last executing test programs: 5.769330445s ago: executing program 1 (id=954): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1f, 0x4, 0xfff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, r2}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="740000001000010027bd700402d4df2500000000", @ANYRES32=r7, @ANYBLOB="984e1600c16a010054001280110001006272696467655f736c617665000000003c00058006001b002001000005001b000100000005000a000100000005001e00000000000500040000000000050008000100000005001e0001"], 0x74}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008882) write$cgroup_subtree(r4, &(0x7f0000000840)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/28, 0x1c}], 0x2, &(0x7f0000000100)=""/29, 0x1d}, 0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000400)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r9, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000680)=0x8, 0x4) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f00000006c0)=0x800001, 0x4) (async) bind$inet6(r10, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r10, 0x0) (async, rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) writev(r11, &(0x7f0000000740)=[{&(0x7f0000000780)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 64) r12 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$MRT_FLUSH(r12, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 4.769311536s ago: executing program 1 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) (async) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000008c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x10000000, 0x8, 0x2}, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}, 0xffffffff, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r4, &(0x7f0000000b00)=ANY=[], 0xfdef) (async) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) (async) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000700)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r9, &(0x7f0000000b00)={&(0x7f0000000b40)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000b80)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000cc0)=[{&(0x7f0000000d00)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2800080}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="806a4a001a5e"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004850) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc1) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="0a001a0008021100000100000a0006000802111000010000"], 0x34}}, 0x0) (async) r11 = socket$packet(0x11, 0x3, 0x300) bind$packet(r11, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 4.643082609s ago: executing program 2 (id=964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x1}, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x311401, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0xe5b) getsockopt(r1, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040)) 4.581084633s ago: executing program 2 (id=965): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x23) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.753668666s ago: executing program 2 (id=970): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100005000000000000271298b32600000000000000", @ANYRES32=r3, @ANYBLOB="0100000001000000140003a0f7beaa460076657400"/32, @ANYRES8=0x0, @ANYBLOB], 0x3c}}, 0x4008800) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000340)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) (async) listen(r7, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000380)={0x3, 'veth0_to_bridge\x00', {0x3}, 0x2}) (async) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) (async) bind$inet6(r8, 0x0, 0x0) (async) listen(r8, 0x50) close(0x4) sendto$packet(r6, &(0x7f00000003c0)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000400)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="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", 0xf80}], 0x1}}, {{&(0x7f00000015c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001640)="6cf1ab66e2571977f095d93da5d6c6aa3be933b6a065ef874894490bffd0f29cf3c0df80fb795e587540332155b233832e3c50cc9127a5b206607c0c4504470b4153eb", 0x43}, {&(0x7f00000016c0)="8da81efb484c971217ea1560902d2b0571b3a1bc7b879be1c245197255876b71168849fbbf5d810c22650d8fae25b2fd4c581ea0efc9ed38a05fac985e59d59d55b4310e0dd683cb792b993bef1b6ece192553f7b4f6e94334a211718160fd5caf0ac2f7c34c5169568d910e9455d40d539584bf52b308fbd21c8107cd7cfd35156be5f2ae11052a0dc8a3b6f276558ea94ba2e3dfe296ac9197a83ab134946c755b555b", 0xa4}], 0x2}}, {{&(0x7f0000001780)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001800)="86c5c2c70753e1c86962c2087c81d0cdcc1c718f612d53f294713ec54c3b521b62f55bbb3c8afe4a4c8ae94d0d50fe1ac841eb2ced76f75aa114da24d883713090fcb4e6edd20e56ebef44543f67cba59c7c192e020cae056f5824f179f7579377b488f21f8a2684646752d51f26f0f0dbe3602180bbaf0269d53449af4dba7810b9f382c5921d5b19b17c1209f244fff553eb54ede1e66ce1b890ad725d7e87d2b2065a7ecf7bde819b85e43732bd568d797554e827688214e1a3460bf9d195e26d2dd0b312decfc66eb2fffd9f7f4ce4423e60c53ad8eba8fd4e7473e8173452b9575cad54e9c2e4", 0xe9}, {&(0x7f0000001900)}], 0x2, &(0x7f0000001940)=[@ip_ttl={{0x14}}], 0x18}}], 0x3, 0x40880d1) sendmsg$nl_route(r2, 0x0, 0x24008040) sendmsg$nl_route(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c197f8a9a0"], 0x34}}, 0x20000044) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100230100003402000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000420000000410000002"], 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x39) 1.73138196s ago: executing program 3 (id=971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2e0, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b4, 0x3, 0x0, 0x1, [{0x2b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_KEY={0x2a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x75, 0x1, "c5ae76d98f988a07ec7ec1476644aa7e6ae4cd6de64a77bc39959de49854cc6ab5fd37b732ce0313b1b8daba3c90da292af1e41776b8f38caf4307ceef5a2c2e15bd63108fbebb25f41a7e20b8fc226bedad3b09719b0bec32d585ba2880243b5a6e8edb8d077fcf6eea36db0ca20d573a"}, @NFTA_DATA_VALUE={0x62, 0x1, "bd1b3929172aa631746414099f1a73fedeae70725a1e09e7220caff50a9b07de9589ddaedfcd6b454b7dd049491e9d4c45e555bb61bdd48465a4e35349c3ed640e45297501d7fa0978b844acf6be0fdef1f848c7ef1395ec34d59c019d0b"}, @NFTA_DATA_VALUE={0xbf, 0x1, "0a0b0352c7c7f66d7efbe3fee3c6a839ac6feed4955cab596b3ddba99b7fdfafd8847da5f077bee2c38ba67266cff20c8446ae28383ecd5e3a099d3eb7868fb0804ae4c0f11ba1ac07d9189da5566277c96fbcd3ed3b7c5a92987e094509e6e7ee58c51b9e074cf8360459d1e834c6e4363b55c26561ac39c8b826e82b61eb8980fed9bd530294df16e136c7ffffffd85400a742b7c93fd38df64a5409344e355c6b42b8e565439b9dba0be9fb05684d18da8603bd4fa85c0a3c17"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x308}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2e0, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b4, 0x3, 0x0, 0x1, [{0x2b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_KEY={0x2a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x75, 0x1, "c5ae76d98f988a07ec7ec1476644aa7e6ae4cd6de64a77bc39959de49854cc6ab5fd37b732ce0313b1b8daba3c90da292af1e41776b8f38caf4307ceef5a2c2e15bd63108fbebb25f41a7e20b8fc226bedad3b09719b0bec32d585ba2880243b5a6e8edb8d077fcf6eea36db0ca20d573a"}, @NFTA_DATA_VALUE={0x62, 0x1, "bd1b3929172aa631746414099f1a73fedeae70725a1e09e7220caff50a9b07de9589ddaedfcd6b454b7dd049491e9d4c45e555bb61bdd48465a4e35349c3ed640e45297501d7fa0978b844acf6be0fdef1f848c7ef1395ec34d59c019d0b"}, @NFTA_DATA_VALUE={0xbf, 0x1, "0a0b0352c7c7f66d7efbe3fee3c6a839ac6feed4955cab596b3ddba99b7fdfafd8847da5f077bee2c38ba67266cff20c8446ae28383ecd5e3a099d3eb7868fb0804ae4c0f11ba1ac07d9189da5566277c96fbcd3ed3b7c5a92987e094509e6e7ee58c51b9e074cf8360459d1e834c6e4363b55c26561ac39c8b826e82b61eb8980fed9bd530294df16e136c7ffffffd85400a742b7c93fd38df64a5409344e355c6b42b8e565439b9dba0be9fb05684d18da8603bd4fa85c0a3c17"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x308}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000010000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.697312273s ago: executing program 1 (id=973): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) 1.542643094s ago: executing program 4 (id=974): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f0000000040)={0x18c0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6e}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "765934be4fe37c6d7184460861"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "c44d61c4f5548c9d51f76897ef0d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "9a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "63843c2f53fc17c316"}, @NL80211_ATTR_FILS_ERP_RRK={0x77, 0xfc, "7650edc342a1cbe9e326b072d9621f1ab5fa473b989219c9a2aff25c607be5007e8647ab3eec5b66756560352649e04367d6c7596a6a54cb469e994a0d10e0bc47e6e5ffc0432d08413fc7470f7f5c6a8c524f6c97f691066f97c2b6944bd8d751085b49da062cb1e4db9ea292eb162573b779"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c7830d"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "1849b27db39021b58dcef19ddc"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x98, 0xfc, "8d3844c16d2f23ca53d304450d6a00cd35436de75d5232880ca15ee7eed19ba4c8686f878136cd29ee4f1c998094deeb173f09c179aa1a6e7dc55c46eb81395841cfe499f438b8ce4af55e5131639b7ec7921e6d400a4b87ac5809a84c621b23eec82cb77691eb5a85b049fc03bf4875f61261c2573d2ac63f72c70037d5523458b2968e0078ab2df2292fc3d4bb4fb3bb8fa06e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "a8c73a6c374c02cc1764850f2662"}, @NL80211_ATTR_FILS_ERP_RRK={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_RRK={0xad, 0xfc, "1d8084b4d2a615b6aefd598dff105b3c16b8f822d0c7e249d340129b7244230f98ea1b02d1a44168d2bee6ef1be15e39f53e5750bdf1e9737fc9e8df88bd1ba3fe8b17b47fae2aa0103d6595634dcd2011b2858912c0797ed23d69ddbf45e94f2bc966f2eb2f992ea6de070f284c124520dd8b93563ddabaa6800ca2f7071a3ad8b298185f280662a0d05ecd2ec410e1be85449bc35a0004d39e654e1a5ff926aa1e131fbb89c152b5"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xffff}, @NL80211_ATTR_FILS_ERP_RRK={0xfc, 0xfc, "ae9b415787a49eeebc94ff65522e3dea246543260ebf7045393c22311e74e697e45604390c217a7b92a6b9e2899d10d4eeb77e9f30128c3ab1bc2510446ee34e6935d6d4bf5ed51d63faa53f63e19c7e4407c6d50d8b5aaa9b07cb601192701d2463bac325593c7f7e8fc07c3b32361419deabe6805403cbdfd1000191e86f7013feae362b61baa38291a6bd54e77b7aee60ab951d09f37a4f9373fe59b45652f5190437f539e345856afe2e7e3e386dcf3ba47ba2957a62e334a0573012de016e621447af2d82902ea0a4dd09ba8e4bc8359a70e8a4f659bfa660a977009af0d8141f3a5de7db34928989a92d5bcd39160b4cac6d928132"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @NL80211_ATTR_IE={0x1b6, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x7ff}}, @gcr_ga={0xbd, 0x6, @broadcast}, @chsw_timing={0x68, 0x4, {0x401, 0x8}}, @mesh_chsw={0x76, 0x6, {0x6, 0x11, 0x2, 0xfff8}}, @fast_bss_trans={0x37, 0x5c, {0x10, 0x2, "74422d29095ab7d962a1cce601543fec", "02fa8e3bd597df5bec33aba7aca904cfb84510dc5330ae2ecf0554c7faa84724", "38215b31fd8de5c7a738f48368da36a7297243ef308f37d5fb0d55675ffca814", [{0x1, 0x3, "4a996f"}, {0x4, 0x3, "65058f"}]}}, @tim={0x5, 0x80, {0x4, 0x6d, 0xf4, "6dbaba52e26b4a2da2a1321c321d23f4ef8c27fadb273fd718e8b1b583b93a46e8168443ef4261c2228bd73088847ac9b8234fec1312d11f9526699e35fabc26f48821964e733a994f648cc003190d3e02a567115fb00261b90a45901b22eb69aa029e2e520dcccccbfe2a7d7837ca3163f1c926688d157dd4fcec05b9"}}, @measure_req={0x26, 0xa8, {0x5, 0x5, 0x5, "29bbd7de524b576406ac157f7f1b0ad2be8e31695ac60a49340ede2703989836f129ff1d2029085fa28be182ee64f30769829604c776a811371f76afba8b1fb7a8a26414458e91c15efae5fa01ee11f0f82e27cb6d9d42267db6a1b6e93ce2ac2f9615336e082d6172bf75b6f35d4e0fe583f5263b5460b2af30065613855c5dfe7b4b014ec26fa81eacd6d6a12e3fc0fa52a34bd1ce7cedc7486588674e1de78604381204"}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x8}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x55, 0x2a, [@chsw_timing={0x68, 0x4, {0xc62, 0x6}}, @rann={0x7e, 0x15, {{0x1, 0x1}, 0xb, 0x6, @device_b, 0x5, 0x476d, 0x5}}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @broadcast}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ibss={0x6, 0x2, 0x6}, @dsss={0x3, 0x1, 0x1f}, @supported_rates={0x1, 0x7, [{0x6c}, {0x30}, {0x36}, {0x60, 0x1}, {0x2, 0x1}, {0x5e}, {0x2}]}]}, @NL80211_ATTR_IE={0x120, 0x2a, [@prep={0x83, 0x1f, {{}, 0x3, 0xc, @broadcast, 0x3, @void, 0x8, 0x6}}, @random={0x10, 0xd7, "e17949fde1ae12391df68cc304398c0c250394a228c1b602282854c194d604a6c0ff481c84611bc585472cdd1a2636f5958e95bb6804a1187cdf2b128c732b12752a9a279b4b7612cc7d5c2bdc98342a7247e963420c85cd67e696955b284f816f02c832feb61317caf2ac492cfee125b559dd4821133257e08763a545485b89c34a9ecb1106e4d5d4fe540402991d1fefb5566c750a3b26049b22843d6313aea778544f785436187389be3546605751388f979115ca6f3278d7a72f5c371fcd31a204fcac51633d1fd8731c889fe7ed6a9db00d09ef56"}, @ht={0x2d, 0x1a, {0x1, 0x2, 0x4, 0x0, {0x8, 0x4, 0x0, 0xb, 0x0, 0x0, 0x1}, 0x1, 0x7, 0x4}}, @chsw_timing={0x68, 0x4, {0x5, 0xfffa}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "5f8526d00c9524c716681df4"}], @NL80211_ATTR_IE={0x35, 0x2a, [@mic={0x8c, 0x18, {0x82d, "f16bf0356465", @long="3ff20d06ba35be76bbac9c5c046bfeb2"}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x8, 0x7, @device_a, 0x9, 0x2c3d, 0xb}}]}, @NL80211_ATTR_IE={0x1bd, 0x2a, [@link_id={0x65, 0x12, {@random="42394134a883", @broadcast, @broadcast}}, @ht={0x2d, 0x1a, {0x8, 0x0, 0x5, 0x0, {0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x40, 0x8}}, @random={0xfa, 0x72, "76db49fd3d743306ec8aa8f54487061daa971b60dedc8874c2aa5714e5acf166305aa89fa32fa0930816e8b99d47cf9b548b346c4c35e3551ebdcd38a5d4a76a9818196a5871307245f1a674e4f0e14f3e1a96329ae9323cc2f7630c978f47c702c25b0d48f63190a02057e6eb0d9e696fa9"}, @tim={0x5, 0x83, {0x3, 0xb5, 0x5, "b23860613ef80bd88480ff66865936dcab4a0f5f1131eeeefb303cc05ec7e78e853e680404c68b01047505ea0f74695c3c2a4c65031455af6bcecf1e7295acc8af06a63dbbb4322ec0dfa46950e1e9706a1e34944d30b92082f0983c2627445c5b6eecd47df5eb63f8ad19cf5d3db946eddda077ce3b6b1f85b7bafa45fa59d0"}}, @preq={0x82, 0x8e, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x7, 0x9, 0xef, @device_a, 0x3, @value, 0x9, 0x0, 0xa, [{{0x1}, @broadcast, 0xdb94}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {{}, @device_b, 0xad10}, {{0x1, 0x0, 0x1}, @device_a, 0x81}, {{0x0, 0x0, 0x1}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0x1625180c}]}}]}]}, 0x18c0}, 0x1, 0x0, 0x0, 0x4004000}, 0x81) 1.524487575s ago: executing program 4 (id=975): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000003c0)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2b, 0x5, 0x2, 0x7}}}}}}}, 0x4a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.488775404s ago: executing program 3 (id=976): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x500}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0) 1.423255297s ago: executing program 1 (id=977): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x24e23, @loopback}, 0x10) (async) sendto$inet(r2, &(0x7f00000005c0)='v', 0x1, 0x4040, 0x0, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) (async, rerun: 64) shutdown(r2, 0x2) (rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/157, 0x9d, 0x1, 0x0}, &(0x7f0000000700)=0x40) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010010000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc88000340000000040900010073797a30"], 0xd8}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000dc0)={{r1, &(0x7f0000000440)='--\x00', 0x2000, &(0x7f0000000c00)={@align=0xffffffffffffffff, {0x6, 0x7f, 0x5, 0xfabd}}, 0x200, &(0x7f0000000c40), &(0x7f0000000c80)=0x60000}, {[0x7, 0x26b8, 0x9, 0x5]}, 0x9, 0xdc, &(0x7f0000000cc0)=""/220}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x19, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) (async, rerun: 64) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x5}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0x4, 0x6}, {0xc, 0xefc}]}]}, {0x0, [0x5f]}}, &(0x7f0000000500)=""/115, 0x43, 0x73, 0x0, 0x3, 0x10000}, 0x28) (rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000740)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000780)=0x1, 0x4) sendto$inet6(r8, &(0x7f00000007c0)="b2", 0x1, 0x24000045, &(0x7f0000000800)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000840)='highspeed', 0x9) (async, rerun: 64) sendto$inet6(r8, &(0x7f0000000880)="2e138104458aa52fefb268543e0b10f4cbda5030ce04d2f7843a377ffcf141e82e60c0c5d796288d82adf9ffb3736cc59827752975493d93786933c163eb99ffabd0415eef286ab9a6c2241fdb73750e8603e350170c13a7cc768adcc613f78a33aab69e4b920080649a5e8968cf54270dc5bd832d14aa1a11a8b86686a08434af36c9212fe6b1d7d2fbfd275418cf0e7689", 0x100000030, 0x8000, 0x0, 0x0) (rerun: 64) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async, rerun: 32) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000f40)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000001000)=""/152, 