000 [ 1438.570652][T26546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1438.591956][T26546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12128'. [ 1438.628245][T26546] lo: Caught tx_queue_len zero misconfig [ 1438.755724][T26555] ip6t_srh: unknown srh invflags 4000 [ 1438.800204][T26538] lo speed is unknown, defaulting to 1000 [ 1438.860432][T26559] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1438.937354][T26560] lo speed is unknown, defaulting to 1000 [ 1438.948634][T26563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12135'. [ 1439.334489][T26542] lo speed is unknown, defaulting to 1000 [ 1439.943565][T26560] lo speed is unknown, defaulting to 1000 [ 1440.826261][T26603] netlink: 'syz.3.12142': attribute type 1 has an invalid length. [ 1440.878238][ T9258] lec:lec_start_xmit: lec0:No lecd attached [ 1440.945174][T26603] tipc: Enabling of bearer rejected, failed to enable media [ 1441.110080][T26611] __nla_validate_parse: 3 callbacks suppressed [ 1441.110109][T26611] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12145'. [ 1441.169804][T26606] syzkaller1: entered promiscuous mode [ 1441.175326][T26606] syzkaller1: entered allmulticast mode [ 1441.406678][T26617] netlink: 'syz.0.12146': attribute type 30 has an invalid length. [ 1441.458429][T26618] netlink: 'syz.0.12146': attribute type 1 has an invalid length. [ 1441.470957][T26618] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12146'. [ 1441.490155][T26618] netlink: 1 bytes leftover after parsing attributes in process `syz.0.12146'. [ 1441.499798][T26618] netlink: 'syz.0.12146': attribute type 8 has an invalid length. [ 1441.508414][T26618] netlink: 630 bytes leftover after parsing attributes in process `syz.0.12146'. [ 1441.916579][ T5927] net_ratelimit: 14 callbacks suppressed [ 1441.916602][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1442.015095][T26630] netlink: 'syz.3.12149': attribute type 3 has an invalid length. [ 1442.131207][T26624] lo speed is unknown, defaulting to 1000 [ 1442.206137][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1442.327694][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1442.446850][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1442.566467][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1442.578918][T26649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12153'. [ 1442.676831][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1442.786018][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1442.916005][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1443.025610][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1443.145679][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1443.303475][T26661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12156'. [ 1443.367278][T26624] lo speed is unknown, defaulting to 1000 [ 1443.850134][T26680] xt_CT: No such helper "syz1" [ 1443.932998][T26689] tipc: Resetting bearer [ 1444.007677][T26690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12163'. [ 1444.413066][T26701] vlan0: entered allmulticast mode [ 1444.419405][T26701] bridge_slave_0: entered allmulticast mode [ 1445.173456][T26756] netlink: 'syz.2.12182': attribute type 1 has an invalid length. [ 1445.223294][T26756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12182'. [ 1445.265316][T26756] netlink: 658 bytes leftover after parsing attributes in process `syz.2.12182'. [ 1445.309086][T26756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12182'. [ 1445.399287][T26770] netlink: 'syz.4.12185': attribute type 2 has an invalid length. [ 1445.708041][T26786] tipc: Bearer : already 2 bearers with priority 10 [ 1445.719646][T26786] tipc: Bearer : trying with adjusted priority [ 1445.727235][T26786] tipc: Enabling not permitted [ 1445.735772][T26786] tipc: Enabling of bearer rejected, failed to enable media [ 1446.155958][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 1446.164032][ C0] lec:lec_tx_timeout: lec0 [ 1446.393876][T26831] __nla_validate_parse: 5 callbacks suppressed [ 1446.393906][T26831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12200'. [ 1446.749352][T26843] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12203'. [ 1446.974306][T26861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12207'. [ 1446.988644][ T6227] net_ratelimit: 29 callbacks suppressed [ 1446.988667][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.084723][T26864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1447.139702][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.265574][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.375616][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.428171][T26882] netlink: 124 bytes leftover after parsing attributes in process `syz.3.12212'. [ 1447.486885][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.615552][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.725570][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.746631][T26905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12218'. [ 1447.818999][T26905] syzkaller1: entered promiscuous mode [ 1447.865516][T26905] syzkaller1: entered allmulticast mode [ 1447.959352][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1447.994321][T26920] rose4: entered allmulticast mode [ 1448.195692][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1448.337877][T26939] netlink: 'syz.4.12224': attribute type 1 has an invalid length. [ 1448.346697][T26939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12224'. [ 1448.401782][T26939] NCSI netlink: No device for ifindex 0 [ 1448.430160][T26946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12224'. [ 1448.688120][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12229'. [ 1448.721548][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12229'. [ 1448.816561][T26961] netlink: 'syz.0.12229': attribute type 3 has an invalid length. [ 1448.824418][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12229'. [ 1449.206599][T26939] lo speed is unknown, defaulting to 1000 [ 1449.361755][T26982] x_tables: duplicate underflow at hook 1 [ 1449.701052][T26995] FAULT_INJECTION: forcing a failure. [ 1449.701052][T26995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1449.768417][T26995] CPU: 0 UID: 0 PID: 26995 Comm: syz.0.12235 Not tainted syzkaller #0 PREEMPT(full) [ 1449.768444][T26995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1449.768456][T26995] Call Trace: [ 1449.768464][T26995] [ 1449.768473][T26995] dump_stack_lvl+0xe8/0x150 [ 1449.768504][T26995] should_fail_ex+0x412/0x560 [ 1449.768530][T26995] _copy_from_iter+0x1d3/0x1670 [ 1449.768556][T26995] ? rep_movs_alternative+0x4a/0x90 [ 1449.768587][T26995] ? __pfx__copy_from_iter+0x10/0x10 [ 1449.768607][T26995] ? sock_alloc_send_pskb+0x896/0x990 [ 1449.768632][T26995] ? __pfx__copy_from_iter+0x10/0x10 [ 1449.768657][T26995] ? page_copy_sane+0x16a/0x270 [ 1449.768681][T26995] copy_page_from_iter+0xdd/0x170 [ 1449.768709][T26995] skb_copy_datagram_from_iter+0x306/0x710 [ 1449.768738][T26995] unix_stream_sendmsg+0x5f3/0xe80 [ 1449.768776][T26995] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1449.768801][T26995] ? aa_sock_msg_perm+0xda/0x1b0 [ 1449.768824][T26995] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1449.768846][T26995] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1449.768864][T26995] ____sys_sendmsg+0xa68/0xad0 [ 1449.768898][T26995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1449.768933][T26995] ? import_iovec+0x73/0xa0 [ 1449.768960][T26995] ___sys_sendmsg+0x2a5/0x360 [ 1449.768995][T26995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1449.769060][T26995] ? __fget_files+0x2a/0x420 [ 1449.769087][T26995] ? __fget_files+0x3a0/0x420 [ 1449.769122][T26995] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1449.769150][T26995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1449.769185][T26995] ? __pfx_ksys_write+0x10/0x10 [ 1449.769215][T26995] do_syscall_64+0x14d/0xf80 [ 1449.769231][T26995] ? trace_irq_disable+0x3b/0x150 [ 1449.769256][T26995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.769274][T26995] ? clear_bhb_loop+0x40/0x90 [ 1449.769297][T26995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.769315][T26995] RIP: 0033:0x7f0753b9c799 [ 1449.769333][T26995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.769349][T26995] RSP: 002b:00007f0754974028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1449.769368][T26995] RAX: ffffffffffffffda RBX: 00007f0753e15fa0 RCX: 00007f0753b9c799 [ 1449.769382][T26995] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1449.769394][T26995] RBP: 00007f0754974090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.769405][T26995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1449.769416][T26995] R13: 00007f0753e16038 R14: 00007f0753e15fa0 R15: 00007ffdf944e4d8 [ 1449.769445][T26995] [ 1450.552611][T26939] lo speed is unknown, defaulting to 1000 [ 1451.247239][T27044] netlink: 'syz.0.12246': attribute type 1 has an invalid length. [ 1451.433195][T27053] FAULT_INJECTION: forcing a failure. [ 1451.433195][T27053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.475088][T27053] CPU: 0 UID: 0 PID: 27053 Comm: syz.3.12248 Not tainted syzkaller #0 PREEMPT(full) [ 1451.475113][T27053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1451.475124][T27053] Call Trace: [ 1451.475131][T27053] [ 1451.475138][T27053] dump_stack_lvl+0xe8/0x150 [ 1451.475167][T27053] should_fail_ex+0x412/0x560 [ 1451.475191][T27053] _copy_from_iter+0x1d3/0x1670 [ 1451.475215][T27053] ? rep_movs_alternative+0x4a/0x90 [ 1451.475245][T27053] ? __pfx__copy_from_iter+0x10/0x10 [ 1451.475263][T27053] ? sock_alloc_send_pskb+0x896/0x990 [ 1451.475287][T27053] ? __pfx__copy_from_iter+0x10/0x10 [ 1451.475310][T27053] ? page_copy_sane+0x16a/0x270 [ 1451.475333][T27053] copy_page_from_iter+0xdd/0x170 [ 1451.475359][T27053] skb_copy_datagram_from_iter+0x306/0x710 [ 1451.475398][T27053] unix_stream_sendmsg+0x5f3/0xe80 [ 1451.475431][T27053] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1451.475454][T27053] ? aa_sock_msg_perm+0xda/0x1b0 [ 1451.475476][T27053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1451.475496][T27053] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1451.475512][T27053] ____sys_sendmsg+0xa68/0xad0 [ 1451.475545][T27053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1451.475575][T27053] ? import_iovec+0x73/0xa0 [ 1451.475601][T27053] ___sys_sendmsg+0x2a5/0x360 [ 1451.475631][T27053] ? __pfx____sys_sendmsg+0x10/0x10 [ 1451.475688][T27053] ? __fget_files+0x2a/0x420 [ 1451.475712][T27053] ? __fget_files+0x3a0/0x420 [ 1451.475745][T27053] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1451.475773][T27053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1451.475807][T27053] ? __pfx_ksys_write+0x10/0x10 [ 1451.475833][T27053] do_syscall_64+0x14d/0xf80 [ 1451.475848][T27053] ? trace_irq_disable+0x3b/0x150 [ 1451.475871][T27053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.475887][T27053] ? clear_bhb_loop+0x40/0x90 [ 1451.475908][T27053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.475924][T27053] RIP: 0033:0x7fdd19d9c799 [ 1451.475942][T27053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.475958][T27053] RSP: 002b:00007fdd1ac94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.475978][T27053] RAX: ffffffffffffffda RBX: 00007fdd1a015fa0 RCX: 00007fdd19d9c799 [ 1451.475991][T27053] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1451.476002][T27053] RBP: 00007fdd1ac94090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.476013][T27053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1451.476024][T27053] R13: 00007fdd1a016038 R14: 00007fdd1a015fa0 R15: 00007ffc0f7bd218 [ 1451.476052][T27053] [ 1451.939454][T27064] netlink: 'syz.2.12249': attribute type 64 has an invalid length. [ 1452.189988][T27069] bond1: (slave bridge1): Releasing active interface [ 1452.200366][T27069] bond2: (slave wireguard0): Releasing backup interface [ 1452.236174][ T5928] net_ratelimit: 16 callbacks suppressed [ 1452.236193][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1452.271349][T27069] syzkaller0: entered promiscuous mode [ 1452.287859][T27069] syzkaller0: entered allmulticast mode [ 1452.527937][T27077] netlink: 'syz.2.12256': attribute type 1 has an invalid length. [ 1452.545743][T27077] netlink: 'syz.2.12256': attribute type 11 has an invalid length. [ 1452.553706][T27077] __nla_validate_parse: 8 callbacks suppressed [ 1452.553720][T27077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12256'. [ 1452.560225][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1452.669957][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1452.789326][T27083] lo speed is unknown, defaulting to 1000 [ 1452.826491][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1452.946929][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1453.055590][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1453.166447][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1453.262753][T27083] lo speed is unknown, defaulting to 1000 [ 1453.266275][T27115] netlink: 'syz.1.12269': attribute type 5 has an invalid length. [ 1453.286009][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1453.412689][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1453.553951][T27122] C: renamed from team_slave_0 (while UP) [ 1453.564863][T27122] netlink: 'syz.1.12272': attribute type 3 has an invalid length. [ 1453.575043][T27122] netlink: 116 bytes leftover after parsing attributes in process `syz.1.12272'. [ 1453.595323][T27122] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1453.721601][T27128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12274'. [ 1453.757125][T27129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12271'. [ 1453.780480][T12235] IPVS: starting estimator thread 0... [ 1453.900630][T27134] IPVS: using max 34 ests per chain, 81600 per kthread [ 1454.290102][T27155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12283'. [ 1454.491155][T27155] team0: Port device bond0 removed [ 1454.592789][T27155] bond0: (slave bridge_slave_1): Releasing backup interface [ 1454.779029][T27169] netlink: 'syz.0.12285': attribute type 4 has an invalid length. [ 1454.794531][T27176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12285'. [ 1454.840011][T27177] xfrm0: entered promiscuous mode [ 1454.845300][T27177] xfrm0: entered allmulticast mode [ 1454.971065][T27165] lo speed is unknown, defaulting to 1000 [ 1454.981921][T27162] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1455.169694][T27186] veth0_to_bridge: entered promiscuous mode [ 1455.228703][T27165] lo speed is unknown, defaulting to 1000 [ 1455.407890][T27188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.415241][T27188] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1455.446544][T27188] bond0: (slave gre0): Error -95 calling set_mac_address [ 1455.459208][T27183] veth0_to_bridge: left promiscuous mode [ 1455.618615][T27200] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12289'. [ 1455.949790][T27221] FAULT_INJECTION: forcing a failure. [ 1455.949790][T27221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.979707][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12295'. [ 1455.991134][T27221] CPU: 0 UID: 0 PID: 27221 Comm: syz.4.12298 Not tainted syzkaller #0 PREEMPT(full) [ 1455.991161][T27221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1455.991173][T27221] Call Trace: [ 1455.991180][T27221] [ 1455.991188][T27221] dump_stack_lvl+0xe8/0x150 [ 1455.991218][T27221] should_fail_ex+0x412/0x560 [ 1455.991245][T27221] _copy_from_iter+0x1d3/0x1670 [ 1455.991273][T27221] ? rcu_is_watching+0x15/0xb0 [ 1455.991303][T27221] ? __pfx__copy_from_iter+0x10/0x10 [ 1455.991341][T27221] ? netlink_sendmsg+0x650/0xb40 [ 1455.991364][T27221] ? skb_put+0x11b/0x210 [ 1455.991393][T27221] netlink_sendmsg+0x6c0/0xb40 [ 1455.991424][T27221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.991450][T27221] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1455.991473][T27221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1455.991494][T27221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.991515][T27221] ____sys_sendmsg+0xa68/0xad0 [ 1455.991551][T27221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1455.991585][T27221] ? import_iovec+0x73/0xa0 [ 1455.991613][T27221] ___sys_sendmsg+0x2a5/0x360 [ 1455.991644][T27221] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.991703][T27221] ? __fget_files+0x2a/0x420 [ 1455.991728][T27221] ? __fget_files+0x3a0/0x420 [ 1455.991762][T27221] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1455.991791][T27221] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1455.991826][T27221] ? __pfx_ksys_write+0x10/0x10 [ 1455.991856][T27221] do_syscall_64+0x14d/0xf80 [ 1455.991873][T27221] ? trace_irq_disable+0x3b/0x150 [ 1455.991897][T27221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.991914][T27221] ? clear_bhb_loop+0x40/0x90 [ 1455.991934][T27221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.991949][T27221] RIP: 0033:0x7fd5f6d9c799 [ 1455.991965][T27221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.991980][T27221] RSP: 002b:00007fd5f7cd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.991996][T27221] RAX: ffffffffffffffda RBX: 00007fd5f7016090 RCX: 00007fd5f6d9c799 [ 1455.992009][T27221] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1455.992019][T27221] RBP: 00007fd5f7cd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.992029][T27221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.992039][T27221] R13: 00007fd5f7016128 R14: 00007fd5f7016090 R15: 00007ffc39dc6878 [ 1455.992066][T27221] [ 1456.239794][T27190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1456.455877][T27228] mac80211_hwsim hwsim168 ¶êæ`: renamed from wlan0 [ 1456.646169][T27245] netlink: 'syz.2.12304': attribute type 10 has an invalid length. [ 1456.729530][T27245] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1456.749253][T27250] netlink: 'syz.4.12305': attribute type 1 has an invalid length. [ 1456.778997][T27250] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12305'. [ 1456.916952][T27254] netlink: 'syz.3.12308': attribute type 3 has an invalid length. [ 1456.943965][T27254] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.12308'. [ 1456.993557][T27254] tc_dump_action: action bad kind [ 1457.018468][T27262] FAULT_INJECTION: forcing a failure. [ 1457.018468][T27262] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.037546][T27262] CPU: 1 UID: 0 PID: 27262 Comm: syz.1.12310 Not tainted syzkaller #0 PREEMPT(full) [ 1457.037571][T27262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1457.037582][T27262] Call Trace: [ 1457.037590][T27262] [ 1457.037599][T27262] dump_stack_lvl+0xe8/0x150 [ 1457.037629][T27262] should_fail_ex+0x412/0x560 [ 1457.037654][T27262] should_failslab+0xa8/0x100 [ 1457.037678][T27262] __kmalloc_noprof+0xe8/0x760 [ 1457.037695][T27262] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1457.037738][T27262] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1457.037771][T27262] genl_family_rcv_msg_doit+0xd9/0x330 [ 1457.037802][T27262] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1457.037836][T27262] ? apparmor_capable+0x126/0x170 [ 1457.037863][T27262] ? bpf_lsm_capable+0x9/0x20 [ 1457.037885][T27262] ? security_capable+0x7e/0x2c0 [ 1457.037909][T27262] genl_rcv_msg+0x61c/0x7a0 [ 1457.037941][T27262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1457.037966][T27262] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 1457.038103][T27262] ? __lock_acquire+0x6b5/0x2cf0 [ 1457.038137][T27262] netlink_rcv_skb+0x232/0x4b0 [ 1457.038161][T27262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1457.038189][T27262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1457.038226][T27262] ? down_read+0x272/0x2e0 [ 1457.038243][T27262] ? genl_rcv+0xd/0x40 [ 1457.038267][T27262] genl_rcv+0x28/0x40 [ 1457.038287][T27262] netlink_unicast+0x80f/0x9b0 [ 1457.038314][T27262] ? __pfx_netlink_unicast+0x10/0x10 [ 1457.038333][T27262] ? netlink_sendmsg+0x650/0xb40 [ 1457.038351][T27262] ? skb_put+0x11b/0x210 [ 1457.038377][T27262] netlink_sendmsg+0x813/0xb40 [ 1457.038407][T27262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1457.038431][T27262] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1457.038453][T27262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1457.038473][T27262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1457.038494][T27262] ____sys_sendmsg+0xa68/0xad0 [ 1457.038528][T27262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1457.038562][T27262] ? import_iovec+0x73/0xa0 [ 1457.038591][T27262] ___sys_sendmsg+0x2a5/0x360 [ 1457.038622][T27262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1457.038679][T27262] ? __fget_files+0x2a/0x420 [ 1457.038703][T27262] ? __fget_files+0x3a0/0x420 [ 1457.038748][T27262] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1457.038778][T27262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1457.038815][T27262] ? __pfx_ksys_write+0x10/0x10 [ 1457.038846][T27262] do_syscall_64+0x14d/0xf80 [ 1457.038864][T27262] ? trace_irq_disable+0x3b/0x150 [ 1457.038889][T27262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.038908][T27262] ? clear_bhb_loop+0x40/0x90 [ 1457.038931][T27262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.038950][T27262] RIP: 0033:0x7fef2899c799 [ 1457.038968][T27262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.038984][T27262] RSP: 002b:00007fef2981c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1457.039005][T27262] RAX: ffffffffffffffda RBX: 00007fef28c15fa0 RCX: 00007fef2899c799 [ 1457.039019][T27262] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1457.039031][T27262] RBP: 00007fef2981c090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.039043][T27262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.039055][T27262] R13: 00007fef28c16038 R14: 00007fef28c15fa0 R15: 00007ffc90697108 [ 1457.039086][T27262] [ 1457.370079][ T5927] net_ratelimit: 20 callbacks suppressed [ 1457.370097][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.452392][T27266] openvswitch: netlink: IP tunnel dst address not specified [ 1457.496921][T27267] lo speed is unknown, defaulting to 1000 [ 1457.508371][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.636585][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.711769][T27267] lo speed is unknown, defaulting to 1000 [ 1457.755306][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.897391][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1457.930755][T27293] syzkaller1: entered promiscuous mode [ 1457.954212][T27293] syzkaller1: entered allmulticast mode [ 1458.017300][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1458.074635][T27295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12319'. [ 1458.259124][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1458.517527][T27313] FAULT_INJECTION: forcing a failure. [ 1458.517527][T27313] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.545347][T27313] CPU: 0 UID: 0 PID: 27313 Comm: syz.0.12325 Not tainted syzkaller #0 PREEMPT(full) [ 1458.545371][T27313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1458.545383][T27313] Call Trace: [ 1458.545393][T27313] [ 1458.545401][T27313] dump_stack_lvl+0xe8/0x150 [ 1458.545429][T27313] should_fail_ex+0x412/0x560 [ 1458.545454][T27313] should_failslab+0xa8/0x100 [ 1458.545477][T27313] __kmalloc_noprof+0xe8/0x760 [ 1458.545495][T27313] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1458.545528][T27313] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1458.545560][T27313] genl_family_rcv_msg_doit+0xd9/0x330 [ 1458.545594][T27313] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1458.545626][T27313] ? apparmor_capable+0x126/0x170 [ 1458.545652][T27313] ? bpf_lsm_capable+0x9/0x20 [ 1458.545674][T27313] ? security_capable+0x7e/0x2c0 [ 1458.545700][T27313] genl_rcv_msg+0x61c/0x7a0 [ 1458.545732][T27313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1458.545758][T27313] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 1458.545783][T27313] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.545817][T27313] netlink_rcv_skb+0x232/0x4b0 [ 1458.545840][T27313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1458.545868][T27313] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1458.545908][T27313] ? down_read+0x272/0x2e0 [ 1458.545926][T27313] ? genl_rcv+0xd/0x40 [ 1458.545952][T27313] genl_rcv+0x28/0x40 [ 1458.545976][T27313] netlink_unicast+0x80f/0x9b0 [ 1458.546005][T27313] ? __pfx_netlink_unicast+0x10/0x10 [ 1458.546027][T27313] ? netlink_sendmsg+0x650/0xb40 [ 1458.546047][T27313] ? skb_put+0x11b/0x210 [ 1458.546075][T27313] netlink_sendmsg+0x813/0xb40 [ 1458.546115][T27313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1458.546141][T27313] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1458.546164][T27313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1458.546185][T27313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1458.546206][T27313] ____sys_sendmsg+0xa68/0xad0 [ 1458.546242][T27313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1458.546277][T27313] ? import_iovec+0x73/0xa0 [ 1458.546307][T27313] ___sys_sendmsg+0x2a5/0x360 [ 1458.546339][T27313] ? __pfx____sys_sendmsg+0x10/0x10 [ 1458.546400][T27313] ? __fget_files+0x2a/0x420 [ 1458.546423][T27313] ? __fget_files+0x3a0/0x420 [ 1458.546458][T27313] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1458.546485][T27313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1458.546521][T27313] ? __pfx_ksys_write+0x10/0x10 [ 1458.546551][T27313] do_syscall_64+0x14d/0xf80 [ 1458.546567][T27313] ? trace_irq_disable+0x3b/0x150 [ 1458.546590][T27313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.546608][T27313] ? clear_bhb_loop+0x40/0x90 [ 1458.546629][T27313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.546645][T27313] RIP: 0033:0x7f0753b9c799 [ 1458.546662][T27313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.546677][T27313] RSP: 002b:00007f0754974028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1458.546694][T27313] RAX: ffffffffffffffda RBX: 00007f0753e15fa0 RCX: 00007f0753b9c799 [ 1458.546706][T27313] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1458.546715][T27313] RBP: 00007f0754974090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.546725][T27313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.546736][T27313] R13: 00007f0753e16038 R14: 00007f0753e15fa0 R15: 00007ffdf944e4d8 [ 1458.546761][T27313] [ 1458.888271][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1458.921881][T27316] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.12326'. [ 1458.938042][T27318] openvswitch: netlink: Actions may not be safe on all matching packets [ 1459.295603][T27331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12331'. [ 1459.317651][T27332] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12331'. [ 1459.863704][T27362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12341'. [ 1459.884754][T27362] bridge_slave_0: left allmulticast mode [ 1459.891359][T27362] bridge_slave_0: left promiscuous mode [ 1459.895726][T27365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12343'. [ 1459.898655][T27362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.914157][T27365] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12343'. [ 1459.948315][T27366] FAULT_INJECTION: forcing a failure. [ 1459.948315][T27366] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.961422][T27366] CPU: 0 UID: 0 PID: 27366 Comm: syz.0.12341 Not tainted syzkaller #0 PREEMPT(full) [ 1459.961449][T27366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1459.961460][T27366] Call Trace: [ 1459.961468][T27366] [ 1459.961477][T27366] dump_stack_lvl+0xe8/0x150 [ 1459.961508][T27366] should_fail_ex+0x412/0x560 [ 1459.961536][T27366] should_failslab+0xa8/0x100 [ 1459.961558][T27366] ? skb_clone+0x212/0x3a0 [ 1459.961587][T27366] kmem_cache_alloc_noprof+0x87/0x650 [ 1459.961611][T27366] ? lock_acquire+0xf0/0x2e0 [ 1459.961646][T27366] skb_clone+0x212/0x3a0 [ 1459.961667][T27366] ? dev_queue_xmit_nit+0x27d/0xad0 [ 1459.961694][T27366] dev_queue_xmit_nit+0x29a/0xad0 [ 1459.961719][T27366] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1459.961742][T27366] ? __pfx_passthru_features_check+0x10/0x10 [ 1459.961776][T27366] dev_hard_start_xmit+0x1cf/0x870 [ 1459.961816][T27366] __dev_queue_xmit+0x17a7/0x38d0 [ 1459.961839][T27366] ? __dev_queue_xmit+0x28d/0x38d0 [ 1459.961874][T27366] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1459.961894][T27366] ? iptable_mangle_hook+0x189/0x4c0 [ 1459.961938][T27366] ? ip_finish_output2+0xa1e/0x1070 [ 1459.961965][T27366] ? ip_finish_output2+0x3c2/0x1070 [ 1459.961996][T27366] ip_finish_output2+0xc68/0x1070 [ 1459.962022][T27366] ? ip_finish_output2+0x3c2/0x1070 [ 1459.962056][T27366] ip_output+0x29f/0x450 [ 1459.962081][T27366] ? ip_output+0x5b/0x450 [ 1459.962106][T27366] ip_send_skb+0x74/0x100 [ 1459.962133][T27366] udp_send_skb+0xb04/0x1510 [ 1459.962260][T27366] udp_sendmsg+0x1a35/0x22f0 [ 1459.962284][T27366] ? count_memcg_event_mm+0x21/0x260 [ 1459.962338][T27366] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1459.962367][T27366] ? __pfx_udp_sendmsg+0x10/0x10 [ 1459.962435][T27366] ? sock_rps_record_flow+0x19/0x350 [ 1459.962464][T27366] ? inet_sendmsg+0x29c/0x370 [ 1459.962488][T27366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1459.962513][T27366] ____sys_sendmsg+0x894/0xad0 [ 1459.962537][T27366] ? irqentry_exit+0x59e/0x620 [ 1459.962555][T27366] ? trace_irq_disable+0x3b/0x150 [ 1459.962589][T27366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1459.962625][T27366] ? import_iovec+0x73/0xa0 [ 1459.962655][T27366] ___sys_sendmsg+0x2a5/0x360 [ 1459.962688][T27366] ? __pfx____sys_sendmsg+0x10/0x10 [ 1459.962721][T27366] ? kstrtouint+0x6e/0xe0 [ 1459.962769][T27366] ? __fget_files+0x2a/0x420 [ 1459.962793][T27366] ? __fget_files+0x3a0/0x420 [ 1459.962829][T27366] __sys_sendmmsg+0x27c/0x4e0 [ 1459.962862][T27366] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1459.962887][T27366] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1459.962935][T27366] ? ksys_write+0x242/0x270 [ 1459.962956][T27366] ? __pfx_ksys_write+0x10/0x10 [ 1459.962983][T27366] __x64_sys_sendmmsg+0xa0/0xc0 [ 1459.963018][T27366] do_syscall_64+0x14d/0xf80 [ 1459.963035][T27366] ? trace_irq_disable+0x3b/0x150 [ 1459.963058][T27366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.963077][T27366] ? clear_bhb_loop+0x40/0x90 [ 1459.963101][T27366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.963119][T27366] RIP: 0033:0x7f0753b9c799 [ 1459.963137][T27366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.963153][T27366] RSP: 002b:00007f0751df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1459.963172][T27366] RAX: ffffffffffffffda RBX: 00007f0753e16090 RCX: 00007f0753b9c799 [ 1459.963185][T27366] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000008 [ 1459.963197][T27366] RBP: 00007f0751df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.963208][T27366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.963219][T27366] R13: 00007f0753e16128 R14: 00007f0753e16090 R15: 00007ffdf944e4d8 [ 1459.963252][T27366] [ 1460.785309][T27362] bridge_slave_1: left allmulticast mode [ 1460.793100][T27362] bridge_slave_1: left promiscuous mode [ 1460.806514][T27362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.872745][T27362] bond0: (slave bond_slave_0): Releasing backup interface [ 1460.933547][T27362] bond0: (slave bond_slave_1): Releasing backup interface [ 1460.978999][T27362] team_slave_0: left promiscuous mode [ 1461.008203][T27362] team0: Port device team_slave_0 removed [ 1461.036008][T27362] team_slave_1: left promiscuous mode [ 1461.054255][T27362] team0: Port device team_slave_1 removed [ 1461.070685][T27362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.084860][T27362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.111113][T27362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1461.120303][T27362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.440022][T27373] syzkaller0: entered promiscuous mode [ 1461.450746][T27373] syzkaller0: entered allmulticast mode [ 1461.470655][T27391] bridge0: entered allmulticast mode [ 1461.546774][T27401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12351'. [ 1461.603510][T27403] sctp: [Deprecated]: syz.0.12352 (pid 27403) Use of int in max_burst socket option deprecated. [ 1461.603510][T27403] Use struct sctp_assoc_value instead [ 1463.523587][T27389] tun0: tun_chr_ioctl cmd 1074025677 [ 1463.529234][T27389] tun0: linktype set to 4 [ 1463.538441][T27403] mac80211_hwsim hwsim183 wlan0: default FDB implementation only supports local addresses [ 1463.645598][T25159] net_ratelimit: 11 callbacks suppressed [ 1463.645620][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1463.764934][T27419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12358'. [ 1463.831091][T27419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1463.876177][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1463.923056][T27428] openvswitch: netlink: Key type 69 is out of range max 32 [ 1464.172418][T27439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12366'. [ 1466.100593][T27449] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1466.103869][T27445] dummy0: entered promiscuous mode [ 1466.125386][T27450] x_tables: ip_tables: ah match: only valid for protocol 51 [ 1466.127352][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1466.247546][ T9779] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1466.263286][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12371'. [ 1466.338270][T27459] FAULT_INJECTION: forcing a failure. [ 1466.338270][T27459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.387131][T27459] CPU: 0 UID: 0 PID: 27459 Comm: syz.4.12373 Not tainted syzkaller #0 PREEMPT(full) [ 1466.387158][T27459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1466.387170][T27459] Call Trace: [ 1466.387177][T27459] [ 1466.387186][T27459] dump_stack_lvl+0xe8/0x150 [ 1466.387217][T27459] should_fail_ex+0x412/0x560 [ 1466.387244][T27459] _copy_from_iter+0x1d3/0x1670 [ 1466.387270][T27459] ? rep_movs_alternative+0x4a/0x90 [ 1466.387301][T27459] ? __pfx__copy_from_iter+0x10/0x10 [ 1466.387321][T27459] ? sock_alloc_send_pskb+0x896/0x990 [ 1466.387344][T27459] ? __pfx__copy_from_iter+0x10/0x10 [ 1466.387369][T27459] ? page_copy_sane+0x16a/0x270 [ 1466.387394][T27459] copy_page_from_iter+0xdd/0x170 [ 1466.387421][T27459] skb_copy_datagram_from_iter+0x306/0x710 [ 1466.387451][T27459] unix_stream_sendmsg+0x5f3/0xe80 [ 1466.387489][T27459] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1466.387514][T27459] ? aa_sock_msg_perm+0xda/0x1b0 [ 1466.387538][T27459] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1466.387559][T27459] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1466.387577][T27459] ____sys_sendmsg+0xa68/0xad0 [ 1466.387619][T27459] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1466.387652][T27459] ? import_iovec+0x73/0xa0 [ 1466.387680][T27459] ___sys_sendmsg+0x2a5/0x360 [ 1466.387711][T27459] ? __pfx____sys_sendmsg+0x10/0x10 [ 1466.387768][T27459] ? __fget_files+0x2a/0x420 [ 1466.387791][T27459] ? __fget_files+0x3a0/0x420 [ 1466.387825][T27459] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1466.387854][T27459] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1466.387890][T27459] ? __pfx_ksys_write+0x10/0x10 [ 1466.387920][T27459] do_syscall_64+0x14d/0xf80 [ 1466.387937][T27459] ? trace_irq_disable+0x3b/0x150 [ 1466.387961][T27459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.387979][T27459] ? clear_bhb_loop+0x40/0x90 [ 1466.388001][T27459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.388019][T27459] RIP: 0033:0x7fd5f6d9c799 [ 1466.388036][T27459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1466.388050][T27459] RSP: 002b:00007fd5f7cf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1466.388069][T27459] RAX: ffffffffffffffda RBX: 00007fd5f7015fa0 RCX: 00007fd5f6d9c799 [ 1466.388082][T27459] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1466.388093][T27459] RBP: 00007fd5f7cf4090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.388104][T27459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1466.388114][T27459] R13: 00007fd5f7016038 R14: 00007fd5f7015fa0 R15: 00007ffc39dc6878 [ 1466.388144][T27459] [ 1466.405575][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1466.536910][T27467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12375'. [ 1466.610630][T27463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.12374'. [ 1466.695937][T27463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12374'. [ 1466.711371][T27471] tc_dump_action: action bad kind [ 1466.754857][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1466.781359][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1466.792113][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1466.814584][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1466.834057][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1466.856780][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.069626][T27473] lo speed is unknown, defaulting to 1000 [ 1467.096450][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1467.201113][ T5927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1467.271126][T27491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1467.294667][T27494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12380'. [ 1467.343628][ T5927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1467.439945][T27473] lo speed is unknown, defaulting to 1000 [ 1467.461978][T27491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1467.506721][ T5927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.887873][ T5827] Bluetooth: hci4: command tx timeout [ 1469.521685][T27491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1469.548152][ T5927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.648966][T27491] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1469.707965][T27509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12385'. [ 1469.723011][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1469.741446][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12386'. [ 1469.752172][T27511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12386'. [ 1469.768585][T27509] bond0: (slave dummy0): Releasing backup interface [ 1469.802962][T27509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1469.844062][T27511] vlan3: entered promiscuous mode [ 1469.856027][T27511] team0: entered promiscuous mode [ 1470.157761][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1470.250924][T19041] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1470.348707][ T5927] dvmrp0: left allmulticast mode [ 1470.402913][T27530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12391'. [ 1470.414833][T27530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12391'. [ 1470.424696][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12390'. [ 1470.721471][ T5927] bridge0 (unregistering): left allmulticast mode [ 1470.966603][ T5827] Bluetooth: hci4: command tx timeout [ 1471.642699][ T5927] bond0 (unregistering): Released all slaves [ 1471.652340][ T5927] bond1 (unregistering): Released all slaves [ 1471.665026][ T5927] bond2 (unregistering): Released all slaves [ 1471.679317][ T5927] bond3 (unregistering): Released all slaves [ 1471.695683][ T5927] bond4 (unregistering): Released all slaves [ 1471.718482][T19041] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1471.856426][T12235] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1471.896415][T19041] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1471.914536][ T5927] : left promiscuous mode [ 1471.964189][T27473] chnl_net:caif_netlink_parms(): no params data found [ 1472.055057][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1472.087129][T27561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12399'. [ 1472.105707][ T5928] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1472.115877][ T5927] tipc: Left network mode [ 1472.138950][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12398'. [ 1472.190333][T27557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12398'. [ 1472.229158][T27566] netlink: 'syz.2.12400': attribute type 10 has an invalid length. [ 1472.274925][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1472.364233][T27565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1472.474001][T27578] FAULT_INJECTION: forcing a failure. [ 1472.474001][T27578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.492232][T27578] CPU: 0 UID: 0 PID: 27578 Comm: syz.4.12402 Not tainted syzkaller #0 PREEMPT(full) [ 1472.492256][T27578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1472.492268][T27578] Call Trace: [ 1472.492276][T27578] [ 1472.492285][T27578] dump_stack_lvl+0xe8/0x150 [ 1472.492316][T27578] should_fail_ex+0x412/0x560 [ 1472.492344][T27578] _copy_from_iter+0x1d3/0x1670 [ 1472.492373][T27578] ? rep_movs_alternative+0x4a/0x90 [ 1472.492413][T27578] ? __pfx__copy_from_iter+0x10/0x10 [ 1472.492434][T27578] ? sock_alloc_send_pskb+0x896/0x990 [ 1472.492460][T27578] ? __pfx__copy_from_iter+0x10/0x10 [ 1472.492487][T27578] ? page_copy_sane+0x16a/0x270 [ 1472.492512][T27578] copy_page_from_iter+0xdd/0x170 [ 1472.492541][T27578] skb_copy_datagram_from_iter+0x306/0x710 [ 1472.492572][T27578] unix_stream_sendmsg+0x5f3/0xe80 [ 1472.492615][T27578] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1472.492642][T27578] ? aa_sock_msg_perm+0xda/0x1b0 [ 1472.492666][T27578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1472.492688][T27578] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1472.492708][T27578] ____sys_sendmsg+0xa68/0xad0 [ 1472.492745][T27578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1472.492780][T27578] ? import_iovec+0x73/0xa0 [ 1472.492809][T27578] ___sys_sendmsg+0x2a5/0x360 [ 1472.492842][T27578] ? __pfx____sys_sendmsg+0x10/0x10 [ 1472.492902][T27578] ? __fget_files+0x2a/0x420 [ 1472.492927][T27578] ? __fget_files+0x3a0/0x420 [ 1472.492962][T27578] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1472.492992][T27578] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1472.493028][T27578] ? __pfx_ksys_write+0x10/0x10 [ 1472.493059][T27578] do_syscall_64+0x14d/0xf80 [ 1472.493077][T27578] ? trace_irq_disable+0x3b/0x150 [ 1472.493102][T27578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.493121][T27578] ? clear_bhb_loop+0x40/0x90 [ 1472.493145][T27578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.493164][T27578] RIP: 0033:0x7fd5f6d9c799 [ 1472.493182][T27578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.493198][T27578] RSP: 002b:00007fd5f7cf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1472.493218][T27578] RAX: ffffffffffffffda RBX: 00007fd5f7015fa0 RCX: 00007fd5f6d9c799 [ 1472.493233][T27578] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1472.493245][T27578] RBP: 00007fd5f7cf4090 R08: 0000000000000000 R09: 0000000000000000 [ 1472.493257][T27578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1472.493269][T27578] R13: 00007fd5f7016038 R14: 00007fd5f7015fa0 R15: 00007ffc39dc6878 [ 1472.493300][T27578] [ 1472.832078][T27566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.876508][T12231] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1472.910095][T27566] bond0: (slave team0): Enslaving as an active interface with an up link [ 1473.037243][ T5827] Bluetooth: hci4: command tx timeout [ 1473.152088][ T5930] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1473.300780][T27601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12409'. [ 1473.343336][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1473.376710][T27473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.388035][T27473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.395295][T27473] bridge_slave_0: entered allmulticast mode [ 1473.429538][T27473] bridge_slave_0: entered promiscuous mode [ 1473.461164][T27473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.470125][T27473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.477816][T27473] bridge_slave_1: entered allmulticast mode [ 1473.488441][T27473] bridge_slave_1: entered promiscuous mode [ 1473.525844][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1473.585225][T27473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.687729][T27617] FAULT_INJECTION: forcing a failure. [ 1473.687729][T27617] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.689456][T27473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1473.702839][T27617] CPU: 0 UID: 0 PID: 27617 Comm: syz.0.12413 Not tainted syzkaller #0 PREEMPT(full) [ 1473.702864][T27617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1473.702876][T27617] Call Trace: [ 1473.702884][T27617] [ 1473.702891][T27617] dump_stack_lvl+0xe8/0x150 [ 1473.702922][T27617] should_fail_ex+0x412/0x560 [ 1473.702949][T27617] should_failslab+0xa8/0x100 [ 1473.702971][T27617] ? __kernfs_new_node+0xe9/0x8e0 [ 1473.702995][T27617] kmem_cache_alloc_noprof+0x87/0x650 [ 1473.703032][T27617] __kernfs_new_node+0xe9/0x8e0 [ 1473.703062][T27617] ? __pfx___kernfs_new_node+0x10/0x10 [ 1473.703086][T27617] ? kernfs_root+0x1c/0x230 [ 1473.703115][T27617] ? kernfs_root+0x1c/0x230 [ 1473.703137][T27617] ? kernfs_root+0x1c/0x230 [ 1473.703157][T27617] ? kernfs_root+0x1c/0x230 [ 1473.703184][T27617] kernfs_new_node+0x102/0x210 [ 1473.703212][T27617] __kernfs_create_file+0x4b/0x2e0 [ 1473.703234][T27617] sysfs_add_file_mode_ns+0x238/0x300 [ 1473.703263][T27617] internal_create_group+0x673/0x1180 [ 1473.703301][T27617] ? __pfx_internal_create_group+0x10/0x10 [ 1473.703323][T27617] ? kernfs_add_one+0x477/0x5c0 [ 1473.703351][T27617] ? up_write+0x1ab/0x410 [ 1473.703373][T27617] sysfs_create_groups+0x59/0x120 [ 1473.703405][T27617] device_add_attrs+0x1bf/0x5b0 [ 1473.703431][T27617] ? kernfs_put+0x40e/0x470 [ 1473.703456][T27617] ? __pfx_device_add_attrs+0x10/0x10 [ 1473.703480][T27617] ? kobject_put+0x516/0x560 [ 1473.703609][T27617] ? device_add_class_symlinks+0x21f/0x240 [ 1473.703638][T27617] device_add+0x496/0xb70 [ 1473.703664][T27617] ? device_initialize+0x24b/0x440 [ 1473.703691][T27617] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1473.703751][T27617] wakeup_source_register+0x18a/0x380 [ 1473.703812][T27617] ep_insert+0xf34/0x1a40 [ 1473.703859][T27617] ? __pfx_ep_insert+0x10/0x10 [ 1473.703895][T27617] ? bpf_lsm_capable+0x9/0x20 [ 1473.703927][T27617] do_epoll_ctl+0x7f4/0xe80 [ 1473.703960][T27617] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1473.703988][T27617] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1473.704025][T27617] do_syscall_64+0x14d/0xf80 [ 1473.704041][T27617] ? trace_irq_disable+0x3b/0x150 [ 1473.704065][T27617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.704083][T27617] ? clear_bhb_loop+0x40/0x90 [ 1473.704106][T27617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.704124][T27617] RIP: 0033:0x7f0753b9c799 [ 1473.704142][T27617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.704157][T27617] RSP: 002b:00007f0754974028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1473.704177][T27617] RAX: ffffffffffffffda RBX: 00007f0753e15fa0 RCX: 00007f0753b9c799 [ 1473.704189][T27617] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1473.704200][T27617] RBP: 00007f0754974090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.704212][T27617] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 1473.704223][T27617] R13: 00007f0753e16038 R14: 00007f0753e15fa0 R15: 00007ffdf944e4d8 [ 1473.704253][T27617] [ 1474.162166][T27473] team0: Port device team_slave_0 added [ 1474.227787][ T5930] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1474.254793][ T5930] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1474.275813][ T833] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1474.328607][T27473] team0: Port device team_slave_1 added [ 1474.438008][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1474.507544][T27473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.529033][T27473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.591077][T27473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.647595][T27473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.663568][T27473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1474.694204][T27473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1474.868023][T27473] hsr_slave_0: entered promiscuous mode [ 1474.895716][T27473] hsr_slave_1: entered promiscuous mode [ 1474.904701][T27473] debugfs: 'hsr0' already exists in 'hsr' [ 1474.928681][T27473] Cannot create hsr debugfs directory [ 1475.127364][ T5827] Bluetooth: hci4: command tx timeout [ 1475.556855][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1475.796082][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1475.939321][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1476.580479][T25158] smc: removing ib device syz0 [ 1476.947993][T27727] syzkaller0: entered promiscuous mode [ 1476.953727][T27727] syzkaller0: entered allmulticast mode [ 1477.120712][T27765] __nla_validate_parse: 5 callbacks suppressed [ 1477.120732][T27765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12444'. [ 1477.224174][T27764] gre0: left promiscuous mode [ 1477.287852][T27764] sit0: left promiscuous mode [ 1477.313898][T27764] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1478.372423][T27782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12449'. [ 1478.715803][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1479.977960][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1480.059772][T27782] bridge0: entered promiscuous mode [ 1480.067852][T27782] bridge0: port 1(macvtap1) entered blocking state [ 1480.074713][T27782] bridge0: port 1(macvtap1) entered disabled state [ 1480.095256][T27782] macvtap1: entered allmulticast mode [ 1480.109986][T27782] bridge0: entered allmulticast mode [ 1480.117955][T27782] macvtap1: left allmulticast mode [ 1480.123767][T27782] bridge0: left allmulticast mode [ 1480.149382][T27782] bridge0: left promiscuous mode [ 1480.230823][ T5927] IPVS: stop unused estimator thread 0... [ 1480.286397][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1480.386966][T27473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1480.411501][T27473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1480.433183][T27473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1480.459683][T27473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1480.469872][T27807] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1480.646291][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1480.667020][T27824] sctp: [Deprecated]: syz.3.12457 (pid 27824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1480.667020][T27824] Use struct sctp_sack_info instead [ 1480.715059][T27823] lo speed is unknown, defaulting to 1000 [ 1480.740563][T27473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.799836][T27473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.832919][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.840150][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1480.883373][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.890574][ T5928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1480.916227][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1481.076764][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1481.185584][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1481.309543][T27845] netlink: 'syz.2.12461': attribute type 61 has an invalid length. [ 1481.315567][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1481.435915][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1481.504628][T27858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12463'. [ 1481.546407][T25159] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1481.581087][T27473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1481.807348][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1481.931657][T27473] veth0_vlan: entered promiscuous mode [ 1481.976712][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1482.145187][T27473] veth1_vlan: entered promiscuous mode [ 1482.420716][T27889] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12469'. [ 1484.826451][T27900] syzkaller1: entered promiscuous mode [ 1484.831971][T27900] syzkaller1: entered allmulticast mode [ 1484.996435][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1485.031135][T27473] veth0_macvtap: entered promiscuous mode [ 1485.057873][T27473] veth1_macvtap: entered promiscuous mode [ 1485.105134][T27473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1485.185141][T27473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1485.223802][T27949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12474'. [ 1485.249280][ T5927] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.259195][T27950] netlink: 'syz.0.12477': attribute type 4 has an invalid length. [ 1485.290257][ T5927] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.332374][ T5927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.333518][T27950] netlink: 'syz.0.12477': attribute type 4 has an invalid length. [ 1485.371458][ T5927] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.649641][ T5928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.666104][ T5928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.733874][T27963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12480'. [ 1485.784783][ T5928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.793784][ T5927] net_ratelimit: 1 callbacks suppressed [ 1485.793802][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1485.809001][ T5928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.897015][T27965] netlink: 'syz.0.12481': attribute type 21 has an invalid length. [ 1485.915229][T27965] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12481'. [ 1485.925273][T27972] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12370'. [ 1485.935851][T27965] netlink: 'syz.0.12481': attribute type 4 has an invalid length. [ 1485.935873][T27965] netlink: 'syz.0.12481': attribute type 3 has an invalid length. [ 1485.935887][T27965] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12481'. [ 1485.946530][T27966] nbd: must specify at least one socket [ 1485.955093][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1485.968089][T27965] nbd: must specify at least one socket [ 1485.995070][T27972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12370'. [ 1486.037144][T27965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12481'. [ 1486.066428][T27966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12481'. [ 1486.141878][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1486.204384][T27986] syzkaller0: entered promiscuous mode [ 1486.219074][T27986] syzkaller0: entered allmulticast mode [ 1486.248471][T27983] tipc: Started in network mode [ 1486.253377][T27983] tipc: Node identity f2c93bbbc1d1, cluster identity 4711 [ 1486.279997][T27983] tipc: Enabled bearer , priority 0 [ 1486.408060][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1486.420234][T13712] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1486.438993][T13712] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1486.448966][T13712] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1486.466606][T13712] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1486.473966][T27986] tipc: Resetting bearer [ 1486.483025][T13712] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1486.636931][T27986] tipc: Disabling bearer [ 1486.696053][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1486.806813][T27997] lo speed is unknown, defaulting to 1000 [ 1486.845688][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1487.147053][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1487.250152][T27992] "syz.3.12487" (27992) uses obsolete ecb(arc4) skcipher [ 1487.266872][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1487.391271][T28024] FAULT_INJECTION: forcing a failure. [ 1487.391271][T28024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.426174][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1487.429891][T28024] CPU: 1 UID: 0 PID: 28024 Comm: syz.0.12494 Not tainted syzkaller #0 PREEMPT(full) [ 1487.429918][T28024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1487.429929][T28024] Call Trace: [ 1487.429938][T28024] [ 1487.429946][T28024] dump_stack_lvl+0xe8/0x150 [ 1487.429980][T28024] should_fail_ex+0x412/0x560 [ 1487.430009][T28024] _copy_from_iter+0x1d3/0x1670 [ 1487.430036][T28024] ? rep_movs_alternative+0x4a/0x90 [ 1487.430066][T28024] ? __pfx__copy_from_iter+0x10/0x10 [ 1487.430089][T28024] ? sock_alloc_send_pskb+0x896/0x990 [ 1487.430113][T28024] ? __pfx__copy_from_iter+0x10/0x10 [ 1487.430137][T28024] ? page_copy_sane+0x16a/0x270 [ 1487.430160][T28024] copy_page_from_iter+0xdd/0x170 [ 1487.430187][T28024] skb_copy_datagram_from_iter+0x306/0x710 [ 1487.430216][T28024] unix_stream_sendmsg+0x5f3/0xe80 [ 1487.430259][T28024] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1487.430284][T28024] ? aa_sock_msg_perm+0xda/0x1b0 [ 1487.430309][T28024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1487.430330][T28024] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1487.430348][T28024] ____sys_sendmsg+0xa68/0xad0 [ 1487.430383][T28024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.430417][T28024] ? import_iovec+0x73/0xa0 [ 1487.430443][T28024] ___sys_sendmsg+0x2a5/0x360 [ 1487.430474][T28024] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.430531][T28024] ? __fget_files+0x2a/0x420 [ 1487.430555][T28024] ? __fget_files+0x3a0/0x420 [ 1487.430588][T28024] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1487.430616][T28024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1487.430650][T28024] ? __pfx_ksys_write+0x10/0x10 [ 1487.430679][T28024] do_syscall_64+0x14d/0xf80 [ 1487.430696][T28024] ? trace_irq_disable+0x3b/0x150 [ 1487.430719][T28024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.430738][T28024] ? clear_bhb_loop+0x40/0x90 [ 1487.430760][T28024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.430778][T28024] RIP: 0033:0x7f0753b9c799 [ 1487.430795][T28024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.430810][T28024] RSP: 002b:00007f0754974028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.430829][T28024] RAX: ffffffffffffffda RBX: 00007f0753e15fa0 RCX: 00007f0753b9c799 [ 1487.430843][T28024] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 1487.430854][T28024] RBP: 00007f0754974090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.430866][T28024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.430877][T28024] R13: 00007f0753e16038 R14: 00007f0753e15fa0 R15: 00007ffdf944e4d8 [ 1487.430906][T28024] [ 1487.855625][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1487.888650][T27997] chnl_net:caif_netlink_parms(): no params data found [ 1487.921650][T28046] FAULT_INJECTION: forcing a failure. [ 1487.921650][T28046] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.994233][T28046] CPU: 1 UID: 0 PID: 28046 Comm: syz.0.12501 Not tainted syzkaller #0 PREEMPT(full) [ 1487.994258][T28046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1487.994269][T28046] Call Trace: [ 1487.994277][T28046] [ 1487.994286][T28046] dump_stack_lvl+0xe8/0x150 [ 1487.994317][T28046] should_fail_ex+0x412/0x560 [ 1487.994342][T28046] should_failslab+0xa8/0x100 [ 1487.994364][T28046] ? __kernfs_new_node+0xe9/0x8e0 [ 1487.994390][T28046] kmem_cache_alloc_noprof+0x87/0x650 [ 1487.994425][T28046] __kernfs_new_node+0xe9/0x8e0 [ 1487.994456][T28046] ? __pfx___kernfs_new_node+0x10/0x10 [ 1487.994481][T28046] ? kernfs_root+0x1c/0x230 [ 1487.994509][T28046] ? kernfs_root+0x1c/0x230 [ 1487.994530][T28046] ? kernfs_root+0x1c/0x230 [ 1487.994550][T28046] ? kernfs_root+0x1c/0x230 [ 1487.994578][T28046] kernfs_new_node+0x102/0x210 [ 1487.994607][T28046] __kernfs_create_file+0x4b/0x2e0 [ 1487.994629][T28046] sysfs_add_file_mode_ns+0x238/0x300 [ 1487.994658][T28046] internal_create_group+0x673/0x1180 [ 1487.994698][T28046] ? __pfx_internal_create_group+0x10/0x10 [ 1487.994719][T28046] ? kernfs_add_one+0x477/0x5c0 [ 1487.994747][T28046] ? up_write+0x1ab/0x410 [ 1487.994770][T28046] sysfs_create_groups+0x59/0x120 [ 1487.994797][T28046] device_add_attrs+0x1bf/0x5b0 [ 1487.994824][T28046] ? kernfs_put+0x40e/0x470 [ 1487.994879][T28046] ? __pfx_device_add_attrs+0x10/0x10 [ 1487.994904][T28046] ? kobject_put+0x516/0x560 [ 1487.994930][T28046] ? device_add_class_symlinks+0x21f/0x240 [ 1487.994959][T28046] device_add+0x496/0xb70 [ 1487.994982][T28046] ? device_initialize+0x24b/0x440 [ 1487.995009][T28046] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 1487.995032][T28046] wakeup_source_register+0x18a/0x380 [ 1487.995062][T28046] ep_insert+0xf34/0x1a40 [ 1487.995103][T28046] ? __pfx_ep_insert+0x10/0x10 [ 1487.995140][T28046] ? bpf_lsm_capable+0x9/0x20 [ 1487.995177][T28046] do_epoll_ctl+0x7f4/0xe80 [ 1487.995202][T28046] __x64_sys_epoll_ctl+0x165/0x1b0 [ 1487.995224][T28046] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1487.995251][T28046] do_syscall_64+0x14d/0xf80 [ 1487.995270][T28046] ? trace_irq_disable+0x3b/0x150 [ 1487.995295][T28046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.995312][T28046] ? clear_bhb_loop+0x40/0x90 [ 1487.995335][T28046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.995352][T28046] RIP: 0033:0x7f0753b9c799 [ 1487.995370][T28046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.995384][T28046] RSP: 002b:00007f0754974028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1487.995401][T28046] RAX: ffffffffffffffda RBX: 00007f0753e15fa0 RCX: 00007f0753b9c799 [ 1487.995413][T28046] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 1487.995423][T28046] RBP: 00007f0754974090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.995435][T28046] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000002 [ 1487.995446][T28046] R13: 00007f0753e16038 R14: 00007f0753e15fa0 R15: 00007ffdf944e4d8 [ 1487.995478][T28046] [ 1488.010579][T27997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.315656][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1488.319698][T27997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.333146][T27997] bridge_slave_0: entered allmulticast mode [ 1488.341938][T27997] bridge_slave_0: entered promiscuous mode [ 1488.351207][T27997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.359235][T27997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.374920][T27997] bridge_slave_1: entered allmulticast mode [ 1488.383045][T28060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12502'. [ 1488.397910][T27997] bridge_slave_1: entered promiscuous mode [ 1488.480819][T27997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.494686][T27997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.556367][ T5827] Bluetooth: hci5: command tx timeout [ 1488.602639][T28071] SET target dimension over the limit! [ 1488.608704][T27997] team0: Port device team_slave_0 added [ 1488.622517][T27997] team0: Port device team_slave_1 added [ 1488.663604][T27997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.671178][T27997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.699258][T27997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.726903][T27997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.733876][T27997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.780289][T27997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.852328][T27997] hsr_slave_0: entered promiscuous mode [ 1488.859043][T27997] hsr_slave_1: entered promiscuous mode [ 1488.865241][T27997] debugfs: 'hsr0' already exists in 'hsr' [ 1488.871362][T27997] Cannot create hsr debugfs directory [ 1489.021274][T27997] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1489.081566][T27997] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1489.120353][T27997] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1489.175192][T27997] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1490.636094][ T5827] Bluetooth: hci5: command tx timeout [ 1490.891281][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1490.897745][ T5927] net_ratelimit: 16 callbacks suppressed [ 1490.897766][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1491.015906][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1491.125797][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1491.235741][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1491.345805][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1491.428362][T28063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1491.449531][T28091] netlink: 'syz.3.12512': attribute type 1 has an invalid length. [ 1491.455725][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1491.475003][T28091] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12512'. [ 1491.519543][T27997] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1491.591380][T27997] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1491.639125][T27997] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1491.828036][T27997] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1491.844287][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1492.038169][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1492.067511][T27997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.077515][T28130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12522'. [ 1492.094652][T27997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.112911][T25158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.120157][T25158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.141818][T25158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.149050][T25158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.239104][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1492.376508][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1492.492123][T27997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.716182][ T5827] Bluetooth: hci5: command tx timeout [ 1492.827903][T28155] xt_ecn: cannot match TCP bits for non-tcp packets [ 1492.914836][T28155] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12526'. [ 1492.926877][T28155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12526'. [ 1492.950783][T27997] veth0_vlan: entered promiscuous mode [ 1492.964085][T27997] veth1_vlan: entered promiscuous mode [ 1492.972308][T28164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12529'. [ 1492.981961][T28164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12529'. [ 1493.032987][T27997] veth0_macvtap: entered promiscuous mode [ 1493.044376][T27997] veth1_macvtap: entered promiscuous mode [ 1493.064395][T27997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.080253][T27997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.101003][T19041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.110252][T19041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.132209][T19041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.152169][T19041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.267425][T25157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.284334][T25157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.360376][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.373983][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.428947][T28174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12533'. [ 1493.442747][T28174] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12533'. [ 1493.461637][T28174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12533'. [ 1493.592732][T28180] syzkaller1: entered allmulticast mode [ 1493.702210][T28186] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1493.783361][T28190] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12540'. [ 1493.795289][T28192] netlink: 'syz.2.12541': attribute type 21 has an invalid length. [ 1493.812663][T28192] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12541'. [ 1493.822664][T28192] netlink: 'syz.2.12541': attribute type 5 has an invalid length. [ 