0x41000, 0xa}, 0x23) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x20, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x494}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0x40000d0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @xdp=0x4565bb47b70f310f, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.40313987s ago: executing program 0 (id=978): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x49, 0x8, &(0x7f0000000200), &(0x7f0000000240)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x22020400) writev(0xffffffffffffffff, 0x0, 0x0) 1.272999467s ago: executing program 4 (id=979): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @multicast2, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @remote}, 0xc) (async) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x64, 0x0, 0x4, 0x11, 0x0, @multicast2, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x4000000) (async) 1.181266071s ago: executing program 0 (id=980): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') (rerun: 64) 1.006834678s ago: executing program 3 (id=981): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fddb932e3041194c0ecc70bd14101625de49182a921ad137fce7c8bb9ba55a83c69a3e46fedd3924db9b28a6beda56892acd83cc6726827dd97eb596291cfc", @ANYRES32=0x0, @ANYBLOB="100a050023000000240012800b000100627269646765000014000280080003000a040000080004000e000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 953.065909ms ago: executing program 2 (id=982): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}, 0x400c1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000007c0)={0x0, 0xb006}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f00000009c0)="259a53f279a76d2679004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x63) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x5032}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r8) (async) close(r8) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @remote}) socket$kcm(0x11, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) ioctl$TUNSETOWNER(r8, 0x400454cc, r10) (async) ioctl$TUNSETOWNER(r8, 0x400454cc, r10) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xffffffe1, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8040402}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xffffffe1, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8040402}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf250700000008000100010000000c0017000203aaaaaaaaaaaa08000500b44656010a0004007770616e340000002f542bf4cd1bd58f8e8528b52a73d7526c977c70e6244c12d4112553ce685a7b67d353e9d718964e40e99f4c891326e6dbd0dcf663cad2ae646d1dfb964b057536dbd29987b591679f569dffa12adc0bd79b87f91679de93377b4678146a04bf115fccaed7584321aadcdce539b69bf2ff09b1f321a0eb"], 0x3c}, 0x1, 0x0, 0x0, 0x480d5}, 0x4000000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x4d, 0x0, 0x2, 0xe5e1}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x4d, 0x0, 0x2, 0xe5e1}]}) socket(0x2b, 0x1, 0x1) (async) socket(0x2b, 0x1, 0x1) 872.356085ms ago: executing program 0 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1b}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) write$tun(r0, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x5, 0x0, @void}}}}}}}}, 0x32) 794.77626ms ago: executing program 3 (id=984): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x10, 0x1, 0x9, 0x72, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x40, 0x85, 0x8}}) r0 = socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xb1}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x9c, &(0x7f0000000480)=""/156, 0x40f00, 0x40}, 0x94) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 519.433708ms ago: executing program 4 (id=985): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x8, @multicast1, 0x4e22, 0x3, 'none\x00', 0xa, 0x1, 0x2c}, 0x2c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002e80)={'ip6_vti0\x00', &(0x7f0000002e00)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x0, 0x4, 0x4, @empty, @empty, 0x10, 0x8, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000b40)={@private1, @remote, 0x17, 0x1000}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r1, 0x1, 0x0, 0xd02}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000380)='ip6_vti0\x00', 0x10800, &(0x7f00000003c0)={@_ha_fsid={[0x2ce, 0xfffffff9]}, {0x32f, 0x9, 0xbe, 0x4a}}, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x3}, {[0x3, 0x6, 0x6, 0xfff]}, 0x8, 0x37, &(0x7f0000000480)=""/55}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000740)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x2, 0x1c}, 0xc) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000840)=0xf, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x4}, 0xc) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7a2, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xa, &(0x7f0000000b80)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0xe2f5}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000000140)='syzkaller\x00', 0xce, 0x8a, &(0x7f0000000180)=""/138, 0x41000, 0x2, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x8, 0xf6b8, 0x7fc}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000009c0)=[r5, r6, r7, r9, r10, r11, r12, r13, r14, r15], &(0x7f0000000a00)=[{0x3, 0x3, 0xf, 0xa}], 0x10, 0x4}, 0x94) 516.081415ms ago: executing program 3 (id=986): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xa, &(0x7f00000002c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0xd, 0xa, 0x9, 0xfffffffffffffff8, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xc, 0x5, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000400)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x2, 0x2, 0xe, 0x7}, {0x5, 0x2, 0x3, 0x1}, {0x5, 0x2, 0xf, 0x6}, {0x4, 0x1, 0xc, 0x9}, {0x3, 0x1, 0x6, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f00000000c0)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34c966000d0a030000000000000000000700000108000440000000010900010073797a31000000000900020073797af8f4b6f300"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44011) ioctl$sock_ifreq(r1, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_names='tunl0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r1, 0x7, 0xd9, 0x7}) connect$can_bcm(r3, &(0x7f0000000280), 0x10) 430.760898ms ago: executing program 1 (id=987): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c841) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x128, 0x700001b, 0x148, 0x128, 0x148, 0x128, 0x206, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0x128, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@cluster={{0x30}, {0x9, 0xa, 0x7, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x1, 0x2, 0x4, 0x1, 0x2], 0x1, 0x6}, {0xffffffffffffffff, [0x0, 0x1, 0x1, 0x0, 0x7, 0x2], 0x0, 0x2}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x0, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x1, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0100, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c841) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x128, 0x700001b, 0x148, 0x128, 0x148, 0x128, 0x206, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0x128, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@cluster={{0x30}, {0x9, 0xa, 0x7, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x1, 0x2, 0x4, 0x1, 0x2], 0x1, 0x6}, {0xffffffffffffffff, [0x0, 0x1, 0x1, 0x0, 0x7, 0x2], 0x0, 0x2}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x0, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x1, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) (async) 396.983514ms ago: executing program 3 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x40}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x20040054) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x1b0) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r5, 0xd) (async) sendmmsg(r5, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000000084"], 0x10}}], 0x2, 0xc88c4) 342.137604ms ago: executing program 4 (id=989): syz_emit_ethernet(0x93, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x1}}, {@x25={0x805, {0x0, 0x0, 0xf3, "59c542f56086fdadb825610518f076562b80af352b306837c1db9d65a5b732fb7159a9385c857b44c8d98d714d93df8089f5cad3ab10835784a5e2aea025c8e0a7e977a9b00a60cda76db2f8149471a123cbcfdf897a262ff04476d33870684b621b65734b85b9f0b7de166874f1dcada97632f0037125681eea72ae4246"}}}}, &(0x7f0000000400)={0x1, 0x1, [0xeab, 0x7b1, 0x2ee, 0xbe]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20040000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000640)={0x4000000, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES8=r2], 0xfffffd64}}, 0x4004004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000840), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, r5, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000980)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x5, 0xc}, {0xe, 0xfff1}, {0xfff8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) sendmsg$nl_route(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRESHEX=r7, @ANYRESOCT], 0x104}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1000a8a089bc67e8640000ff000000b4000000ff", @ANYRES32, @ANYBLOB="6d9f00"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x5, 0x5, 0x2, 0x9, 0x0, 0x1, 0x10000}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000002000000850000007d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ec0)={r12}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x50) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x210000000013, &(0x7f0000000f40)=0x100000001, 0x4) 291.439093ms ago: executing program 0 (id=990): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000600)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x3, 0x0, 0xfffffffb, 0x5eede029, 0x7}, &(0x7f0000000500)=0x98) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\a\x00'], 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r2, 0x5}, 0x8) 283.982817ms ago: executing program 2 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x4, 0x2, 0x3}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x9, 0x0, 0x0, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r3, 0x50dc85624ea6cf59, 0xfffffffe, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003002e"], 0x10c}}, 0x0) 186.657473ms ago: executing program 1 (id=992): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000940)=""/19, 0x26, 0x13, 0x1, 0x38}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='vxcan1\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) sendmsg$NL80211_CMD_GET_MPATH(r1, 0x0, 0x8080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) 135.27211ms ago: executing program 0 (id=993): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000e4ffffffffff010000000900020073797a32000000000900010073797a300000000028000480240001800b000100736f636b6574000014000280080002400000000b0800014000000000140000"], 0x7c}}, 0x20044810) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002500)=ANY=[@ANYRES16=r0, @ANYBLOB="acf7a4d6f7a579564c3927113ac0778d3800bf1afcde4b866b787ba37ea714f02ff299f4af724b3ccf02c4a773e7616ec76bd84fd2b13418719c2f5dac47c7e6e62a9e16b021df493eb5bfdebee5c98195723d639e5f1529b09481d9cef6e7f1619d100d95b96737def118f54146d1ca29686e123d67b8cce9e759b7962e65d8c32e78ce2821ed", @ANYBLOB="18a33aa2a2e9d9b9bdbeee240839098294a3c69321a8c3e3b40d643c921d6f2141ae8095f18550c7e0b5f6d5b0df08cb3c5d9b0cacb530765b41126f8f4d06bf615e65b09c5abf052f9c08ff15a104f5fa231ee054b86660210f80e4c4c94e97d526c568c9a271c18d7815594dc7c341e6efb8465f75fde7296b4b5f74f92ab77e159d2eb6840b677a96c4a9740765d792d05f8d986598796a694922b594", @ANYRESOCT=r0, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRESDEC=r2], 0x30}}, 0x20008894) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, r1, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 9.496525ms ago: executing program 0 (id=994): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="82", 0x1}, {&(0x7f00000005c0)="11", 0x1}], 0x2}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000600), 0x48, 0x3b00, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000680)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000006c0)={0x80000010}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000700)={0xa000001c}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0xc, &(0x7f0000000380)=""/96, &(0x7f0000000400)=0x60) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0xf638, @loopback, 0xffffffff}, {0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x462}, 0x1, {[0x8, 0x3, 0x401, 0x9, 0xfff, 0x7, 0x8000, 0x9]}}, 0x5c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r7, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) 3.721127ms ago: executing program 4 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'macvlan0\x00', {0x2, 0x4e24, @broadcast}}) 0s ago: executing program 2 (id=996): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400000008000000080000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007756f516159298f43eb7862a404ee0da3d0dcd7366a222523b3d1d2bf34998fa6450c92067334f2320770c6d01f33fb48cc1a34418357ae086f78011b09e7e59cb3065463249da35ddecf86601ab0bf654219dcffb9f297ec6d4a51aa76c87"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c00"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000500feffff00feffffff07000000", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x4040010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x7, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 87.670670][ T5604] cgroup: Unknown subsys name 'net' [ 87.765616][ T5604] cgroup: Unknown subsys name 'cpuset' [ 87.769507][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.535534][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.915549][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.919563][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.920202][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.923856][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.929855][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.969641][ T195] cfg80211: failed to load regulatory.db [ 91.994950][ T4935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.997886][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.998498][ T4935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.024705][ T4935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.025346][ T4935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.134190][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.137718][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.139743][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.140303][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.145389][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.178325][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.185773][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.193831][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.202652][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.207202][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.248835][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.252116][ T4935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.266642][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.270239][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.273765][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.995372][ T5639] Bluetooth: hci0: command tx timeout [ 94.057913][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.058054][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.058236][ T5619] bridge_slave_0: entered allmulticast mode [ 94.069129][ T5619] bridge_slave_0: entered promiscuous mode [ 94.074117][ T5639] Bluetooth: hci1: command tx timeout [ 94.099465][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.099577][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.099849][ T5619] bridge_slave_1: entered allmulticast mode [ 94.116631][ T5619] bridge_slave_1: entered promiscuous mode [ 94.254300][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.254698][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.254846][ T5623] bridge_slave_0: entered allmulticast mode [ 94.256870][ T5623] bridge_slave_0: entered promiscuous mode [ 94.296135][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.312126][ T5639] Bluetooth: hci2: command tx timeout [ 94.312268][ T5639] Bluetooth: hci4: command tx timeout [ 94.312356][ T5639] Bluetooth: hci3: command tx timeout [ 94.316119][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.316227][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.316339][ T5623] bridge_slave_1: entered allmulticast mode [ 94.317615][ T5623] bridge_slave_1: entered promiscuous mode [ 94.371315][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.492489][ T5619] team0: Port device team_slave_0 added [ 94.504677][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.517523][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.540090][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.540198][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.540398][ T5636] bridge_slave_0: entered allmulticast mode [ 94.544780][ T5636] bridge_slave_0: entered promiscuous mode [ 94.564029][ T5619] team0: Port device team_slave_1 added [ 94.605220][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.605376][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.605493][ T5636] bridge_slave_1: entered allmulticast mode [ 94.606819][ T5636] bridge_slave_1: entered promiscuous mode [ 94.712256][ T5623] team0: Port device team_slave_0 added [ 94.739707][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.739725][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.739753][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.741323][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.741490][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.741757][ T5630] bridge_slave_0: entered allmulticast mode [ 94.749159][ T5630] bridge_slave_0: entered promiscuous mode [ 94.766318][ T5623] team0: Port device team_slave_1 added [ 94.766978][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.767245][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.769306][ T5631] bridge_slave_0: entered allmulticast mode [ 94.774557][ T5631] bridge_slave_0: entered promiscuous mode [ 94.803943][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.805355][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.805640][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.806084][ T5630] bridge_slave_1: entered allmulticast mode [ 94.816543][ T5630] bridge_slave_1: entered promiscuous mode [ 94.874372][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.876071][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.879420][ T5631] bridge_slave_1: entered allmulticast mode [ 94.887353][ T5631] bridge_slave_1: entered promiscuous mode [ 94.898553][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.898607][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.898682][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.916222][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.022886][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.022906][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.022938][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.086036][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.086966][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.086981][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.087006][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.089500][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.094354][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.112852][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.120027][ T5636] team0: Port device team_slave_0 added [ 95.210824][ T5636] team0: Port device team_slave_1 added [ 95.280016][ T5631] team0: Port device team_slave_0 added [ 95.280975][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.280990][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.281012][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.298464][ T5631] team0: Port device team_slave_1 added [ 95.317919][ T5630] team0: Port device team_slave_0 added [ 95.348070][ T5619] hsr_slave_0: entered promiscuous mode [ 95.349042][ T5619] hsr_slave_1: entered promiscuous mode [ 95.370144][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.370161][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.370184][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.429544][ T5630] team0: Port device team_slave_1 added [ 95.461721][ T5623] hsr_slave_0: entered promiscuous mode [ 95.462540][ T5623] hsr_slave_1: entered promiscuous mode [ 95.463097][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 95.463166][ T5623] Cannot create hsr debugfs directory [ 95.519410][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.519430][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.519457][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.526226][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.526277][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.526353][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.533514][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.533557][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.533623][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.665200][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.665218][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.665244][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.770999][ T5636] hsr_slave_0: entered promiscuous mode [ 95.774408][ T5636] hsr_slave_1: entered promiscuous mode [ 95.777914][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 95.777938][ T5636] Cannot create hsr debugfs directory [ 95.895740][ T5630] hsr_slave_0: entered promiscuous mode [ 95.896712][ T5630] hsr_slave_1: entered promiscuous mode [ 95.897270][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 95.897290][ T5630] Cannot create hsr debugfs directory [ 95.941226][ T5631] hsr_slave_0: entered promiscuous mode [ 95.944630][ T5631] hsr_slave_1: entered promiscuous mode [ 95.947144][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 95.947200][ T5631] Cannot create hsr debugfs directory [ 96.072248][ T5639] Bluetooth: hci0: command tx timeout [ 96.151864][ T5639] Bluetooth: hci1: command tx timeout [ 96.392137][ T4935] Bluetooth: hci4: command tx timeout [ 96.392171][ T4935] Bluetooth: hci3: command tx timeout [ 96.392291][ T5639] Bluetooth: hci2: command tx timeout [ 96.478157][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.490134][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.491635][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.510354][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.531388][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.541032][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.560066][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.568602][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.625874][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.630737][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.647137][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.659495][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.670189][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.678780][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.687512][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.698944][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.780109][ T5636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.790083][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.808003][ T5636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.820052][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.820959][ T5636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.839053][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.840113][ T5636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.858461][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.965237][ T5631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.968506][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.969385][ T5631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.985155][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.989766][ T5631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.012642][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.014144][ T5631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.018218][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.112209][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.170905][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.180285][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.191070][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.215747][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.219195][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.220718][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.235530][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.257353][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.261377][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.284027][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.284165][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.347091][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.347170][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.375167][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.462638][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.470643][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.502922][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.502997][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.558912][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.559005][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.576464][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.605708][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.605804][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.637885][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.637960][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.666681][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.771015][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.777994][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.829675][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.829786][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.880312][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.881084][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.923610][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.979599][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.979722][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.047942][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.048062][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.154110][ T5633] Bluetooth: hci0: command tx timeout [ 98.231910][ T5633] Bluetooth: hci1: command tx timeout [ 98.472917][ T5633] Bluetooth: hci2: command tx timeout [ 98.472954][ T5633] Bluetooth: hci3: command tx timeout [ 98.472979][ T5633] Bluetooth: hci4: command tx timeout [ 98.864908][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.105726][ T5619] veth0_vlan: entered promiscuous mode [ 99.145279][ T5619] veth1_vlan: entered promiscuous mode [ 99.183490][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.307985][ T5619] veth0_macvtap: entered promiscuous mode [ 99.356821][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.361182][ T5619] veth1_macvtap: entered promiscuous mode [ 99.443808][ T5623] veth0_vlan: entered promiscuous mode [ 99.474663][ T5623] veth1_vlan: entered promiscuous mode [ 99.483142][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.517702][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.531720][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.611082][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.678965][ T5636] veth0_vlan: entered promiscuous mode [ 99.702758][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.783455][ T5623] veth0_macvtap: entered promiscuous mode [ 99.791480][ T5636] veth1_vlan: entered promiscuous mode [ 99.838473][ T5623] veth1_macvtap: entered promiscuous mode [ 99.884395][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.885470][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.885522][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.934863][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.934886][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.027001][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.030464][ T5630] veth0_vlan: entered promiscuous mode [ 100.046968][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.060010][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.060076][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.087404][ T5630] veth1_vlan: entered promiscuous mode [ 100.161108][ T5636] veth0_macvtap: entered promiscuous mode [ 100.177490][ T5619] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.214905][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.214989][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.232497][ T5639] Bluetooth: hci0: command tx timeout [ 100.252962][ T5636] veth1_macvtap: entered promiscuous mode [ 100.297290][ T5630] veth0_macvtap: entered promiscuous mode [ 100.312992][ T5639] Bluetooth: hci1: command tx timeout [ 100.353902][ T5630] veth1_macvtap: entered promiscuous mode [ 100.409292][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.430572][ T5631] veth0_vlan: entered promiscuous mode [ 100.450528][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.450551][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.482308][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.488508][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.512775][ T45] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.552230][ T5639] Bluetooth: hci4: command tx timeout [ 100.552282][ T5639] Bluetooth: hci3: command tx timeout [ 100.552341][ T5639] Bluetooth: hci2: command tx timeout [ 100.555987][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.596880][ T5631] veth1_vlan: entered promiscuous mode [ 100.618203][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.618227][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.643666][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.643719][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.643759][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.643798][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.673366][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.673555][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.673737][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.673843][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.673954][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.796324][ T5813] Zero length message leads to an empty skb [ 101.008395][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.008418][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.037298][ T5631] veth0_macvtap: entered promiscuous mode [ 101.095031][ T5631] veth1_macvtap: entered promiscuous mode [ 101.122289][ T3402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.122313][ T3402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.231108][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.231132][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.257946][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.326327][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.391453][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.391477][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.636088][ T3402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.638827][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.671968][ T158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.672016][ T158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.783590][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.783618][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.038864][ T5851] syzkaller0: entered promiscuous mode [ 102.038882][ T5851] syzkaller0: entered allmulticast mode [ 102.252051][ T5854] bridge_slave_0: left allmulticast mode [ 102.252086][ T5854] bridge_slave_0: left promiscuous mode [ 102.252856][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.258020][ T5854] bridge_slave_1: left allmulticast mode [ 102.258039][ T5854] bridge_slave_1: left promiscuous mode [ 102.259041][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.306186][ T5854] bond0: (slave bond_slave_0): Releasing backup interface [ 102.309855][ T5854] bond0: (slave bond_slave_1): Releasing backup interface [ 102.335757][ T5854] team0: Port device team_slave_0 removed [ 102.340365][ T5854] team0: Port device team_slave_1 removed [ 102.341092][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.341113][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.347477][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.347527][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.379304][ T5854] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.628687][ T5861] batadv_slave_1: entered promiscuous mode [ 103.463694][ T5860] batadv_slave_1: left promiscuous mode [ 104.320866][ T5835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.337391][ T5827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.531045][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.531069][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.598863][ T5869] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 104.888438][ T5884] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5'. [ 104.918867][ T5884] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 104.967219][ T5884] vlan2: entered allmulticast mode [ 104.967247][ T5884] bond0: entered allmulticast mode [ 104.967262][ T5884] bond_slave_0: entered allmulticast mode [ 104.967281][ T5884] bond_slave_1: entered allmulticast mode [ 105.426895][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 105.710089][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35'. [ 105.740103][ T179] IPVS: starting estimator thread 0... [ 105.788425][ T5929] netlink: Conntrack attr has 8 unknown bytes [ 105.788471][ T5929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.841722][ T5931] IPVS: using max 27 ests per chain, 64800 per kthread [ 105.898589][ T5934] pimreg: tun_chr_ioctl cmd 1074025677 [ 105.898724][ T5934] pimreg: linktype set to 804 [ 106.170708][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.190425][ T5958] netlink: 32 bytes leftover after parsing attributes in process `syz.1.45'. [ 106.270491][ T5956] geneve2: entered promiscuous mode [ 106.287344][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.287571][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.287871][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.288085][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.288299][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.288508][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.310198][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.319431][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.323570][ T5955] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 106.501500][ T5973] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.511168][ T5973] netlink: 84 bytes leftover after parsing attributes in process `syz.2.48'. [ 106.660835][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 107.631493][ T6020] IPv6: NLM_F_REPLACE set, but no existing node found! [ 107.659008][ T6020] xt_hashlimit: size too large, truncated to 1048576 [ 107.854181][ T5997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54'. [ 108.141602][ T6027] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.148760][ T6027] vxcan0: Master is either lo or non-ether device [ 108.150897][ T6027] vxcan0: Master is either lo or non-ether device [ 108.249091][ T6012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.319313][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 108.319339][ T6029] netlink: 14 bytes leftover after parsing attributes in process `syz.1.60'. [ 108.615917][ T158] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.616233][ T158] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.622798][ T179] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.648055][ T158] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.901043][ T6056] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20002 [ 108.966546][ T6061] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20000 [ 109.525106][ T6083] netlink: Conntrack attr has 8 unknown bytes [ 109.525260][ T6083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.586156][ T6086] ip_tables: iptables: counters copy to user failed while replacing table [ 110.294292][ T6124] __nla_validate_parse: 13 callbacks suppressed [ 110.294317][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 132.874562][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.875248][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.287059][ T6151] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 164.288032][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 164.316258][ T6151] bond1 (unregistering): Released all slaves [ 164.338167][ T6155] validate_nla: 27 callbacks suppressed [ 164.338190][ T6155] netlink: 'syz.4.90': attribute type 19 has an invalid length. [ 164.346100][ T6155] netlink: 'syz.4.90': attribute type 19 has an invalid length. [ 164.642920][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 165.007155][ T6193] xt_ipcomp: unknown flags 1D [ 165.102793][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 165.159646][ T6200] batadv0: entered promiscuous mode [ 165.177505][ T6200] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 165.517110][ T6206] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 165.535218][ T6200] batadv0: left promiscuous mode [ 165.536637][ T6206] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 165.725917][ T6215] openvswitch: netlink: Missing valid actions attribute. [ 165.725964][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.819302][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 165.975900][ T6225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.110'. [ 166.031578][ T6225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 166.059236][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 166.094566][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 166.165788][ T6243] openvswitch: netlink: Message has 8 unknown bytes. [ 166.210969][ T6229] bond1: option broadcast_neighbor: invalid value (3) [ 166.223039][ T6229] bond1 (unregistering): Released all slaves [ 166.240794][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 166.821418][ T6283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.834159][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 167.150609][ T6300] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 167.184357][ T6300] bond1: entered promiscuous mode [ 167.184979][ T6300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.220249][ T6300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.228859][ T6300] bond1: (slave bond2): making interface the new active one [ 167.228886][ T6300] bond2: entered promiscuous mode [ 167.230060][ T6300] bond1: (slave bond2): Enslaving as an active interface with an up link [ 167.426250][ T6304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.564403][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 167.587818][ T6316] ip6gre1: entered promiscuous mode [ 167.587842][ T6316] ip6gre1: entered allmulticast mode [ 167.590116][ T158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.590356][ T158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.615795][ T987] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.981771][ T987] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.403204][ T987] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.468500][ T6333] syzkaller0: entered promiscuous mode [ 168.468526][ T6333] syzkaller0: entered allmulticast mode [ 168.640143][ T6348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.288156][ T6384] netlink: 'syz.3.145': attribute type 49 has an invalid length. [ 169.500153][ T6384] ip6gretap0: entered promiscuous mode [ 169.500182][ T6384] ip6gretap0: entered allmulticast mode [ 169.656007][ T6384] syz.3.145 (6384) used greatest stack depth: 19208 bytes left [ 169.969643][ T6401] syzkaller0: entered promiscuous mode [ 169.969672][ T6401] syzkaller0: entered allmulticast mode [ 169.985589][ T6415] __nla_validate_parse: 3 callbacks suppressed [ 169.987070][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 171.834528][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.478352][ T6459] nicvf0: entered promiscuous mode [ 172.479611][ T6459] batadv0: entered promiscuous mode [ 172.507003][ T5633] Bluetooth: hci4: link tx timeout [ 172.507023][ T5633] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.783742][ T6478] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 173.467821][ T6510] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.492610][ T13] IPVS: starting estimator thread 0... [ 173.581792][ T6512] IPVS: using max 32 ests per chain, 76800 per kthread [ 173.730368][ T6503] tun0: tun_chr_ioctl cmd 1074025675 [ 173.730394][ T6503] tun0: persist enabled [ 174.005740][ T6519] netlink: 'syz.2.168': attribute type 10 has an invalid length. [ 174.120970][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 174.223690][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 174.297187][ T6525] bond2: entered promiscuous mode [ 174.297214][ T6525] bond2: entered allmulticast mode [ 174.324877][ T6532] ip6gre1: entered promiscuous mode [ 174.324900][ T6532] ip6gre1: entered allmulticast mode [ 174.330140][ T158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.330361][ T158] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.362615][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.365263][ T6538] bond0: Error: CAN devices cannot be enslaved [ 174.372910][ T5742] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 174.553861][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 174.801846][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.239336][ T6582] warning: `syz.1.183' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.239728][ T6582] netlink: 516 bytes leftover after parsing attributes in process `syz.1.183'. [ 175.285463][ T6585] vcan0: tx address claim with dlc 1 [ 175.288101][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.183'. [ 175.288128][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 175.320175][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.182'. [ 175.320211][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.182'. [ 175.404039][ T6579] netlink: 'syz.4.182': attribute type 1 has an invalid length. [ 175.404064][ T6579] netlink: 'syz.4.182': attribute type 2 has an invalid length. [ 175.563370][ T6592] netlink: 'syz.2.186': attribute type 21 has an invalid length. [ 175.680393][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'. [ 176.037983][ T6615] netlink: 'syz.2.191': attribute type 3 has an invalid length. [ 176.060429][ T6617] Bluetooth: MGMT ver 1.23 [ 176.060472][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.060486][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.060502][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.060515][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.061008][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.061024][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.061036][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.061048][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.061264][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.061278][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.061290][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.061302][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.087169][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.087234][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.087275][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.087308][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.088025][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.088081][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.088114][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.088153][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.089092][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.089126][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.089158][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.089201][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.089760][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.089796][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.089808][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.089819][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.090220][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.090256][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.090289][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.090321][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.090887][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.090928][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.090962][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.090994][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.155595][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.155652][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.155685][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.155719][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.156380][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.156420][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.156445][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.156477][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.368496][ T6616] netlink: 'syz.2.191': attribute type 2 has an invalid length. [ 176.368519][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.191'. [ 176.399546][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.399586][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.399600][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.399612][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.399838][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.399851][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.399863][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.399875][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.400128][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.400142][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.400155][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.400167][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.400380][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.400393][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.400405][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.400417][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.400615][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.400628][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.400640][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.400652][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.401452][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.401471][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.401488][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.560513][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.560794][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.560810][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.560823][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.560835][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.561040][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.561053][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.561064][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.561075][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.561337][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.561352][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.561364][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.561376][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.656260][ T6616] : entered promiscuous mode [ 176.657420][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.657439][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.657452][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.657465][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.657671][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.657685][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.657697][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.657709][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.657927][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.657940][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.657952][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.657964][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.658170][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.658184][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.658196][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.658207][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.658416][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.658430][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.658442][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.658454][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.658652][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.658665][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.658677][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.658689][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.658936][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.658951][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.658963][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.658974][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.659177][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.659192][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.659204][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.659216][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.659432][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.659446][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.659458][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.659469][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.659680][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.659694][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.659707][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.659719][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.659926][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.659940][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.659950][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.659962][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.660164][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.660177][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.660189][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.660201][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.660411][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.660425][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 