1493.837837][T28192] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12541'. [ 1493.851812][ T5928] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.853539][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12541'. [ 1493.871001][T28192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12541'. [ 1493.903095][T28190] netlink: 'syz.1.12540': attribute type 3 has an invalid length. [ 1494.010512][T28196] bridge_slave_1: entered promiscuous mode [ 1494.025636][T28196] bridge_slave_1: entered allmulticast mode [ 1494.164946][T13712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1494.188722][T13712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1494.198411][T13712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1494.245348][T13712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1494.267231][T13712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1494.361437][T28206] lo speed is unknown, defaulting to 1000 [ 1494.629009][T28224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12551'. [ 1494.661706][T28224] netlink: 348 bytes leftover after parsing attributes in process `syz.1.12551'. [ 1494.801550][ T5827] Bluetooth: hci5: command tx timeout [ 1494.908914][T28227] team0: Port device team_slave_0 removed [ 1495.303225][T28206] chnl_net:caif_netlink_parms(): no params data found [ 1495.631696][T28206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.641095][T28206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.658979][T28206] bridge_slave_0: entered allmulticast mode [ 1495.667670][T28206] bridge_slave_0: entered promiscuous mode [ 1495.684728][T28206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.692084][T28206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.706491][T28206] bridge_slave_1: entered allmulticast mode [ 1495.726282][T28206] bridge_slave_1: entered promiscuous mode [ 1495.779874][T28257] netlink: 'syz.1.12562': attribute type 4 has an invalid length. [ 1495.810912][T28206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.840755][T28206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.924589][T28206] team0: Port device team_slave_0 added [ 1495.938719][T28206] team0: Port device team_slave_1 added [ 1496.010135][T28206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.031145][T28206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.101957][T28206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.146300][T28206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.155464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 1496.163503][ C0] lec:lec_tx_timeout: lec0 [ 1496.174376][T28206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.219285][T28206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1496.335785][ T5827] Bluetooth: hci1: command tx timeout [ 1496.363070][T28206] hsr_slave_0: entered promiscuous mode [ 1496.372395][T28206] hsr_slave_1: entered promiscuous mode [ 1496.378972][T28206] debugfs: 'hsr0' already exists in 'hsr' [ 1496.384796][T28206] Cannot create hsr debugfs directory [ 1496.607532][T25158] net_ratelimit: 19 callbacks suppressed [ 1496.607552][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1496.726899][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1496.804812][T28296] bond0: (slave team0): Releasing backup interface [ 1496.838559][T28296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1496.861552][T28297] ipt_ECN: cannot use operation on non-tcp rule [ 1496.877160][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1496.923188][T28301] netlink: 'syz.4.12572': attribute type 32 has an invalid length. [ 1496.980925][T28301] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1497.000594][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1497.015551][T28291] lo speed is unknown, defaulting to 1000 [ 1497.095386][T28308] syzkaller0: entered promiscuous mode [ 1497.101762][T28308] syzkaller0: entered allmulticast mode [ 1497.198913][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1497.269521][T28297] lo speed is unknown, defaulting to 1000 [ 1497.326446][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1497.469071][T28206] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1497.919880][T28206] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1498.081406][T28206] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1498.234661][T28206] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1498.322769][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1498.397253][ T5827] Bluetooth: hci1: command tx timeout [ 1498.587264][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1498.742771][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1498.889597][T28206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.901601][T28362] sctp: [Deprecated]: syz.1.12591 (pid 28362) Use of int in maxseg socket option. [ 1498.901601][T28362] Use struct sctp_assoc_value instead [ 1499.127990][T28206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.143688][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.150945][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.189994][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.197188][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.636795][T28206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.791807][T28206] veth0_vlan: entered promiscuous mode [ 1499.813411][T28389] __nla_validate_parse: 12 callbacks suppressed [ 1499.813433][T28389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12597'. [ 1499.861554][T28206] veth1_vlan: entered promiscuous mode [ 1499.924851][T28395] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 1, id = 0 [ 1500.110846][T28206] veth0_macvtap: entered promiscuous mode [ 1500.137676][T28206] veth1_macvtap: entered promiscuous mode [ 1500.185351][T28206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.241196][T28206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.289381][ T5927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.307813][ T5927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.360288][ T5927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.376165][ T5927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.476746][ T5827] Bluetooth: hci1: command tx timeout [ 1500.477157][T28407] lo speed is unknown, defaulting to 1000 [ 1500.642376][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12600'. [ 1500.680489][T28415] FAULT_INJECTION: forcing a failure. [ 1500.680489][T28415] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.708102][T19041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.738614][T28415] CPU: 0 UID: 0 PID: 28415 Comm: syz.1.12603 Not tainted syzkaller #0 PREEMPT(full) [ 1500.738640][T28415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1500.738651][T28415] Call Trace: [ 1500.738665][T28415] [ 1500.738675][T28415] dump_stack_lvl+0xe8/0x150 [ 1500.738705][T28415] should_fail_ex+0x412/0x560 [ 1500.738733][T28415] should_failslab+0xa8/0x100 [ 1500.738755][T28415] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1500.738782][T28415] ? __alloc_skb+0x186/0x7d0 [ 1500.738802][T28415] ? __alloc_skb+0x1d0/0x7d0 [ 1500.738821][T28415] ? __local_bh_enable_ip+0xd0/0x130 [ 1500.738847][T28415] __alloc_skb+0x1d0/0x7d0 [ 1500.738873][T28415] alloc_skb_with_frags+0xca/0x890 [ 1500.738901][T28415] ? __lock_acquire+0x6b5/0x2cf0 [ 1500.738929][T28415] sock_alloc_send_pskb+0x878/0x990 [ 1500.738965][T28415] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1500.738999][T28415] tun_get_user+0x92d/0x3dd0 [ 1500.739036][T28415] ? aa_file_perm+0x192/0x15e0 [ 1500.739063][T28415] ? aa_file_perm+0x50e/0x15e0 [ 1500.739085][T28415] ? __pfx_tun_get_user+0x10/0x10 [ 1500.739106][T28415] ? aa_file_perm+0x192/0x15e0 [ 1500.739134][T28415] ? __lock_acquire+0x6b5/0x2cf0 [ 1500.739165][T28415] ? ref_tracker_alloc+0x35c/0x4c0 [ 1500.739190][T28415] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1500.739217][T28415] ? tun_get+0x1c/0x2f0 [ 1500.739245][T28415] ? tun_get+0x1c/0x2f0 [ 1500.739267][T28415] ? tun_get+0x1c/0x2f0 [ 1500.739294][T28415] tun_chr_write_iter+0x113/0x200 [ 1500.739316][T28415] vfs_write+0x61d/0xb90 [ 1500.739343][T28415] ? __pfx_vfs_write+0x10/0x10 [ 1500.739371][T28415] ? __fget_files+0x2a/0x420 [ 1500.739404][T28415] ksys_write+0x150/0x270 [ 1500.739425][T28415] ? __pfx_ksys_write+0x10/0x10 [ 1500.739455][T28415] do_syscall_64+0x14d/0xf80 [ 1500.739472][T28415] ? trace_irq_disable+0x3b/0x150 [ 1500.739497][T28415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.739515][T28415] ? clear_bhb_loop+0x40/0x90 [ 1500.739538][T28415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.739556][T28415] RIP: 0033:0x7f188f15cfce [ 1500.739573][T28415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1500.739589][T28415] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1500.739609][T28415] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1500.739622][T28415] RDX: 0000000000000dd6 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1500.739637][T28415] RBP: 00007f188ffd7090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.739649][T28415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.739666][T28415] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1500.739696][T28415] [ 1500.739739][T19041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.268086][ T6227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.306863][ T6227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.639549][T19041] net_ratelimit: 14 callbacks suppressed [ 1501.639569][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1501.749422][T28442] xt_TCPMSS: Only works on TCP SYN packets [ 1501.775577][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1501.911187][ T5928] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1502.056546][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1502.165891][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1502.232038][T28458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12616'. [ 1502.276761][T19041] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1502.385556][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1502.417650][T28467] netlink: 'syz.2.12618': attribute type 1 has an invalid length. [ 1502.431787][T28468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12615'. [ 1502.435530][T28467] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12618'. [ 1502.496569][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1502.556076][ T5827] Bluetooth: hci1: command tx timeout [ 1502.605617][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1502.653897][T28473] syzkaller0: entered promiscuous mode [ 1502.661694][T28473] syzkaller0: entered allmulticast mode [ 1502.728616][T28475] tun0: tun_chr_ioctl cmd 1074025677 [ 1502.754258][T28475] tun0: linktype set to 804 [ 1502.795729][T28475] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12620'. [ 1502.805597][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1502.839624][T28473] tipc: Enabled bearer , priority 0 [ 1502.869482][T28472] tipc: Resetting bearer [ 1502.929091][T28472] tipc: Disabling bearer [ 1503.233867][T28499] FAULT_INJECTION: forcing a failure. [ 1503.233867][T28499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1503.257904][T28499] CPU: 0 UID: 0 PID: 28499 Comm: syz.2.12626 Not tainted syzkaller #0 PREEMPT(full) [ 1503.257929][T28499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1503.257941][T28499] Call Trace: [ 1503.257949][T28499] [ 1503.257957][T28499] dump_stack_lvl+0xe8/0x150 [ 1503.257987][T28499] should_fail_ex+0x412/0x560 [ 1503.258012][T28499] _copy_to_user+0x31/0xb0 [ 1503.258038][T28499] simple_read_from_buffer+0xe1/0x170 [ 1503.258068][T28499] proc_fail_nth_read+0x1bb/0x230 [ 1503.258095][T28499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1503.258120][T28499] ? rw_verify_area+0x2a6/0x4d0 [ 1503.258137][T28499] ? tun_chr_write_iter+0x18a/0x200 [ 1503.258157][T28499] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1503.258183][T28499] vfs_read+0x20c/0xa70 [ 1503.258200][T28499] ? fdget_pos+0x246/0x320 [ 1503.258229][T28499] ? __pfx___mutex_lock+0x10/0x10 [ 1503.258249][T28499] ? __pfx_vfs_read+0x10/0x10 [ 1503.258268][T28499] ? __fget_files+0x2a/0x420 [ 1503.258296][T28499] ? __fget_files+0x3a0/0x420 [ 1503.258319][T28499] ? __fget_files+0x2a/0x420 [ 1503.258362][T28499] ksys_read+0x150/0x270 [ 1503.258383][T28499] ? __pfx_ksys_read+0x10/0x10 [ 1503.258425][T28499] do_syscall_64+0x14d/0xf80 [ 1503.258485][T28499] ? trace_irq_disable+0x3b/0x150 [ 1503.258517][T28499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.258558][T28499] ? clear_bhb_loop+0x40/0x90 [ 1503.258598][T28499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.258617][T28499] RIP: 0033:0x7f08a275cfce [ 1503.258636][T28499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1503.258652][T28499] RSP: 002b:00007f08a35e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1503.258671][T28499] RAX: ffffffffffffffda RBX: 00007f08a35ea6c0 RCX: 00007f08a275cfce [ 1503.258685][T28499] RDX: 000000000000000f RSI: 00007f08a35ea0a0 RDI: 0000000000000006 [ 1503.258696][T28499] RBP: 00007f08a35ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.258707][T28499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.258718][T28499] R13: 00007f08a2a16038 R14: 00007f08a2a15fa0 R15: 00007ffd06348e58 [ 1503.258751][T28499] [ 1503.972936][T28511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.158481][T28511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.169231][T28537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12636'. [ 1504.247699][ T9258] lec:lec_start_xmit: lec0:No lecd attached [ 1504.348849][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12635'. [ 1504.529694][T28511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.612737][T28525] lo speed is unknown, defaulting to 1000 [ 1504.653924][T28511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.843006][T19041] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.871578][T19041] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.913007][T25157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.937644][T25157] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.310408][T28573] BUG: Bad page state in process syz.1.12644 pfn:46fba [ 1505.317464][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888046fba500 pfn:0x46fba [ 1505.327613][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1505.334742][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1505.343359][T28573] raw: ffff888046fba500 0000000000000001 00000000ffffffff 0000000000000000 [ 1505.352012][T28573] page dumped because: page_pool leak [ 1505.357431][T28573] page_owner tracks the page as allocated [ 1505.363135][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467941506635, free_ts 461731894387 [ 1505.380350][T28573] post_alloc_hook+0x231/0x280 [ 1505.385144][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1505.390773][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1505.396636][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1505.402118][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1505.408335][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1505.414164][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1505.419075][T28573] do_xdp_generic+0x76b/0x12e0 [ 1505.423855][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1505.429627][T28573] process_backlog+0x76d/0x1950 [ 1505.434510][T28573] __napi_poll+0xae/0x340 [ 1505.438910][T28573] net_rx_action+0x627/0xf70 [ 1505.443520][T28573] handle_softirqs+0x22a/0x870 [ 1505.448336][T28573] do_softirq+0x76/0xd0 [ 1505.452513][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1505.457677][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1505.462719][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1505.469282][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1505.474410][T28573] __slab_free+0x263/0x2b0 [ 1505.478896][T28573] qlist_free_all+0x97/0x100 [ 1505.483500][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1505.489021][T28573] __kasan_slab_alloc+0x22/0x80 [ 1505.493893][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1505.499469][T28573] create_new_namespaces+0x33/0x6a0 [ 1505.504701][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1505.509537][T28573] do_syscall_64+0x14d/0xf80 [ 1505.514141][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.520134][T28573] Modules linked in: [ 1505.524056][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Not tainted syzkaller #0 PREEMPT(full) [ 1505.524085][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1505.524099][T28573] Call Trace: [ 1505.524108][T28573] [ 1505.524118][T28573] dump_stack_lvl+0xe8/0x150 [ 1505.524151][T28573] bad_page+0x17f/0x1c0 [ 1505.524191][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1505.524223][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1505.524266][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1505.524303][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1505.524324][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1505.524375][T28573] do_xdp_generic+0xac5/0x12e0 [ 