176.660438][ T6617] Bluetooth: hci0: unsupported parameter 5135 [ 176.660450][ T6617] Bluetooth: hci0: unsupported parameter 8192 [ 177.081318][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.193'. [ 177.122754][ T6628] netlink: 'syz.0.193': attribute type 58 has an invalid length. [ 177.122781][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.193'. [ 177.360063][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.195'. [ 177.836162][ T6613] xt_hashlimit: size too large, truncated to 1048576 [ 177.864655][ T6645] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 177.887043][ T6645] 0ªX¹¦Dö»: entered allmulticast mode [ 178.608876][ T6678] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 178.706006][ T6678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.791712][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.964261][ T6699] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 179.068318][ T6699] batadv_slave_1: entered promiscuous mode [ 179.068687][ T6699] batadv_slave_1: left promiscuous mode [ 179.488347][ T6715] nbd: must specify at least one socket [ 180.048787][ T6748] bridge2: entered promiscuous mode [ 180.231719][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 180.322064][ T6774] __nla_validate_parse: 5 callbacks suppressed [ 180.322091][ T6774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 180.889517][ T6838] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 180.889543][ T6838] netlink: 'syz.3.226': attribute type 5 has an invalid length. [ 181.440242][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.232'. [ 181.859191][ T6871] syzkaller0: entered promiscuous mode [ 181.859217][ T6871] syzkaller0: entered allmulticast mode [ 181.951921][ T6874] netlink: 'syz.0.238': attribute type 62 has an invalid length. [ 182.004151][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 182.051820][ T6881] netlink: 'syz.0.238': attribute type 62 has an invalid length. [ 182.078435][ T6883] netlink: 'syz.3.239': attribute type 6 has an invalid length. [ 182.586835][ T6895] netlink: 'syz.1.243': attribute type 15 has an invalid length. [ 182.586859][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 182.649617][ T6895] netlink: 'syz.1.243': attribute type 15 has an invalid length. [ 182.649643][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 182.663265][ T6820] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 182.718848][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.246'. [ 182.782037][ T6787] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 182.783703][ T6821] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 182.783747][ T6821] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 182.791825][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 182.973528][ T6913] ip_tables: iptables: counters copy to user failed while replacing table [ 182.978485][ T6913] netlink: 32 bytes leftover after parsing attributes in process `syz.1.247'. [ 183.163386][ T6925] netlink: 76 bytes leftover after parsing attributes in process `syz.1.247'. [ 183.163412][ T6925] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.177752][ T6929] bridge_slave_0: left allmulticast mode [ 183.177837][ T6929] bridge_slave_0: left promiscuous mode [ 183.179175][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.218487][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 183.709520][ T6946] ip_tables: iptables: counters copy to user failed while replacing table [ 183.709854][ T6946] ip_tables: iptables: counters copy to user failed while replacing table [ 183.710164][ T6946] ip_tables: iptables: counters copy to user failed while replacing table [ 183.752735][ T6946] ip_tables: iptables: counters copy to user failed while replacing table [ 183.824708][ T6947] netlink: 92 bytes leftover after parsing attributes in process `syz.0.254'. [ 184.210499][ T6967] netlink: 'syz.1.258': attribute type 8 has an invalid length. [ 185.549792][ T7007] __nla_validate_parse: 2 callbacks suppressed [ 185.549815][ T7007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.269'. [ 185.638191][ T179] IPVS: starting estimator thread 0... [ 185.661780][ T7005] netlink: 64 bytes leftover after parsing attributes in process `syz.4.268'. [ 185.722579][ T7013] IPVS: using max 27 ests per chain, 64800 per kthread [ 185.852926][ T7011] x_tables: duplicate underflow at hook 2 [ 185.960812][ T179] IPVS: starting estimator thread 0... [ 186.041615][ T7026] IPVS: using max 27 ests per chain, 64800 per kthread [ 187.236951][ T7061] netlink: 44 bytes leftover after parsing attributes in process `syz.0.277'. [ 187.236997][ T7061] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 187.421714][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.277'. [ 187.911775][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.994152][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 188.994414][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 188.995733][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 189.246545][ T7098] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 189.376809][ T7098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.408603][ T7105] bond1: entered allmulticast mode [ 189.426670][ T7105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.286'. [ 190.012597][ T7123] tipc: Failed to remove unknown binding: 66,0,0/0:1343471392/1343471394 [ 190.012632][ T7123] tipc: Failed to remove unknown binding: 66,0,0/0:1343471392/1343471393 [ 190.023268][ T7123] tipc: Failed to remove unknown binding: 66,0,0/0:1343471392/1343471393 [ 190.023394][ T7123] tipc: Failed to remove unknown binding: 66,0,0/0:1343471392/1343471394 [ 190.026364][ T7123] tipc: Failed to remove unknown binding: 66,0,0/0:1343471392/1343471393 [ 190.395268][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 190.395295][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 190.744886][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.4.295'. [ 191.235622][ T7172] bridge2: entered promiscuous mode [ 191.235648][ T7172] bridge2: entered allmulticast mode [ 191.295483][ T7172] team0: Port device bridge2 added [ 191.325832][ T7178] netlink: 48 bytes leftover after parsing attributes in process `syz.0.299'. [ 191.449916][ T7174] netlink: 'syz.4.298': attribute type 4 has an invalid length. [ 191.449943][ T7174] netlink: 152 bytes leftover after parsing attributes in process `syz.4.298'. [ 191.489787][ T7174] .`: renamed from bond0 (while UP) [ 191.635615][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.302'. [ 192.168727][ T7193] bond2 (unregistering): Released all slaves [ 192.240728][ T7206] xt_TCPMSS: Only works on TCP SYN packets [ 192.437783][ T7216] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 192.644058][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.307'. [ 192.644082][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 192.683411][ T7222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.307'. [ 192.716520][ T7222] netlink: 'syz.4.307': attribute type 2 has an invalid length. [ 192.754313][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 192.783548][ T7209] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 192.803234][ T7209] bond2 (unregistering): Released all slaves [ 192.988039][ T7205] batman_adv: batadv0: Adding interface: veth0 [ 192.988056][ T7205] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.988523][ T7205] batman_adv: batadv0: Interface activated: veth0 [ 193.527113][ T7250] gtp0: entered promiscuous mode [ 193.527140][ T7250] gtp0: entered allmulticast mode [ 193.925761][ T7265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.319'. [ 194.079884][ T7268] Bluetooth: MGMT ver 1.23 [ 194.318304][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.318367][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.344312][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 194.373834][ T7280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.483899][ T7294] netlink: 'syz.0.322': attribute type 2 has an invalid length. [ 195.195521][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.216107][ T7287] bond1: (slave bond0): Enslaving as an active interface with a down link [ 195.249972][ T7280] bond1 (unregistering): (slave bond0): Releasing active interface [ 195.266695][ T7280] bond1 (unregistering): Released all slaves [ 195.417889][ T7294] : entered promiscuous mode [ 195.781034][ T7315] __nla_validate_parse: 3 callbacks suppressed [ 195.781057][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 195.883656][ T7317] x_tables: duplicate underflow at hook 1 [ 195.916544][ T7315] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 195.916570][ T7315] netlink: 92 bytes leftover after parsing attributes in process `syz.4.331'. [ 196.235726][ T5633] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 196.374206][ T7342] ip_tables: iptables: counters copy to user failed while replacing table [ 196.644397][ T7357] openvswitch: netlink: Unexpected mask (mask=40010, allowed=10058) [ 196.872005][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.100336][ T7389] syzkaller0: entered promiscuous mode [ 198.100365][ T7389] syzkaller0: entered allmulticast mode [ 198.408657][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 198.917189][ T7419] xt_hl: Unknown Hop Limit match mode: 4 [ 199.006550][ T7427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.352'. [ 201.422626][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.353'. [ 201.422666][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.353'. [ 201.596835][ T7445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.356'. [ 201.693793][ T7435] geneve3: entered promiscuous mode [ 201.775008][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 201.775047][ T7453] netlink: 'syz.4.357': attribute type 30 has an invalid length. [ 201.807089][ T7453] vxlan0: entered promiscuous mode [ 201.807114][ T7453] vxlan0: entered allmulticast mode [ 201.855318][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 201.855354][ T7457] netlink: 'syz.4.357': attribute type 30 has an invalid length. [ 201.900720][ T7457] vxlan0: entered promiscuous mode [ 201.900756][ T7457] vxlan0: entered allmulticast mode [ 202.011095][ T7472] netlink: 240 bytes leftover after parsing attributes in process `syz.0.358'. [ 202.194236][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 202.194389][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.365'. [ 202.230099][ T7470] syzkaller0: entered promiscuous mode [ 202.230125][ T7470] syzkaller0: entered allmulticast mode [ 202.303291][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 202.330032][ T7479] bond0: option lp_interval: invalid value (0) [ 202.330060][ T7479] bond0: option lp_interval: allowed values 1 - 2147483647 [ 202.455435][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'. [ 202.538034][ T7490] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 202.686230][ T7505] sctp: Trying to GSO but underlying device doesn't support it. [ 204.461983][ T7502] bridge0: port 1(hsr0) entered blocking state [ 204.467653][ T7502] bridge0: port 1(hsr0) entered disabled state [ 204.467944][ T7502] hsr0: entered allmulticast mode [ 204.467973][ T7502] hsr_slave_0: entered allmulticast mode [ 204.468015][ T7502] hsr_slave_1: entered allmulticast mode [ 204.529439][ T7502] hsr0: entered promiscuous mode [ 204.538366][ T7502] bridge0: port 1(hsr0) entered blocking state [ 204.538499][ T7502] bridge0: port 1(hsr0) entered forwarding state [ 204.861199][ T7528] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 205.042603][ T7539] ip_tables: iptables: counters copy to user failed while replacing table [ 205.043044][ T7539] C: renamed from lo (while UP) [ 205.088030][ T7539] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.200080][ T7549] tun1: tun_chr_ioctl cmd 1074025673 [ 205.200265][ T7548] tun1: tun_chr_ioctl cmd 1074025673 [ 205.253894][ T7551] syzkaller0: entered promiscuous mode [ 205.253919][ T7551] syzkaller0: entered allmulticast mode [ 205.599808][ T7571] netlink: 'syz.0.392': attribute type 21 has an invalid length. [ 205.599976][ T7571] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 205.599994][ T7571] netlink: 'syz.0.392': attribute type 3 has an invalid length. [ 205.725561][ T7575] bond4 (unregistering): Released all slaves [ 205.769289][ T7584] netlink: 'syz.1.390': attribute type 2 has an invalid length. [ 205.831784][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.870657][ T7584] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 205.870834][ T7568] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 206.120202][ T7591] syzkaller0: entered promiscuous mode [ 206.120227][ T7591] syzkaller0: entered allmulticast mode [ 207.090793][ T7640] x_tables: duplicate underflow at hook 2 [ 207.347282][ T7649] __nla_validate_parse: 6 callbacks suppressed [ 207.347306][ T7649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.407'. [ 207.535448][ T7656] netlink: 'syz.0.407': attribute type 58 has an invalid length. [ 207.535472][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 207.753062][ T7661] sctp: [Deprecated]: syz.2.408 (pid 7661) Use of int in max_burst socket option. [ 207.753062][ T7661] Use struct sctp_assoc_value instead [ 208.212489][ T7691] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 208.292981][ T7691] bond4: option mode: invalid value (8) [ 208.426685][ T7704] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 208.426708][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.417'. [ 208.454175][ T7691] bond4 (unregistering): Released all slaves [ 208.482133][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.417'. [ 208.673445][ T7704] dummy0: entered promiscuous mode [ 209.029184][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 209.045488][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 210.963516][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 211.054561][ T7738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.290641][ T7742] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 211.354839][ T7743] netlink: 160 bytes leftover after parsing attributes in process `syz.1.427'. [ 211.406385][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.430'. [ 211.471850][ T7743] 8021q: VLANs not supported on ip6_vti0 [ 211.574226][ T7761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.433'. [ 211.628435][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 211.670899][ T7766] batadv0: entered promiscuous mode [ 211.677482][ T7766] macsec1: entered promiscuous mode [ 211.678089][ T7766] macsec1: entered allmulticast mode [ 211.678131][ T7766] batadv0: entered allmulticast mode [ 211.682378][ T7766] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 211.689234][ T7766] batadv0: left allmulticast mode [ 211.689821][ T7766] batadv0: left promiscuous mode [ 211.849136][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849169][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849187][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849203][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849219][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849235][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849251][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849267][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849283][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849311][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849328][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849344][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849360][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849375][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849391][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849407][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849422][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849438][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849454][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849470][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849486][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849516][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849532][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849548][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849564][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849580][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849607][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849623][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849639][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849655][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849671][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849687][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849702][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849718][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849734][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849750][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849766][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849782][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849797][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.849820][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.854875][ T7778] GUP no longer grows the stack in syz.2.435 (7778): 200000003000-20000000a000 (200000001000) [ 211.854991][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.2.435 Not tainted syzkaller #0 PREEMPT(full) [ 211.855054][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 211.855106][ T7778] Call Trace: [ 211.855131][ T7778] [ 211.855171][ T7778] dump_stack_lvl+0xe8/0x150 [ 211.855289][ T7778] __get_user_pages+0x23b6/0x2750 [ 211.855388][ T7778] ? lock_acquire+0x115/0x350 [ 211.855496][ T7778] ? __gup_longterm_locked+0xc3b/0x15c0 [ 211.855612][ T7778] __gup_longterm_locked+0xd52/0x15c0 [ 211.855707][ T7778] ? lock_acquire+0x115/0x350 [ 211.855816][ T7778] gup_fast_fallback+0x1d92/0x20e0 [ 211.856013][ T7778] ? __pfx_gup_fast_fallback+0x10/0x10 [ 211.856109][ T7778] ? lock_acquire+0x115/0x350 [ 211.856163][ T7778] ? is_valid_gup_args+0x11f/0x200 [ 211.856249][ T7778] ? get_user_pages_fast+0x4d/0xb0 [ 211.856354][ T7778] __iov_iter_get_pages_alloc+0x378/0xa40 [ 211.856454][ T7778] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 211.856539][ T7778] iov_iter_get_pages2+0x5e/0xa0 [ 211.856632][ T7778] __se_sys_vmsplice+0x7b5/0x1660 [ 211.856750][ T7778] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 211.856814][ T7778] ? __pfx_futex_wait+0x10/0x10 [ 211.857060][ T7778] do_syscall_64+0x166/0x520 [ 211.857144][ T7778] ? trace_irq_disable+0x3b/0x140 [ 211.857208][ T7778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.857272][ T7778] ? clear_bhb_loop+0x70/0xc0 [ 211.857365][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.857421][ T7778] RIP: 0033:0x7fccc5b9e1d9 [ 211.857483][ T7778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.857536][ T7778] RSP: 002b:00007fccc6b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 211.857602][ T7778] RAX: ffffffffffffffda RBX: 00007fccc5e25fa0 RCX: 00007fccc5b9e1d9 [ 211.857643][ T7778] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 211.857677][ T7778] RBP: 00007fccc5c35888 R08: 0000000000000000 R09: 0000000000000000 [ 211.857716][ T7778] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 211.857749][ T7778] R13: 00007fccc5e26038 R14: 00007fccc5e25fa0 R15: 00007ffc2d42db28 [ 211.857806][ T7778] [ 211.862578][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.862672][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.862746][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.862813][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.862888][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.862961][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.863035][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.863110][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.863178][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.863253][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.863329][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.863404][ T7779] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.867484][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.867635][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.867701][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.867772][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.867847][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.867911][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.867986][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.868043][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.868109][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.868174][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.868242][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.868307][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 211.868380][ T7780] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 214.455444][ T7753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.637051][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 214.740690][ T7810] openvswitch: netlink: Flow actions attr not present in new flow. [ 214.759048][ T7812] netlink: 24 bytes leftover after parsing attributes in process `syz.1.439'. [ 214.869610][ T31] audit: type=1804 audit(1791796804.656:2): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.444" name="/newroot/80/cgroup.controllers" dev="tmpfs" ino=431 res=1 errno=0 [ 214.870370][ T31] audit: type=1800 audit(1791796804.656:3): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.444" name="cgroup.controllers" dev="tmpfs" ino=431 res=0 errno=0 [ 215.167561][ T7828] veth1_to_bond: entered promiscuous mode [ 215.178633][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 215.237079][ T7828] veth1_to_bond (unregistering): left promiscuous mode [ 215.250130][ T7833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.279065][ T7828] bond0: (slave bond_slave_1): Releasing backup interface [ 215.283221][ T7836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 215.350030][ T7836] syzkaller0: entered promiscuous mode [ 215.350054][ T7836] syzkaller0: entered allmulticast mode [ 215.402500][ T7844] netlink: 'syz.1.450': attribute type 1 has an invalid length. [ 215.407285][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.450'. [ 215.407323][ T7838] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 215.861797][ T7877] xt_addrtype: ipv6 does not support BROADCAST matching [ 215.935914][ T7879] netlink: 288 bytes leftover after parsing attributes in process `syz.1.457'. [ 216.000738][ T7881] netlink: 67 bytes leftover after parsing attributes in process `syz.0.461'. [ 216.020648][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.112471][ T5727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.217054][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 216.308851][ T6758] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 216.385705][ T7894] xt_l2tp: invalid flags combination: 0 [ 216.454608][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 216.454654][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 216.483030][ T987] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.499756][ T7899] netlink: 'syz.0.463': attribute type 8 has an invalid length. [ 216.516498][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 216.658906][ T6773] IPVS: starting estimator thread 0... [ 216.674646][ T7908] batman_adv: batadv0: Adding interface: veth0 [ 216.674667][ T7908] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.674698][ T7908] batman_adv: batadv0: Interface activated: veth0 [ 216.761671][ T7907] IPVS: using max 26 ests per chain, 62400 per kthread [ 216.761974][ T7905] nbd: socks must be embedded in a SOCK_ITEM attr [ 216.800052][ T7905] block nbd0: shutting down sockets [ 216.887488][ T5637] Bluetooth: hci1: command 0x0406 tx timeout [ 216.887533][ T5637] Bluetooth: hci3: command 0x0406 tx timeout [ 216.887561][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 216.990853][ T7923] FAULT_INJECTION: forcing a failure. [ 216.990853][ T7923] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 216.990894][ T7923] CPU: 1 UID: 0 PID: 7923 Comm: syz.2.473 Not tainted syzkaller #0 PREEMPT(full) [ 216.990918][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 216.990931][ T7923] Call Trace: [ 216.990939][ T7923] [ 216.990948][ T7923] dump_stack_lvl+0xe8/0x150 [ 216.990992][ T7923] should_fail_ex+0x410/0x560 [ 216.991028][ T7923] _copy_from_user+0x2d/0xb0 [ 216.991062][ T7923] __sys_bpf+0x2e7/0xd90 [ 216.991099][ T7923] ? __pfx___sys_bpf+0x10/0x10 [ 216.991139][ T7923] ? __fget_files+0x2a/0x420 [ 216.991190][ T7923] ? ksys_write+0x242/0x270 [ 216.991216][ T7923] ? __pfx_ksys_write+0x10/0x10 [ 216.991245][ T7923] __x64_sys_bpf+0xba/0xd0 [ 216.991276][ T7923] do_syscall_64+0x166/0x520 [ 216.991305][ T7923] ? trace_irq_disable+0x3b/0x140 [ 216.991329][ T7923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.991352][ T7923] ? clear_bhb_loop+0x70/0xc0 [ 216.991380][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.991402][ T7923] RIP: 0033:0x7fccc5b9e1d9 [ 216.991421][ T7923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.991439][ T7923] RSP: 002b:00007fccc6b4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.991462][ T7923] RAX: ffffffffffffffda RBX: 00007fccc5e25fa0 RCX: 00007fccc5b9e1d9 [ 216.991478][ T7923] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 216.991491][ T7923] RBP: 00007fccc6b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 216.991503][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.991516][ T7923] R13: 00007fccc5e26038 R14: 00007fccc5e25fa0 R15: 00007ffc2d42db28 [ 216.991549][ T7923] [ 217.219027][ T7919] syzkaller0: entered promiscuous mode [ 217.219056][ T7919] syzkaller0: entered allmulticast mode [ 217.263095][ T7927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.320719][ T7936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.872177][ T7958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.534848][ T7965] openvswitch: netlink: Missing key (keys=c0, expected=10000000) [ 218.536247][ T7965] netlink: 'syz.4.484': attribute type 1 has an invalid length. [ 219.796078][ T7962] __nla_validate_parse: 3 callbacks suppressed [ 219.796104][ T7962] netlink: 72 bytes leftover after parsing attributes in process `syz.2.483'. [ 219.922616][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.485'. [ 220.014559][ T7972] FAULT_INJECTION: forcing a failure. [ 220.014559][ T7972] name failslab, interval 1, probability 0, space 0, times 1 [ 220.014598][ T7972] CPU: 0 UID: 0 PID: 7972 Comm: syz.3.487 Not tainted syzkaller #0 PREEMPT(full) [ 220.014626][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 220.014641][ T7972] Call Trace: [ 220.014651][ T7972] [ 220.014663][ T7972] dump_stack_lvl+0xe8/0x150 [ 220.014703][ T7972] should_fail_ex+0x410/0x560 [ 220.014743][ T7972] should_failslab+0xa8/0x100 [ 220.014780][ T7972] __kmalloc_noprof+0xfe/0x720 [ 220.014808][ T7972] ? bpf_test_init+0x9f/0x150 [ 220.014837][ T7972] ? bpf_test_init+0x9f/0x150 [ 220.014874][ T7972] bpf_test_init+0x9f/0x150 [ 220.014909][ T7972] bpf_prog_test_run_skb+0x31e/0x2230 [ 220.014941][ T7972] ? lock_acquire+0x115/0x350 [ 220.014986][ T7972] ? __fget_files+0x3a2/0x420 [ 220.015031][ T7972] ? __fget_files+0x2a/0x420 [ 220.015075][ T7972] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 220.015109][ T7972] bpf_prog_test_run+0x2c5/0x340 [ 220.015147][ T7972] __sys_bpf+0xa22/0xd90 [ 220.015192][ T7972] ? __pfx___sys_bpf+0x10/0x10 [ 220.015236][ T7972] ? __fget_files+0x2a/0x420 [ 220.015294][ T7972] ? ksys_write+0x242/0x270 [ 220.015322][ T7972] ? __pfx_ksys_write+0x10/0x10 [ 220.015354][ T7972] __x64_sys_bpf+0xba/0xd0 [ 220.015384][ T7972] do_syscall_64+0x166/0x520 [ 220.015418][ T7972] ? trace_irq_disable+0x3b/0x140 [ 220.015448][ T7972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.015474][ T7972] ? clear_bhb_loop+0x70/0xc0 [ 220.015504][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.015529][ T7972] RIP: 0033:0x7f0deef9e1d9 [ 220.015552][ T7972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.015572][ T7972] RSP: 002b:00007f0defe5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.015598][ T7972] RAX: ffffffffffffffda RBX: 00007f0def225fa0 RCX: 00007f0deef9e1d9 [ 220.015617][ T7972] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 220.015632][ T7972] RBP: 00007f0defe5f090 R08: 0000000000000000 R09: 0000000000000000 [ 220.015647][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.015661][ T7972] R13: 00007f0def226038 R14: 00007f0def225fa0 R15: 00007ffdbccbdc48 [ 220.015700][ T7972] [ 220.311767][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 220.516380][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 220.516449][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 220.620601][ T7988] bond1: option ad_user_port_key: invalid value (65535) [ 220.620628][ T7988] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 220.645423][ T7988] bond1 (unregistering): Released all slaves [ 220.676393][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'. [ 220.676681][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'. [ 220.749636][ T7998] vlan2: entered allmulticast mode [ 220.750087][ T7998] bridge0: port 3(vlan2) entered blocking state [ 220.750241][ T7998] bridge0: port 3(vlan2) entered disabled state [ 220.768249][ T7998] vlan2: entered promiscuous mode [ 221.117894][ T8019] FAULT_INJECTION: forcing a failure. [ 221.117894][ T8019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.117930][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(full) [ 221.117965][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.117978][ T8019] Call Trace: [ 221.117987][ T8019] [ 221.117996][ T8019] dump_stack_lvl+0xe8/0x150 [ 221.118030][ T8019] should_fail_ex+0x410/0x560 [ 221.118063][ T8019] _copy_from_user+0x2d/0xb0 [ 221.118094][ T8019] bpf_test_init+0xd8/0x150 [ 221.118127][ T8019] bpf_prog_test_run_skb+0x31e/0x2230 [ 221.118155][ T8019] ? lock_acquire+0x115/0x350 [ 221.118197][ T8019] ? __fget_files+0x3a2/0x420 [ 221.118225][ T8019] ? __fget_files+0x2a/0x420 [ 221.118255][ T8019] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 221.118285][ T8019] bpf_prog_test_run+0x2c5/0x340 [ 221.118314][ T8019] __sys_bpf+0xa22/0xd90 [ 221.118346][ T8019] ? __pfx___sys_bpf+0x10/0x10 [ 221.118380][ T8019] ? __fget_files+0x2a/0x420 [ 221.118429][ T8019] ? ksys_write+0x242/0x270 [ 221.118452][ T8019] ? __pfx_ksys_write+0x10/0x10 [ 221.118480][ T8019] __x64_sys_bpf+0xba/0xd0 [ 221.118505][ T8019] do_syscall_64+0x166/0x520 [ 221.118530][ T8019] ? trace_irq_disable+0x3b/0x140 [ 221.118552][ T8019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.118574][ T8019] ? clear_bhb_loop+0x70/0xc0 [ 221.118602][ T8019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.118623][ T8019] RIP: 0033:0x7fc07359e1d9 [ 221.118644][ T8019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.118662][ T8019] RSP: 002b:00007fc074403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.118685][ T8019] RAX: ffffffffffffffda RBX: 00007fc073825fa0 RCX: 00007fc07359e1d9 [ 221.118701][ T8019] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 221.118721][ T8019] RBP: 00007fc074403090 R08: 0000000000000000 R09: 0000000000000000 [ 221.118735][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.118753][ T8019] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 221.118788][ T8019] [ 221.128915][ T8017] netlink: 'syz.2.498': attribute type 10 has an invalid length. [ 221.450483][ T8016] netlink: 'syz.2.498': attribute type 10 has an invalid length. [ 221.489064][ T8017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.501795][ T8017] team0: Port device netdevsim1 added [ 221.589744][ T8016] team0: Port device netdevsim1 removed [ 221.617792][ T8016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.636631][ T8016] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 222.160558][ T8065] FAULT_INJECTION: forcing a failure. [ 222.160558][ T8065] name failslab, interval 1, probability 0, space 0, times 0 [ 222.160594][ T8065] CPU: 0 UID: 0 PID: 8065 Comm: syz.3.510 Not tainted syzkaller #0 PREEMPT(full) [ 222.160618][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.160631][ T8065] Call Trace: [ 222.160640][ T8065] [ 222.160655][ T8065] dump_stack_lvl+0xe8/0x150 [ 222.160698][ T8065] should_fail_ex+0x410/0x560 [ 222.160734][ T8065] should_failslab+0xa8/0x100 [ 222.160766][ T8065] __kmalloc_noprof+0xfe/0x720 [ 222.160792][ T8065] ? sk_prot_alloc+0xe7/0x210 [ 222.160811][ T8065] ? sk_prot_alloc+0xe7/0x210 [ 222.160839][ T8065] sk_prot_alloc+0xe7/0x210 [ 222.160858][ T8065] ? sk_alloc+0x27/0x390 [ 222.160881][ T8065] sk_alloc+0x3a/0x390 [ 222.160916][ T8065] bpf_prog_test_run_skb+0x3a6/0x2230 [ 222.160946][ T8065] ? lock_acquire+0x115/0x350 [ 222.160988][ T8065] ? __fget_files+0x3a2/0x420 [ 222.161024][ T8065] ? __fget_files+0x2a/0x420 [ 222.161063][ T8065] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 222.161093][ T8065] bpf_prog_test_run+0x2c5/0x340 [ 222.161126][ T8065] __sys_bpf+0xa22/0xd90 [ 222.161161][ T8065] ? __pfx___sys_bpf+0x10/0x10 [ 222.161200][ T8065] ? __fget_files+0x2a/0x420 [ 222.161253][ T8065] ? ksys_write+0x242/0x270 [ 222.161277][ T8065] ? __pfx_ksys_write+0x10/0x10 [ 222.161306][ T8065] __x64_sys_bpf+0xba/0xd0 [ 222.161333][ T8065] do_syscall_64+0x166/0x520 [ 222.161362][ T8065] ? trace_irq_disable+0x3b/0x140 [ 222.161386][ T8065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.161408][ T8065] ? clear_bhb_loop+0x70/0xc0 [ 222.161435][ T8065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.161457][ T8065] RIP: 0033:0x7f0deef9e1d9 [ 222.161476][ T8065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.161493][ T8065] RSP: 002b:00007f0defe5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.161517][ T8065] RAX: ffffffffffffffda RBX: 00007f0def225fa0 RCX: 00007f0deef9e1d9 [ 222.161532][ T8065] RDX: 0000000000000050 RSI: 00002000000004c0 RDI: 000000000000000a [ 222.161546][ T8065] RBP: 00007f0defe5f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.161558][ T8065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.161571][ T8065] R13: 00007f0def226038 R14: 00007f0def225fa0 R15: 00007ffdbccbdc48 [ 222.161605][ T8065] [ 222.258379][ T8067] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 222.438852][ T8067] bond0: (slave netdevsim1): Releasing backup interface [ 222.461089][ T8067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.478132][ T8067] team0: Port device netdevsim1 added [ 222.502325][ T8067] netlink: 'syz.2.509': attribute type 10 has an invalid length. [ 222.536837][ T8067] team0: Port device netdevsim1 removed [ 222.556197][ T8067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.560245][ T8067] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 222.602073][ T8076] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.621371][ T8081] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.871831][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 222.923280][ T8090] netlink: 112 bytes leftover after parsing attributes in process `syz.4.514'. [ 222.958433][ T8085] bond3: option min_links: invalid value (18446744073709551612) [ 222.958462][ T8085] bond3: option min_links: allowed values 0 - 2147483647 [ 222.989604][ T8085] bond3 (unregistering): Released all slaves [ 223.037471][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'. [ 223.122166][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 223.445058][ T8106] bridge0: port 3(.`) entered blocking state [ 223.445202][ T8106] bridge0: port 3(.`) entered disabled state [ 223.468729][ T8106] .`: entered promiscuous mode [ 223.468754][ T8106] bond_slave_0: entered promiscuous mode [ 223.468937][ T8106] bond_slave_1: entered promiscuous mode [ 224.075017][ T8163] netlink: 'syz.2.526': attribute type 10 has an invalid length. [ 224.075585][ T8163] syz_tun: entered promiscuous mode [ 224.123272][ T8163] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 224.674771][ T8199] Bluetooth: hci0: unsupported parameter 5135 [ 224.674799][ T8199] Bluetooth: hci0: unsupported parameter 8192 [ 224.674815][ T8199] Bluetooth: hci0: unsupported parameter 5135 [ 224.674829][ T8199] Bluetooth: hci0: unsupported parameter 8192 [ 224.798262][ T8190] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.601285][ T8217] __nla_validate_parse: 4 callbacks suppressed [ 225.601310][ T8217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.542'. [ 225.857871][ T8237] 8021q: VLANs not supported on vxcan1 [ 225.978085][ T8237] netlink: get zone limit has 4 unknown bytes [ 226.958357][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801d683400: rx timeout, send abort [ 227.174359][ T8274] xt_bpf: check failed: parse error [ 227.458943][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88801d683400: abort rx timeout. Force session deactivation [ 227.722094][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 227.816458][ T8306] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 227.951338][ T8314] syzkaller0: entered promiscuous mode [ 227.951363][ T8314] syzkaller0: entered allmulticast mode [ 228.010363][ T8314] tipc: Started in network mode [ 228.010398][ T8314] tipc: Node identity 9e1bb7a4d06a, cluster identity 4711 [ 228.010793][ T8314] tipc: Enabled bearer , priority 0 [ 228.038735][ T8314] netlink: 44 bytes leftover after parsing attributes in process `syz.3.566'. [ 228.050788][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.566'. [ 228.102271][ T8313] tipc: Resetting bearer [ 228.164743][ T8313] tipc: Disabling bearer [ 228.231686][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 228.295066][ T8329] netlink: 'syz.4.570': attribute type 15 has an invalid length. [ 228.310266][ T8329] netlink: Unknown conntrack attr (0) [ 228.377163][ T8331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.529707][ T8320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.567'. [ 228.529748][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.567'. [ 228.579294][ T8345] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 229.341362][ T8365] sit0: entered promiscuous mode [ 229.355262][ T8365] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 229.355283][ T8365] netlink: 1 bytes leftover after parsing attributes in process `syz.4.581'. [ 229.389254][ T8365] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 229.389276][ T8365] netlink: 224 bytes leftover after parsing attributes in process `syz.4.581'. [ 229.511702][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.864082][ T8384] netlink: 'syz.1.586': attribute type 30 has an invalid length. [ 230.281252][ T8410] netlink: 'syz.0.594': attribute type 14 has an invalid length. [ 230.595778][ T8425] netlink: 108 bytes leftover after parsing attributes in process `syz.2.598'. [ 230.899102][ T8431] netlink: 'syz.3.600': attribute type 5 has an invalid length. [ 230.932765][ T8431] netlink: 'syz.3.600': attribute type 3 has an invalid length. [ 231.165136][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.603'. [ 231.244914][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.603'. [ 231.334290][ T8445] netlink: 44 bytes leftover after parsing attributes in process `syz.3.605'. [ 231.630694][ T8453] openvswitch: netlink: Message has 1 unknown bytes. [ 231.631044][ T8454] openvswitch: netlink: Message has 1 unknown bytes. [ 231.697538][ T8455] ip_tables: iptables: counters copy to user failed while replacing table [ 231.779021][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.610'. [ 232.255954][ T8476] ip_tables: iptables: counters copy to user failed while replacing table [ 232.257823][ T8476] netlink: 'syz.1.616': attribute type 8 has an invalid length. [ 232.305769][ T8469] ipvlan2: entered promiscuous mode [ 232.578226][ T8486] sock: sock_timestamping_bind_phc: sock not bind to device [ 232.889790][ T8497] netlink: 'syz.2.624': attribute type 2 has an invalid length. [ 232.907446][ T8497] : entered promiscuous mode [ 232.907741][ T8501] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 233.355488][ T8511] xt_hashlimit: size too large, truncated to 1048576 [ 234.251372][ T8536] tap0: tun_chr_ioctl cmd 1074025677 [ 234.261034][ T8536] tap0: linktype set to 23 [ 234.270574][ T8536] netlink: 72 bytes leftover after parsing attributes in process `syz.3.637'. [ 234.433848][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.456898][ T8544] bridge_slave_1: left allmulticast mode [ 234.456924][ T8544] bridge_slave_1: left promiscuous mode [ 234.457123][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.498329][ T8548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.640'. [ 234.516338][ T8544] bond0: (slave bond_slave_0): Releasing backup interface [ 234.548680][ T8544] bond0: (slave bond_slave_1): Releasing backup interface [ 234.597648][ T8544] team0: Port device team_slave_0 removed [ 234.634613][ T8544] team0: Port device team_slave_1 removed [ 234.635654][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.635680][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.667037][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.667067][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.688890][ T8544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.799864][ T8559] syzkaller0: entered promiscuous mode [ 234.799888][ T8559] syzkaller0: entered allmulticast mode [ 234.830132][ T8559] netlink: 80 bytes leftover after parsing attributes in process `syz.0.643'. [ 235.079577][ T8575] netlink: 'syz.3.649': attribute type 11 has an invalid length. [ 235.178191][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 235.228199][ T8578] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 235.266789][ T8578] bond0: entered promiscuous mode [ 235.267612][ T8578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.575123][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 235.575147][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 235.940737][ T8600] bond5 (unregistering): Released all slaves [ 236.135290][ T8617] netlink: 'syz.2.659': attribute type 16 has an invalid length. [ 236.135313][ T8617] netlink: 'syz.2.659': attribute type 17 has an invalid length. [ 236.242553][ T8617] syz_tun: left promiscuous mode [ 236.263730][ T8628] __nla_validate_parse: 1 callbacks suppressed [ 236.263750][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'. [ 236.504176][ T8617] geneve2: left promiscuous mode [ 236.526462][ T8617] bond1: left allmulticast mode [ 236.526821][ T8617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.530165][ T8617] geneve3: left promiscuous mode [ 236.679990][ T8638] tun0: tun_chr_ioctl cmd 1074025673 [ 236.797726][ T8642] netlink: 36 bytes leftover after parsing attributes in process `syz.3.667'. [ 236.800750][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 236.800772][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 236.916280][ T8642] netlink: 72 bytes leftover after parsing attributes in process `syz.3.667'. [ 237.049558][ T8648] ip6tnl1: entered allmulticast mode [ 237.160307][ T8639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.492792][ T6803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.493035][ T6803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.525487][ T6758] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.525842][ T6758] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.539192][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.553571][ T5803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.624588][ T5803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 237.763601][ T5803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.042183][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.183984][ T8684] netlink: 988 bytes leftover after parsing attributes in process `syz.0.677'. [ 238.248021][ T8688] netlink: 988 bytes leftover after parsing attributes in process `syz.0.677'. [ 238.295265][ T8691] netlink: 36 bytes leftover after parsing attributes in process `syz.1.678'. [ 238.343062][ T8691] 0ªX¹¦Dö»: left allmulticast mode [ 238.485845][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'. [ 238.553513][ T5803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.633736][ T8701] netlink: 'syz.1.681': attribute type 39 has an invalid length. [ 238.655008][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.854434][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.685'. [ 239.646885][ T8740] gretap0: entered promiscuous mode [ 239.649040][ T8740] vlan3: entered promiscuous mode [ 239.977836][ T8753] syzkaller0: entered promiscuous mode [ 239.977861][ T8753] syzkaller0: entered allmulticast mode [ 240.342137][ T6802] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.342191][ T6802] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.342228][ T6802] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.342265][ T6802] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 240.644779][ T8783] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 240.677828][ T8787] IPv6: addrconf: prefix option has invalid lifetime [ 241.182617][ T8820] sit0: left promiscuous mode [ 241.263515][ T8820] bridge0: port 3(.`) entered blocking state [ 241.263700][ T8820] bridge0: port 3(.`) entered forwarding state [ 241.264940][ T8820] 8021q: adding VLAN 0 to HW filter on device .` [ 241.389565][ T8820] ip6gre1: left promiscuous mode [ 241.401080][ T8820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.435811][ T8820] bridge2: left promiscuous mode [ 241.451189][ T8820] bond0: left promiscuous mode [ 241.479357][ T5639] Bluetooth: hci4: link tx timeout [ 241.479377][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 241.826003][ T8841] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 241.889852][ T8839] __nla_validate_parse: 10 callbacks suppressed [ 241.889874][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 241.889889][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 241.988058][ T8847] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 242.007200][ T8847] dummy0: left promiscuous mode [ 242.039533][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.723'. [ 242.039577][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 242.085357][ T8847] team0: Port device dummy0 added [ 242.326702][ T8841] syz.2.723 (8841) used greatest stack depth: 18088 bytes left [ 242.492749][ T8865] macsec1: entered promiscuous mode [ 243.076911][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 243.076939][ T8901] nbd: illegal input index -1784209529 [ 243.454811][ T8920] netlink: NAT attribute has 5 unknown bytes [ 243.454848][ T8920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.511721][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 243.773213][ T8928] tipc: Enabling of bearer rejected, failed to enable media [ 244.207355][ T8943] sctp: [Deprecated]: syz.3.744 (pid 8943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.207355][ T8943] Use struct sctp_sack_info instead [ 244.231700][ C0] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 244.231723][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 244.417307][ T8951] xt_hl: Unknown TTL match mode: 237 [ 244.446291][ T8951] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 244.447191][ T8952] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 244.505941][ T8955] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 244.548063][ T8951] bond2: entered promiscuous mode [ 244.548508][ T8951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.219132][ T8989] netlink: 204 bytes leftover after parsing attributes in process `syz.4.752'. [ 245.283637][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 245.283665][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.752'. [ 245.344851][ T8992] syzkaller0: entered promiscuous mode [ 245.344876][ T8992] syzkaller0: entered allmulticast mode [ 245.677280][ T9004] veth1_to_bond: entered allmulticast mode [ 245.695468][ T9004] veth1_to_bond: entered promiscuous mode [ 245.696523][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 245.798162][ T9004] veth1_to_bond (unregistering): left allmulticast mode [ 245.798212][ T9004] veth1_to_bond (unregistering): left promiscuous mode [ 246.144405][ T9020] syzkaller0: entered promiscuous mode [ 246.144431][ T9020] syzkaller0: entered allmulticast mode [ 246.647411][ T9035] netlink: 80 bytes leftover after parsing attributes in process `syz.4.767'. [ 246.877431][ T9032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.970206][ T9047] __nla_validate_parse: 1 callbacks suppressed [ 246.970228][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'. [ 