1505.524409][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1505.524462][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1505.524490][T28573] tun_get_user+0x247d/0x3dd0 [ 1505.524529][T28573] ? aa_file_perm+0x192/0x15e0 [ 1505.524561][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1505.524587][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1505.524611][T28573] ? aa_file_perm+0x192/0x15e0 [ 1505.524644][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1505.524681][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1505.524711][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1505.524743][T28573] ? tun_get+0x1c/0x2f0 [ 1505.524775][T28573] ? tun_get+0x1c/0x2f0 [ 1505.524801][T28573] ? tun_get+0x1c/0x2f0 [ 1505.524832][T28573] tun_chr_write_iter+0x113/0x200 [ 1505.524862][T28573] vfs_write+0x61d/0xb90 [ 1505.524892][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1505.524924][T28573] ? __fget_files+0x2a/0x420 [ 1505.524962][T28573] ksys_write+0x150/0x270 [ 1505.524987][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1505.525019][T28573] do_syscall_64+0x14d/0xf80 [ 1505.525039][T28573] ? trace_irq_disable+0x3b/0x150 [ 1505.525068][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.525090][T28573] ? clear_bhb_loop+0x40/0x90 [ 1505.525117][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.525138][T28573] RIP: 0033:0x7f188f15cfce [ 1505.525157][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1505.525183][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1505.525205][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1505.525220][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1505.525233][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1505.525246][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.525259][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1505.525292][T28573] [ 1505.525302][T28573] Disabling lock debugging due to kernel taint [ 1505.788901][T28573] BUG: Bad page state in process syz.1.12644 pfn:36ac3 [ 1505.795852][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888036ac3d00 pfn:0x36ac3 [ 1505.805939][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1505.813046][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1505.821700][T28573] raw: ffff888036ac3d00 0000000000000001 00000000ffffffff 0000000000000000 [ 1505.830322][T28573] page dumped because: page_pool leak [ 1505.835719][T28573] page_owner tracks the page as allocated [ 1505.841436][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467941720393, free_ts 461731878867 [ 1505.858659][T28573] post_alloc_hook+0x231/0x280 [ 1505.863431][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1505.869039][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1505.874865][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1505.880352][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1505.886441][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1505.892286][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1505.897245][T28573] do_xdp_generic+0x76b/0x12e0 [ 1505.902019][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1505.907761][T28573] process_backlog+0x76d/0x1950 [ 1505.912625][T28573] __napi_poll+0xae/0x340 [ 1505.917138][T28573] net_rx_action+0x627/0xf70 [ 1505.921755][T28573] handle_softirqs+0x22a/0x870 [ 1505.926576][T28573] do_softirq+0x76/0xd0 [ 1505.930748][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1505.935883][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1505.940928][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1505.947463][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1505.952581][T28573] __slab_free+0x263/0x2b0 [ 1505.957030][T28573] qlist_free_all+0x97/0x100 [ 1505.961632][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1505.967106][T28573] __kasan_slab_alloc+0x22/0x80 [ 1505.971960][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1505.977562][T28573] create_new_namespaces+0x33/0x6a0 [ 1505.982798][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1505.987602][T28573] do_syscall_64+0x14d/0xf80 [ 1505.992202][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.998136][T28573] Modules linked in: [ 1506.002044][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1506.002062][T28573] Tainted: [B]=BAD_PAGE [ 1506.002067][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1506.002074][T28573] Call Trace: [ 1506.002079][T28573] [ 1506.002084][T28573] dump_stack_lvl+0xe8/0x150 [ 1506.002105][T28573] bad_page+0x17f/0x1c0 [ 1506.002122][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1506.002135][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1506.002151][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1506.002168][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1506.002179][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1506.002197][T28573] do_xdp_generic+0xac5/0x12e0 [ 1506.002210][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1506.002227][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1506.002241][T28573] tun_get_user+0x247d/0x3dd0 [ 1506.002258][T28573] ? aa_file_perm+0x192/0x15e0 [ 1506.002273][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1506.002285][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1506.002298][T28573] ? aa_file_perm+0x192/0x15e0 [ 1506.002312][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1506.002329][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1506.002343][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1506.002357][T28573] ? tun_get+0x1c/0x2f0 [ 1506.002371][T28573] ? tun_get+0x1c/0x2f0 [ 1506.002383][T28573] ? tun_get+0x1c/0x2f0 [ 1506.002396][T28573] tun_chr_write_iter+0x113/0x200 [ 1506.002410][T28573] vfs_write+0x61d/0xb90 [ 1506.002422][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1506.002434][T28573] ? __fget_files+0x2a/0x420 [ 1506.002453][T28573] ksys_write+0x150/0x270 [ 1506.002472][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1506.002495][T28573] do_syscall_64+0x14d/0xf80 [ 1506.002513][T28573] ? trace_irq_disable+0x3b/0x150 [ 1506.002528][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.002540][T28573] ? clear_bhb_loop+0x40/0x90 [ 1506.002552][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.002562][T28573] RIP: 0033:0x7f188f15cfce [ 1506.002572][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1506.002582][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1506.002601][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1506.002610][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1506.002617][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1506.002624][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.002631][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1506.002643][T28573] [ 1506.002650][T28573] BUG: Bad page state in process syz.1.12644 pfn:1cbcc [ 1506.235951][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1506.238376][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801cbcc100 pfn:0x1cbcc [ 1506.289966][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1506.297123][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1506.305739][T28573] raw: ffff88801cbcc100 0000000000000001 00000000ffffffff 0000000000000000 [ 1506.314301][T28573] page dumped because: page_pool leak [ 1506.319703][T28573] page_owner tracks the page as allocated [ 1506.325444][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467943127791, free_ts 461731798121 [ 1506.342712][T28573] post_alloc_hook+0x231/0x280 [ 1506.347524][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1506.353071][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1506.358994][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1506.364461][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1506.370598][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1506.376431][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1506.381272][T28573] do_xdp_generic+0x76b/0x12e0 [ 1506.386061][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1506.391790][T28573] process_backlog+0x76d/0x1950 [ 1506.396666][T28573] __napi_poll+0xae/0x340 [ 1506.401000][T28573] net_rx_action+0x627/0xf70 [ 1506.405626][T28573] handle_softirqs+0x22a/0x870 [ 1506.410395][T28573] do_softirq+0x76/0xd0 [ 1506.414539][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1506.419670][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1506.424697][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1506.431228][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1506.436373][T28573] __slab_free+0x263/0x2b0 [ 1506.440799][T28573] qlist_free_all+0x97/0x100 [ 1506.445434][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1506.451081][T28573] __kasan_slab_alloc+0x22/0x80 [ 1506.455982][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1506.461489][T28573] create_new_namespaces+0x33/0x6a0 [ 1506.466748][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1506.471523][T28573] do_syscall_64+0x14d/0xf80 [ 1506.476141][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.482048][T28573] Modules linked in: [ 1506.485982][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1506.486014][T28573] Tainted: [B]=BAD_PAGE [ 1506.486023][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1506.486036][T28573] Call Trace: [ 1506.486044][T28573] [ 1506.486054][T28573] dump_stack_lvl+0xe8/0x150 [ 1506.486088][T28573] bad_page+0x17f/0x1c0 [ 1506.486117][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1506.486142][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1506.486173][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1506.486204][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1506.486222][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1506.486257][T28573] do_xdp_generic+0xac5/0x12e0 [ 1506.486283][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1506.486316][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1506.486343][T28573] tun_get_user+0x247d/0x3dd0 [ 1506.486375][T28573] ? aa_file_perm+0x192/0x15e0 [ 1506.486403][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1506.486428][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1506.486453][T28573] ? aa_file_perm+0x192/0x15e0 [ 1506.486481][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1506.486518][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1506.486545][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1506.486572][T28573] ? tun_get+0x1c/0x2f0 [ 1506.486600][T28573] ? tun_get+0x1c/0x2f0 [ 1506.486624][T28573] ? tun_get+0x1c/0x2f0 [ 1506.486650][T28573] tun_chr_write_iter+0x113/0x200 [ 1506.486678][T28573] vfs_write+0x61d/0xb90 [ 1506.486701][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1506.486724][T28573] ? __fget_files+0x2a/0x420 [ 1506.486757][T28573] ksys_write+0x150/0x270 [ 1506.486777][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1506.486802][T28573] do_syscall_64+0x14d/0xf80 [ 1506.486821][T28573] ? trace_irq_disable+0x3b/0x150 [ 1506.486851][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.486872][T28573] ? clear_bhb_loop+0x40/0x90 [ 1506.486894][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.486915][T28573] RIP: 0033:0x7f188f15cfce [ 1506.486933][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1506.486952][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1506.486975][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1506.486990][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1506.487005][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1506.487018][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.487031][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1506.487055][T28573] [ 1506.487067][T28573] BUG: Bad page state in process syz.1.12644 pfn:52a8c [ 1506.756624][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888052a8cf00 pfn:0x52a8c [ 1506.766709][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1506.773851][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1506.782464][T28573] raw: ffff888052a8cf00 0000000000000001 00000000ffffffff 0000000000000000 [ 1506.791066][T28573] page dumped because: page_pool leak [ 1506.796454][T28573] page_owner tracks the page as allocated [ 1506.802166][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467942134890, free_ts 461731852241 [ 1506.819375][T28573] post_alloc_hook+0x231/0x280 [ 1506.824147][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1506.829747][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1506.835607][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1506.841317][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1506.847409][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1506.853227][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1506.858112][T28573] do_xdp_generic+0x76b/0x12e0 [ 1506.862906][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1506.868650][T28573] process_backlog+0x76d/0x1950 [ 1506.873513][T28573] __napi_poll+0xae/0x340 [ 1506.877866][T28573] net_rx_action+0x627/0xf70 [ 1506.882510][T28573] handle_softirqs+0x22a/0x870 [ 1506.887332][T28573] do_softirq+0x76/0xd0 [ 1506.891495][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1506.896634][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1506.901671][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1506.908190][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1506.913307][T28573] __slab_free+0x263/0x2b0 [ 1506.917755][T28573] qlist_free_all+0x97/0x100 [ 1506.922355][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1506.927840][T28573] __kasan_slab_alloc+0x22/0x80 [ 1506.932694][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1506.938186][T28573] create_new_namespaces+0x33/0x6a0 [ 1506.943390][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1506.948182][T28573] do_syscall_64+0x14d/0xf80 [ 1506.952785][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.958709][T28573] Modules linked in: [ 1506.962612][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1506.962643][T28573] Tainted: [B]=BAD_PAGE [ 1506.962651][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1506.962660][T28573] Call Trace: [ 1506.962665][T28573] [ 1506.962671][T28573] dump_stack_lvl+0xe8/0x150 [ 1506.962690][T28573] bad_page+0x17f/0x1c0 [ 1506.962706][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1506.962720][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1506.962737][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1506.962754][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1506.962764][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1506.962782][T28573] do_xdp_generic+0xac5/0x12e0 [ 1506.962795][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1506.962812][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1506.962826][T28573] tun_get_user+0x247d/0x3dd0 [ 1506.962842][T28573] ? aa_file_perm+0x192/0x15e0 [ 1506.962857][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1506.962870][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1506.962882][T28573] ? aa_file_perm+0x192/0x15e0 [ 1506.962896][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1506.962915][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1506.962929][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1506.962943][T28573] ? tun_get+0x1c/0x2f0 [ 1506.962957][T28573] ? tun_get+0x1c/0x2f0 [ 1506.962969][T28573] ? tun_get+0x1c/0x2f0 [ 1506.962982][T28573] tun_chr_write_iter+0x113/0x200 [ 1506.962996][T28573] vfs_write+0x61d/0xb90 [ 1506.963009][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1506.963021][T28573] ? __fget_files+0x2a/0x420 [ 1506.963037][T28573] ksys_write+0x150/0x270 [ 1506.963048][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1506.963061][T28573] do_syscall_64+0x14d/0xf80 [ 1506.963071][T28573] ? trace_irq_disable+0x3b/0x150 [ 1506.963087][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.963098][T28573] ? clear_bhb_loop+0x40/0x90 [ 1506.963110][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.963121][T28573] RIP: 0033:0x7f188f15cfce [ 1506.963131][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1506.963141][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1506.963154][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1506.963162][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1506.963173][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1506.963186][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.963196][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1506.963215][T28573] [ 1506.963227][T28573] BUG: Bad page state in process syz.1.12644 pfn:6d15b [ 1507.232861][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806d15bf80 pfn:0x6d15b [ 1507.242940][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1507.250075][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1507.258678][T28573] raw: ffff88806d15bf80 0000000000000001 00000000ffffffff 0000000000000000 [ 1507.267277][T28573] page dumped because: page_pool leak [ 1507.272627][T28573] page_owner tracks the page as allocated [ 1507.278354][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467941927803, free_ts 461731866045 [ 1507.295587][T28573] post_alloc_hook+0x231/0x280 [ 1507.300336][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1507.305893][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1507.311710][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1507.317213][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1507.323279][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1507.329096][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1507.333953][T28573] do_xdp_generic+0x76b/0x12e0 [ 1507.338731][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1507.344451][T28573] process_backlog+0x76d/0x1950 [ 1507.349329][T28573] __napi_poll+0xae/0x340 [ 1507.353661][T28573] net_rx_action+0x627/0xf70 [ 1507.358275][T28573] handle_softirqs+0x22a/0x870 [ 1507.363046][T28573] do_softirq+0x76/0xd0 [ 1507.367239][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1507.372356][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1507.377407][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1507.383904][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1507.389035][T28573] __slab_free+0x263/0x2b0 [ 1507.393456][T28573] qlist_free_all+0x97/0x100 [ 1507.398074][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1507.403532][T28573] __kasan_slab_alloc+0x22/0x80 [ 1507.408439][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1507.413907][T28573] create_new_namespaces+0x33/0x6a0 [ 1507.419117][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1507.423893][T28573] do_syscall_64+0x14d/0xf80 [ 1507.428621][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.434519][T28573] Modules linked in: [ 1507.438439][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1507.438467][T28573] Tainted: [B]=BAD_PAGE [ 1507.438472][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1507.438483][T28573] Call Trace: [ 1507.438490][T28573] [ 1507.438498][T28573] dump_stack_lvl+0xe8/0x150 [ 1507.438527][T28573] bad_page+0x17f/0x1c0 [ 1507.438554][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1507.438576][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1507.438606][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1507.438638][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1507.438659][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1507.438692][T28573] do_xdp_generic+0xac5/0x12e0 [ 1507.438717][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1507.438748][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1507.438774][T28573] tun_get_user+0x247d/0x3dd0 [ 1507.438803][T28573] ? aa_file_perm+0x192/0x15e0 [ 1507.438830][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1507.438854][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1507.438876][T28573] ? aa_file_perm+0x192/0x15e0 [ 1507.438912][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1507.438941][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1507.438967][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1507.438992][T28573] ? tun_get+0x1c/0x2f0 [ 1507.439015][T28573] ? tun_get+0x1c/0x2f0 [ 1507.439037][T28573] ? tun_get+0x1c/0x2f0 [ 1507.439062][T28573] tun_chr_write_iter+0x113/0x200 [ 1507.439088][T28573] vfs_write+0x61d/0xb90 [ 1507.439110][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1507.439134][T28573] ? __fget_files+0x2a/0x420 [ 1507.439164][T28573] ksys_write+0x150/0x270 [ 1507.439184][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1507.439207][T28573] do_syscall_64+0x14d/0xf80 [ 1507.439226][T28573] ? trace_irq_disable+0x3b/0x150 [ 1507.439254][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.439274][T28573] ? clear_bhb_loop+0x40/0x90 [ 1507.439296][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.439315][T28573] RIP: 0033:0x7f188f15cfce [ 1507.439332][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1507.439349][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1507.439371][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1507.439385][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1507.439398][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1507.439411][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.439423][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1507.439447][T28573] [ 1507.439458][T28573] BUG: Bad page state in process syz.1.12644 pfn:55ef7 [ 1507.709247][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055ef7600 pfn:0x55ef7 [ 1507.719356][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1507.726501][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1507.735087][T28573] raw: ffff888055ef7600 0000000000000001 00000000ffffffff 0000000000000000 [ 1507.743694][T28573] page dumped because: page_pool leak [ 1507.749096][T28573] page_owner tracks the page as allocated [ 1507.754816][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467943346909, free_ts 461731783928 [ 1507.772042][T28573] post_alloc_hook+0x231/0x280 [ 1507.776834][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1507.782381][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1507.788231][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1507.793702][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1507.799797][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1507.805635][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1507.810478][T28573] do_xdp_generic+0x76b/0x12e0 [ 1507.815242][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1507.820987][T28573] process_backlog+0x76d/0x1950 [ 1507.825895][T28573] __napi_poll+0xae/0x340 [ 1507.830233][T28573] net_rx_action+0x627/0xf70 [ 1507.834809][T28573] handle_softirqs+0x22a/0x870 [ 1507.839592][T28573] do_softirq+0x76/0xd0 [ 1507.843756][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1507.848904][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1507.853964][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1507.860483][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1507.865617][T28573] __slab_free+0x263/0x2b0 [ 1507.870023][T28573] qlist_free_all+0x97/0x100 [ 1507.874597][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1507.880082][T28573] __kasan_slab_alloc+0x22/0x80 [ 1507.884944][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1507.890487][T28573] create_new_namespaces+0x33/0x6a0 [ 1507.895713][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1507.900465][T28573] do_syscall_64+0x14d/0xf80 [ 1507.905035][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.910955][T28573] Modules linked in: [ 1507.914863][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1507.914881][T28573] Tainted: [B]=BAD_PAGE [ 1507.914886][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1507.914893][T28573] Call Trace: [ 1507.914898][T28573] [ 1507.914903][T28573] dump_stack_lvl+0xe8/0x150 [ 1507.914922][T28573] bad_page+0x17f/0x1c0 [ 1507.914939][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1507.914952][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1507.914969][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1507.914986][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1507.914996][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1507.915014][T28573] do_xdp_generic+0xac5/0x12e0 [ 1507.915027][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1507.915044][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1507.915058][T28573] tun_get_user+0x247d/0x3dd0 [ 1507.915074][T28573] ? aa_file_perm+0x192/0x15e0 [ 1507.915089][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1507.915102][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1507.915115][T28573] ? aa_file_perm+0x192/0x15e0 [ 1507.915128][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1507.915144][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1507.915158][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1507.915183][T28573] ? tun_get+0x1c/0x2f0 [ 1507.915209][T28573] ? tun_get+0x1c/0x2f0 [ 1507.915229][T28573] ? tun_get+0x1c/0x2f0 [ 1507.915242][T28573] tun_chr_write_iter+0x113/0x200 [ 1507.915256][T28573] vfs_write+0x61d/0xb90 [ 1507.915269][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1507.915281][T28573] ? __fget_files+0x2a/0x420 [ 1507.915297][T28573] ksys_write+0x150/0x270 [ 1507.915308][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1507.915320][T28573] do_syscall_64+0x14d/0xf80 [ 1507.915331][T28573] ? trace_irq_disable+0x3b/0x150 [ 1507.915350][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.915361][T28573] ? clear_bhb_loop+0x40/0x90 [ 1507.915373][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.915384][T28573] RIP: 0033:0x7f188f15cfce [ 1507.915405][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1507.915420][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1507.915441][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1507.915455][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1507.915467][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1507.915480][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.915492][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1507.915513][T28573] [ 1508.177836][T28573] BUG: Bad page state in process syz.1.12644 pfn:1ebab [ 1508.184783][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801ebab680 pfn:0x1ebab [ 1508.194892][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1508.202041][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1508.210671][T28573] raw: ffff88801ebab680 0000000000000001 00000000ffffffff 0000000000000000 [ 1508.219277][T28573] page dumped because: page_pool leak [ 1508.224647][T28573] page_owner tracks the page as allocated [ 1508.230376][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467940806934, free_ts 461731945266 [ 1508.247615][T28573] post_alloc_hook+0x231/0x280 [ 1508.252374][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1508.257942][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1508.263761][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1508.269253][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1508.275332][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1508.281170][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1508.286055][T28573] do_xdp_generic+0x76b/0x12e0 [ 1508.290806][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1508.296543][T28573] process_backlog+0x76d/0x1950 [ 1508.301409][T28573] __napi_poll+0xae/0x340 [ 1508.305759][T28573] net_rx_action+0x627/0xf70 [ 1508.310368][T28573] handle_softirqs+0x22a/0x870 [ 1508.315135][T28573] do_softirq+0x76/0xd0 [ 1508.319320][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1508.324437][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1508.329482][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1508.336002][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1508.341106][T28573] __slab_free+0x263/0x2b0 [ 1508.345537][T28573] qlist_free_all+0x97/0x100 [ 1508.350147][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1508.355626][T28573] __kasan_slab_alloc+0x22/0x80 [ 1508.360481][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1508.365968][T28573] create_new_namespaces+0x33/0x6a0 [ 1508.371178][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1508.375966][T28573] do_syscall_64+0x14d/0xf80 [ 1508.380559][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.386480][T28573] Modules linked in: [ 1508.390382][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1508.390400][T28573] Tainted: [B]=BAD_PAGE [ 1508.390404][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1508.390411][T28573] Call Trace: [ 1508.390417][T28573] [ 1508.390422][T28573] dump_stack_lvl+0xe8/0x150 [ 1508.390441][T28573] bad_page+0x17f/0x1c0 [ 1508.390457][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1508.390470][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1508.390487][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1508.390503][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1508.390514][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1508.390532][T28573] do_xdp_generic+0xac5/0x12e0 [ 1508.390546][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1508.390562][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1508.390577][T28573] tun_get_user+0x247d/0x3dd0 [ 1508.390593][T28573] ? aa_file_perm+0x192/0x15e0 [ 1508.390607][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1508.390620][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1508.390632][T28573] ? aa_file_perm+0x192/0x15e0 [ 1508.390646][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1508.390662][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1508.390676][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1508.390695][T28573] ? tun_get+0x1c/0x2f0 [ 1508.390709][T28573] ? tun_get+0x1c/0x2f0 [ 1508.390722][T28573] ? tun_get+0x1c/0x2f0 [ 1508.390735][T28573] tun_chr_write_iter+0x113/0x200 [ 1508.390749][T28573] vfs_write+0x61d/0xb90 [ 1508.390761][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1508.390774][T28573] ? __fget_files+0x2a/0x420 [ 1508.390790][T28573] ksys_write+0x150/0x270 [ 1508.390801][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1508.390813][T28573] do_syscall_64+0x14d/0xf80 [ 1508.390824][T28573] ? trace_irq_disable+0x3b/0x150 [ 1508.390839][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.390850][T28573] ? clear_bhb_loop+0x40/0x90 [ 1508.390867][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.390886][T28573] RIP: 0033:0x7f188f15cfce [ 1508.390904][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1508.390922][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1508.390938][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1508.390946][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1508.390953][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1508.390960][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.390967][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1508.390979][T28573] [ 1508.390987][T28573] BUG: Bad page state in process syz.1.12644 pfn:34d21 [ 1508.660494][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034d21f00 pfn:0x34d21 [ 1508.670575][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1508.677719][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1508.686329][T28573] raw: ffff888034d21f00 0000000000000001 00000000ffffffff 0000000000000000 [ 1508.694904][T28573] page dumped because: page_pool leak [ 1508.700292][T28573] page_owner tracks the page as allocated [ 1508.706037][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467937103731, free_ts 461732051387 [ 1508.723281][T28573] post_alloc_hook+0x231/0x280 [ 1508.728067][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1508.733602][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1508.739430][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1508.744894][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1508.751004][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1508.756837][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1508.761678][T28573] do_xdp_generic+0x76b/0x12e0 [ 1508.766453][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1508.772177][T28573] process_backlog+0x76d/0x1950 [ 1508.777055][T28573] __napi_poll+0xae/0x340 [ 1508.781386][T28573] net_rx_action+0x627/0xf70 [ 1508.786007][T28573] handle_softirqs+0x22a/0x870 [ 1508.790805][T28573] do_softirq+0x76/0xd0 [ 1508.794948][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1508.800085][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1508.805123][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1508.811657][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1508.816801][T28573] __slab_free+0x263/0x2b0 [ 1508.821383][T28573] qlist_free_all+0x97/0x100 [ 1508.826009][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1508.831484][T28573] __kasan_slab_alloc+0x22/0x80 [ 1508.836372][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1508.841845][T28573] create_new_namespaces+0x33/0x6a0 [ 1508.847086][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1508.851861][T28573] do_syscall_64+0x14d/0xf80 [ 1508.856472][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.862373][T28573] Modules linked in: [ 1508.866296][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1508.866321][T28573] Tainted: [B]=BAD_PAGE [ 1508.866327][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1508.866338][T28573] Call Trace: [ 1508.866345][T28573] [ 1508.866353][T28573] dump_stack_lvl+0xe8/0x150 [ 1508.866382][T28573] bad_page+0x17f/0x1c0 [ 1508.866413][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1508.866439][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1508.866469][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1508.866501][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1508.866520][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1508.866553][T28573] do_xdp_generic+0xac5/0x12e0 [ 1508.866574][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1508.866606][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1508.866633][T28573] tun_get_user+0x247d/0x3dd0 [ 1508.866663][T28573] ? aa_file_perm+0x192/0x15e0 [ 1508.866691][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1508.866717][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1508.866741][T28573] ? aa_file_perm+0x192/0x15e0 [ 1508.866768][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1508.866796][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1508.866822][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1508.866845][T28573] ? tun_get+0x1c/0x2f0 [ 1508.866869][T28573] ? tun_get+0x1c/0x2f0 [ 1508.866891][T28573] ? tun_get+0x1c/0x2f0 [ 1508.866916][T28573] tun_chr_write_iter+0x113/0x200 [ 1508.866942][T28573] vfs_write+0x61d/0xb90 [ 1508.866965][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1508.866985][T28573] ? __fget_files+0x2a/0x420 [ 1508.867016][T28573] ksys_write+0x150/0x270 [ 1508.867035][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1508.867059][T28573] do_syscall_64+0x14d/0xf80 [ 1508.867078][T28573] ? trace_irq_disable+0x3b/0x150 [ 1508.867106][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.867126][T28573] ? clear_bhb_loop+0x40/0x90 [ 1508.867147][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.867167][T28573] RIP: 0033:0x7f188f15cfce [ 1508.867185][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1508.867202][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1508.867223][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1508.867239][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1508.867252][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1508.867265][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.867286][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1508.867309][T28573] [ 1508.867320][T28573] BUG: Bad page state in process syz.1.12644 pfn:34921 [ 1509.136861][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034921c80 pfn:0x34921 [ 1509.146941][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1509.154079][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1509.162711][T28573] raw: ffff888034921c80 0000000000000001 00000000ffffffff 0000000000000000 [ 1509.171318][T28573] page dumped because: page_pool leak [ 1509.176709][T28573] page_owner tracks the page as allocated [ 1509.182418][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467937321435, free_ts 461732038622 [ 1509.199649][T28573] post_alloc_hook+0x231/0x280 [ 1509.204424][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1509.209998][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1509.215843][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1509.221291][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1509.227381][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1509.233193][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1509.238067][T28573] do_xdp_generic+0x76b/0x12e0 [ 1509.242832][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1509.248569][T28573] process_backlog+0x76d/0x1950 [ 1509.253428][T28573] __napi_poll+0xae/0x340 [ 1509.257774][T28573] net_rx_action+0x627/0xf70 [ 1509.262369][T28573] handle_softirqs+0x22a/0x870 [ 1509.267161][T28573] do_softirq+0x76/0xd0 [ 1509.271319][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1509.276468][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1509.281495][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1509.288012][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1509.293145][T28573] __slab_free+0x263/0x2b0 [ 1509.297581][T28573] qlist_free_all+0x97/0x100 [ 1509.302170][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1509.307651][T28573] __kasan_slab_alloc+0x22/0x80 [ 1509.312505][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1509.317990][T28573] create_new_namespaces+0x33/0x6a0 [ 1509.323194][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1509.327988][T28573] do_syscall_64+0x14d/0xf80 [ 1509.332580][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.338487][T28573] Modules linked in: [ 1509.342382][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1509.342400][T28573] Tainted: [B]=BAD_PAGE [ 1509.342404][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1509.342411][T28573] Call Trace: [ 1509.342416][T28573] [ 1509.342422][T28573] dump_stack_lvl+0xe8/0x150 [ 1509.342440][T28573] bad_page+0x17f/0x1c0 [ 1509.342457][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1509.342470][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1509.342487][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1509.342504][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1509.342514][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1509.342531][T28573] do_xdp_generic+0xac5/0x12e0 [ 1509.342544][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1509.342562][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1509.342576][T28573] tun_get_user+0x247d/0x3dd0 [ 1509.342592][T28573] ? aa_file_perm+0x192/0x15e0 [ 1509.342606][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1509.342622][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1509.342634][T28573] ? aa_file_perm+0x192/0x15e0 [ 1509.342652][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1509.342682][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1509.342708][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1509.342723][T28573] ? tun_get+0x1c/0x2f0 [ 1509.342737][T28573] ? tun_get+0x1c/0x2f0 [ 1509.342749][T28573] ? tun_get+0x1c/0x2f0 [ 1509.342763][T28573] tun_chr_write_iter+0x113/0x200 [ 1509.342777][T28573] vfs_write+0x61d/0xb90 [ 1509.342789][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1509.342801][T28573] ? __fget_files+0x2a/0x420 [ 1509.342818][T28573] ksys_write+0x150/0x270 [ 1509.342829][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1509.342841][T28573] do_syscall_64+0x14d/0xf80 [ 1509.342851][T28573] ? trace_irq_disable+0x3b/0x150 [ 1509.342867][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.342879][T28573] ? clear_bhb_loop+0x40/0x90 [ 1509.342891][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.342901][T28573] RIP: 0033:0x7f188f15cfce [ 1509.342912][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1509.342922][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1509.342934][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1509.342942][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1509.342950][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1509.342957][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.342964][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1509.342975][T28573] [ 1509.342983][T28573] BUG: Bad page state in process syz.1.12644 pfn:7c3e0 [ 1509.612506][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c3e0e00 pfn:0x7c3e0 [ 1509.622588][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1509.629731][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1509.638360][T28573] raw: ffff88807c3e0e00 0000000000000001 00000000ffffffff 0000000000000000 [ 1509.646959][T28573] page dumped because: page_pool leak [ 1509.652311][T28573] page_owner tracks the page as allocated [ 1509.658046][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467939457087, free_ts 461732025511 [ 1509.675273][T28573] post_alloc_hook+0x231/0x280 [ 1509.680058][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1509.685641][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1509.691454][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1509.696933][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1509.703003][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1509.708827][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1509.713682][T28573] do_xdp_generic+0x76b/0x12e0 [ 1509.718458][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1509.724181][T28573] process_backlog+0x76d/0x1950 [ 1509.729051][T28573] __napi_poll+0xae/0x340 [ 1509.733390][T28573] net_rx_action+0x627/0xf70 [ 1509.737996][T28573] handle_softirqs+0x22a/0x870 [ 1509.742763][T28573] do_softirq+0x76/0xd0 [ 1509.746934][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1509.752058][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1509.757127][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1509.763617][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1509.768749][T28573] __slab_free+0x263/0x2b0 [ 1509.773164][T28573] qlist_free_all+0x97/0x100 [ 1509.777770][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1509.783226][T28573] __kasan_slab_alloc+0x22/0x80 [ 1509.788095][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1509.793567][T28573] create_new_namespaces+0x33/0x6a0 [ 1509.798783][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1509.803556][T28573] do_syscall_64+0x14d/0xf80 [ 1509.808168][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.814067][T28573] Modules linked in: [ 1509.817982][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1509.818011][T28573] Tainted: [B]=BAD_PAGE [ 1509.818017][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1509.818028][T28573] Call Trace: [ 1509.818035][T28573] [ 1509.818043][T28573] dump_stack_lvl+0xe8/0x150 [ 1509.818079][T28573] bad_page+0x17f/0x1c0 [ 1509.818105][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1509.818131][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1509.818161][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1509.818194][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1509.818212][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1509.818241][T28573] do_xdp_generic+0xac5/0x12e0 [ 1509.818264][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1509.818297][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1509.818323][T28573] tun_get_user+0x247d/0x3dd0 [ 1509.818354][T28573] ? aa_file_perm+0x192/0x15e0 [ 1509.818382][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1509.818406][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1509.818429][T28573] ? aa_file_perm+0x192/0x15e0 [ 1509.818456][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1509.818486][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1509.818512][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1509.818540][T28573] ? tun_get+0x1c/0x2f0 [ 1509.818566][T28573] ? tun_get+0x1c/0x2f0 [ 1509.818590][T28573] ? tun_get+0x1c/0x2f0 [ 1509.818615][T28573] tun_chr_write_iter+0x113/0x200 [ 1509.818641][T28573] vfs_write+0x61d/0xb90 [ 1509.818662][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1509.818684][T28573] ? __fget_files+0x2a/0x420 [ 1509.818714][T28573] ksys_write+0x150/0x270 [ 1509.818734][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1509.818758][T28573] do_syscall_64+0x14d/0xf80 [ 1509.818777][T28573] ? trace_irq_disable+0x3b/0x150 [ 1509.818806][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.818826][T28573] ? clear_bhb_loop+0x40/0x90 [ 1509.818848][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.818867][T28573] RIP: 0033:0x7f188f15cfce [ 1509.818884][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1509.818902][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1509.818923][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1509.818938][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1509.818952][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1509.818965][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.818977][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1509.818998][T28573] [ 1509.819010][T28573] BUG: Bad page state in process syz.1.12644 pfn:7e055 [ 1510.088468][T28573] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e055c80 pfn:0x7e055 [ 1510.098566][T28573] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1510.105717][T28573] raw: 00fff00000000000 dead000000000040 ffff888022abe000 0000000000000000 [ 1510.114306][T28573] raw: ffff88807e055c80 0000000000000001 00000000ffffffff 0000000000000000 [ 1510.122905][T28573] page dumped because: page_pool leak [ 1510.128304][T28573] page_owner tracks the page as allocated [ 1510.134003][T28573] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 20449, tgid 20448 (syz.2.3416), ts 467939676078, free_ts 461732012194 [ 1510.151223][T28573] post_alloc_hook+0x231/0x280 [ 1510.156026][T28573] get_page_from_freelist+0x24dc/0x2580 [ 1510.161567][T28573] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1510.167391][T28573] alloc_pages_bulk_noprof+0x558/0x700 [ 1510.172854][T28573] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 1510.178941][T28573] page_pool_alloc_frag_netmem+0x421/0x9b0 [ 1510.184754][T28573] skb_pp_cow_data+0x287/0x1bb0 [ 1510.189627][T28573] do_xdp_generic+0x76b/0x12e0 [ 1510.194388][T28573] __netif_receive_skb_core+0x10e5/0x31a0 [ 1510.200127][T28573] process_backlog+0x76d/0x1950 [ 1510.204983][T28573] __napi_poll+0xae/0x340 [ 1510.209335][T28573] net_rx_action+0x627/0xf70 [ 1510.213926][T28573] handle_softirqs+0x22a/0x870 [ 1510.218750][T28573] do_softirq+0x76/0xd0 [ 1510.222911][T28573] __local_bh_enable_ip+0xf8/0x130 [ 1510.228040][T28573] __dev_queue_xmit+0x1f56/0x38d0 [ 1510.233065][T28573] page last free pid 20205 tgid 20202 stack trace: [ 1510.239577][T28573] __free_frozen_pages+0xc2b/0xdb0 [ 1510.244694][T28573] __slab_free+0x263/0x2b0 [ 1510.249128][T28573] qlist_free_all+0x97/0x100 [ 1510.253717][T28573] kasan_quarantine_reduce+0x148/0x160 [ 1510.259201][T28573] __kasan_slab_alloc+0x22/0x80 [ 1510.264052][T28573] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1510.269542][T28573] create_new_namespaces+0x33/0x6a0 [ 1510.274748][T28573] __se_sys_setns+0x2c0/0x1bb0 [ 1510.279536][T28573] do_syscall_64+0x14d/0xf80 [ 1510.284126][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.290040][T28573] Modules linked in: [ 1510.293936][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.1.12644 Tainted: G B syzkaller #0 PREEMPT(full) [ 1510.293954][T28573] Tainted: [B]=BAD_PAGE [ 1510.293958][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1510.293979][T28573] Call Trace: [ 1510.293984][T28573] [ 1510.293990][T28573] dump_stack_lvl+0xe8/0x150 [ 1510.294010][T28573] bad_page+0x17f/0x1c0 [ 1510.294027][T28573] __free_frozen_pages+0xd62/0xdb0 [ 1510.294040][T28573] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 1510.294057][T28573] bpf_xdp_adjust_tail+0x1d6/0x220 [ 1510.294074][T28573] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 1510.294085][T28573] bpf_prog_run_generic_xdp+0x603/0x1490 [ 1510.294102][T28573] do_xdp_generic+0xac5/0x12e0 [ 1510.294116][T28573] ? __pfx_do_xdp_generic+0x10/0x10 [ 1510.294133][T28573] ? tun_get_user+0x2354/0x3dd0 [ 1510.294147][T28573] tun_get_user+0x247d/0x3dd0 [ 1510.294163][T28573] ? aa_file_perm+0x192/0x15e0 [ 1510.294178][T28573] ? aa_file_perm+0x50e/0x15e0 [ 1510.294191][T28573] ? __pfx_tun_get_user+0x10/0x10 [ 1510.294203][T28573] ? aa_file_perm+0x192/0x15e0 [ 1510.294217][T28573] ? __lock_acquire+0x6b5/0x2cf0 [ 1510.294234][T28573] ? ref_tracker_alloc+0x35c/0x4c0 [ 1510.294248][T28573] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1510.294262][T28573] ? tun_get+0x1c/0x2f0 [ 1510.294276][T28573] ? tun_get+0x1c/0x2f0 [ 1510.294288][T28573] ? tun_get+0x1c/0x2f0 [ 1510.294301][T28573] tun_chr_write_iter+0x113/0x200 [ 1510.294315][T28573] vfs_write+0x61d/0xb90 [ 1510.294329][T28573] ? __pfx_vfs_write+0x10/0x10 [ 1510.294351][T28573] ? __fget_files+0x2a/0x420 [ 1510.294381][T28573] ksys_write+0x150/0x270 [ 1510.294397][T28573] ? __pfx_ksys_write+0x10/0x10 [ 1510.294410][T28573] do_syscall_64+0x14d/0xf80 [ 1510.294421][T28573] ? trace_irq_disable+0x3b/0x150 [ 1510.294436][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.294447][T28573] ? clear_bhb_loop+0x40/0x90 [ 1510.294459][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.294470][T28573] RIP: 0033:0x7f188f15cfce [ 1510.294481][T28573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1510.294490][T28573] RSP: 002b:00007f188ffd6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1510.294522][T28573] RAX: ffffffffffffffda RBX: 00007f188ffd76c0 RCX: 00007f188f15cfce [ 1510.294530][T28573] RDX: 0000000000011dc0 RSI: 0000200000001380 RDI: 00000000000000c8 [ 1510.294538][T28573] RBP: 00007f188f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1510.294545][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.294551][T28573] R13: 00007f188f416038 R14: 00007f188f415fa0 R15: 00007ffd38f99838 [ 1510.294563][T28573] [ 1510.559734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6310 ms [ 1510.567779][ C0] lec:lec_tx_timeout: lec0 [ 1510.586761][T25157] net_ratelimit: 14 callbacks suppressed [ 1510.586783][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1510.707046][T25157] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1510.816220][ T5930] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1510.925587][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1511.035715][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1511.146040][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1511.256052][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1511.365589][T25158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1511.475533][ T5927] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1511.586231][ T6227] bond2: (slave ip6gretap1): failed to get link speed/duplex