247.033210][ T9056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.126283][ T9056] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 247.127484][ T9056] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 247.800037][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 247.884848][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 247.884877][ T9092] netlink: 'syz.2.779': attribute type 3 has an invalid length. [ 247.884903][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 247.930675][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.779'. [ 247.936294][ T9091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.780'. [ 247.970971][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.779'. [ 248.131291][ T9098] can: request_module (can-proto-0) failed. [ 248.334384][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 248.697588][ T9140] netlink: 48 bytes leftover after parsing attributes in process `syz.3.788'. [ 248.745470][ T9145] netlink: 228 bytes leftover after parsing attributes in process `syz.1.787'. [ 249.204203][ T9118] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 249.352060][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.632385][ T9183] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 249.632565][ T9181] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 250.471827][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 251.099596][ T9245] netlink: 'syz.2.804': attribute type 3 has an invalid length. [ 251.272297][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.463606][ T9259] bond0: (slave gretap0): Opening slave failed [ 251.465409][ T9252] tipc: Started in network mode [ 251.465443][ T9252] tipc: Node identity 463024aee857, cluster identity 4711 [ 251.465698][ T9252] tipc: Enabled bearer , priority 0 [ 251.470139][ T9252] syzkaller0: entered promiscuous mode [ 251.470163][ T9252] syzkaller0: entered allmulticast mode [ 251.498863][ T9252] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 251.651916][ T9252] tipc: Resetting bearer [ 251.679499][ T9249] tipc: Resetting bearer [ 251.717685][ T9249] tipc: Disabling bearer [ 251.900666][ T9267] 8021q: adding VLAN 0 to HW filter on device bond5 [ 251.904171][ T9267] bridge0: port 1(bond5) entered blocking state [ 251.904468][ T9267] bridge0: port 1(bond5) entered disabled state [ 251.906895][ T9267] bond5: entered allmulticast mode [ 251.959277][ T9267] bond5: entered promiscuous mode [ 251.968529][ T9267] bridge0: port 1(bond5) entered blocking state [ 251.968652][ T9267] bridge0: port 1(bond5) entered forwarding state [ 251.999141][ T6763] bridge0: port 1(bond5) entered disabled state [ 252.179782][ T9280] __nla_validate_parse: 10 callbacks suppressed [ 252.179808][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 252.454653][ T9308] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 252.498983][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 252.556969][ T9304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.819'. [ 252.742064][ T9312] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 252.807459][ T9309] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 252.807488][ T9309] netlink: 224 bytes leftover after parsing attributes in process `syz.1.819'. [ 252.964418][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'. [ 253.398783][ T9338] netlink: 1 bytes leftover after parsing attributes in process `syz.1.826'. [ 254.151872][ T9384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.831'. [ 254.236756][ T9377] netlink: 220 bytes leftover after parsing attributes in process `syz.3.831'. [ 254.289742][ T9387] netlink: 'syz.2.834': attribute type 6 has an invalid length. [ 255.015637][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 255.135697][ T9423] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 255.136122][ T9423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.162684][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 255.211966][ T9427] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 255.365207][ T9419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.761908][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761970][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.471060][ T9482] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 256.519106][ T9482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.653745][ T9491] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 256.760018][ T9493] syzkaller0: entered promiscuous mode [ 256.763286][ T9493] syzkaller0: entered allmulticast mode [ 256.903474][ T9509] ip_tables: iptables: counters copy to user failed while replacing table [ 257.087779][ T9515] netlink: Failed to add helper -22 [ 257.087835][ T9515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.840997][ T9532] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 257.940639][ T9535] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.329811][ T9559] __nla_validate_parse: 3 callbacks suppressed [ 258.329835][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'. [ 258.791750][ T9538] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 260.211872][ T9577] lo: entered promiscuous mode [ 260.262927][ T9577] tunl0: entered promiscuous mode [ 260.278223][ T9577] gre0: entered promiscuous mode [ 260.314063][ T9577] gretap0: entered promiscuous mode [ 260.335063][ T9577] erspan0: entered promiscuous mode [ 260.383990][ T9577] ip_vti0: entered promiscuous mode [ 260.398973][ T9577] ip6_vti0: entered promiscuous mode [ 260.410850][ T9577] sit0: entered promiscuous mode [ 260.477688][ T9577] ip6tnl0: entered promiscuous mode [ 260.480656][ T9577] ip6gre0: entered promiscuous mode [ 260.497541][ T9577] syz_tun: entered promiscuous mode [ 260.518305][ T9577] ip6gretap0: entered promiscuous mode [ 260.529043][ T9577] bridge0: port 3(.`) entered disabled state [ 260.529351][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.531340][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.536581][ T9577] bridge0: entered promiscuous mode [ 260.566065][ T9577] team0: entered promiscuous mode [ 260.566091][ T9577] team_slave_0: entered promiscuous mode [ 260.568396][ T9577] team_slave_1: entered promiscuous mode [ 260.568582][ T9577] bridge2: entered promiscuous mode [ 260.598514][ T9577] dummy0: entered promiscuous mode [ 260.631151][ T9577] nlmon0: entered promiscuous mode [ 260.657936][ T9577] batadv0: entered promiscuous mode [ 260.679517][ T9577] vxcan0: entered promiscuous mode [ 260.687672][ T9577] vxcan1: entered promiscuous mode [ 260.689796][ T9577] veth0: entered promiscuous mode [ 260.709278][ T9577] veth1: entered promiscuous mode [ 260.727679][ T9577] wg0: entered promiscuous mode [ 260.731051][ T9577] wg1: entered promiscuous mode [ 260.754876][ T9577] wg2: entered promiscuous mode [ 260.758558][ T9577] veth0_to_bridge: entered promiscuous mode [ 260.785387][ T9577] veth1_to_bridge: entered promiscuous mode [ 260.800280][ T9577] veth0_to_bond: entered promiscuous mode [ 260.810218][ T9577] veth1_to_bond: entered promiscuous mode [ 260.825957][ T9577] veth0_to_team: entered promiscuous mode [ 260.842160][ T9577] veth1_to_team: entered promiscuous mode [ 260.848897][ T9577] veth0_to_batadv: entered promiscuous mode [ 260.868640][ T9577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.868863][ T9577] batadv_slave_0: entered promiscuous mode [ 260.893030][ T9577] veth1_to_batadv: entered promiscuous mode [ 260.899353][ T9577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.899417][ T9577] batadv_slave_1: entered promiscuous mode [ 260.908907][ T9577] xfrm0: entered promiscuous mode [ 260.929300][ T9577] veth0_to_hsr: entered promiscuous mode [ 260.944224][ T9577] veth1_to_hsr: entered promiscuous mode [ 260.950664][ T9577] hsr0: entered promiscuous mode [ 260.960602][ T9577] veth1_virt_wifi: entered promiscuous mode [ 260.980606][ T9577] veth0_virt_wifi: entered promiscuous mode [ 260.997088][ T9577] virt_wifi0: entered promiscuous mode [ 261.016399][ T9577] vlan0: entered promiscuous mode [ 261.020823][ T9577] vlan1: entered promiscuous mode [ 261.035538][ T9577] macvlan0: entered promiscuous mode [ 261.049487][ T9577] macvlan1: entered promiscuous mode [ 261.057356][ T9577] ipvlan0: entered promiscuous mode [ 261.065072][ T9577] ipvlan1: entered promiscuous mode [ 261.088850][ T9577] macvtap0: entered promiscuous mode [ 261.098461][ T9577] macsec0: entered promiscuous mode [ 261.107521][ T9577] geneve0: entered promiscuous mode [ 261.125183][ T9577] geneve1: entered promiscuous mode [ 261.142484][ T9577] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 261.146642][ T9577] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 261.154694][ T9577] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 261.182908][ T9577] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 261.214158][ T9577] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 261.216303][ T9577] vlan2: entered promiscuous mode [ 261.241989][ T9577] : entered promiscuous mode [ 261.244032][ T9577] ip6gre1: entered promiscuous mode [ 261.273079][ T9577] bond1: entered promiscuous mode [ 261.276719][ T9577] bridge1: entered promiscuous mode [ 261.304390][ T9577] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 261.325670][ T9577] mac80211_hwsim hwsim13 wlan3: entered promiscuous mode [ 261.330452][ T9577] bridge3: entered promiscuous mode [ 261.350900][ T9577] vxcan2: entered promiscuous mode [ 261.357451][ T9577] vxcan3: entered promiscuous mode [ 261.358325][ T9577] veth2: entered promiscuous mode [ 261.373854][ T9577] veth3: entered promiscuous mode [ 261.377218][ T9577] veth4: entered promiscuous mode [ 261.379333][ T9577] veth5: entered promiscuous mode [ 261.401286][ T9577] bond0: entered promiscuous mode [ 261.408775][ T9577] erspan0.0: entered promiscuous mode [ 261.411059][ T9577] bridge4: entered promiscuous mode [ 261.411230][ T9577] syzkaller0: entered promiscuous mode [ 261.583867][ T6758] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.583906][ T6758] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.585761][ T6758] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.585794][ T6758] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.585832][ T6758] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.585859][ T6758] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.585894][ T6758] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.585921][ T6758] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.723857][ T9615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 261.789548][ T9621] sch_fq: defrate 8 ignored. [ 261.919680][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 261.919707][ T9609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 261.981265][ T9624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.887'. [ 262.004144][ T9624] tipc: Enabling of bearer rejected, failed to enable media [ 262.026438][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 262.188049][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 262.188115][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'. [ 262.541831][ T9649] netlink: 'syz.2.890': attribute type 4 has an invalid length. [ 262.673577][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.890'. [ 262.726260][ T9649] vlan2: entered promiscuous mode [ 262.726286][ T9649] bridge0: entered promiscuous mode [ 263.332288][ T9684] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.332406][ T9684] syzkaller1: linktype set to 825 [ 263.365993][ T9684] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 263.367175][ T9684] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 263.367285][ T9684] syzkaller1: linktype set to 825 [ 263.645595][ T9700] batman_adv: batadv0: Adding interface: veth0 [ 263.645614][ T9700] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.645645][ T9700] batman_adv: batadv0: Interface activated: veth0 [ 263.696031][ T9700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.698751][ T9700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.700292][ T9700] batman_adv: batadv0: Interface deactivated: veth0 [ 263.700316][ T9700] batman_adv: batadv0: Removing interface: veth0 [ 263.743410][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 263.743456][ T9701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.901'. [ 264.163666][ T9724] netlink: 68 bytes leftover after parsing attributes in process `syz.1.905'. [ 264.163724][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 264.163756][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.905'. [ 264.163771][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 264.164227][ T9725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'. [ 264.338344][ T9732] v: renamed from veth0_vlan [ 264.396218][ T9740] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 264.443762][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 264.769251][ T9753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.912'. [ 264.787010][ T9753] openvswitch: netlink: Message has 8 unknown bytes. [ 264.787048][ T9753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.828419][ T9748] netlink: 136 bytes leftover after parsing attributes in process `syz.2.911'. [ 264.985428][ T9757] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 264.990029][ T9757] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 265.135943][ T9767] netlink: zone id is out of range [ 265.136841][ T9767] netlink: zone id is out of range [ 265.136870][ T9767] netlink: zone id is out of range [ 265.136896][ T9767] netlink: zone id is out of range [ 265.137136][ T9767] netlink: zone id is out of range [ 265.141415][ T9767] netlink: zone id is out of range [ 265.196222][ T9762] dvmrp0: entered allmulticast mode [ 265.196730][ T9765] dvmrp0: left allmulticast mode [ 265.467712][ T9781] netlink: 'syz.1.921': attribute type 2 has an invalid length. [ 265.992509][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 266.099811][ T9810] tipc: Enabling of bearer rejected, failed to enable media [ 266.156957][ T9818] syzkaller0: entered promiscuous mode [ 266.156981][ T9818] syzkaller0: entered allmulticast mode [ 266.509364][ T9829] netlink: 'syz.3.935': attribute type 1 has an invalid length. [ 266.654940][ T9831] bond4: entered promiscuous mode [ 266.654977][ T9831] bond4: entered allmulticast mode [ 266.655428][ T9831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.722657][ T9853] netlink: 'syz.2.939': attribute type 4 has an invalid length. [ 266.741249][ T9852] net_ratelimit: 8 callbacks suppressed [ 266.741268][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.757317][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.757847][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.758173][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.785193][ T9829] bridge2: entered promiscuous mode [ 266.789449][ T9829] bridge2: entered allmulticast mode [ 266.790593][ T9829] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 266.825263][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.825617][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.825854][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.826094][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.826326][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.826568][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 266.939638][ T9831] bridge3: entered promiscuous mode [ 266.939830][ T9831] bridge3: entered allmulticast mode [ 266.949009][ T9831] bond4: (slave bridge3): Enslaving as a backup interface with a down link [ 267.146705][ T9831] bridge4: entered promiscuous mode [ 267.149600][ T9831] bridge4: entered allmulticast mode [ 267.156952][ T9831] bond4: (slave bridge4): Enslaving as a backup interface with a down link [ 267.399192][ T9875] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 267.591883][ T9891] netlink: 'syz.0.948': attribute type 7 has an invalid length. [ 267.596959][ T9891] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 267.755844][ T9900] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 267.850820][ T9900] veth7: entered allmulticast mode [ 267.863483][ T9900] bond2: (slave veth7): Enslaving as an active interface with a down link [ 267.874105][ T9900] veth0_to_bond: left promiscuous mode [ 267.890644][ T9900] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 268.082483][ T9922] xt_policy: neither incoming nor outgoing policy selected [ 268.965644][ T9941] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 268.965670][ T9941] __nla_validate_parse: 45 callbacks suppressed [ 268.965684][ T9941] netlink: 224 bytes leftover after parsing attributes in process `syz.4.961'. [ 269.836535][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 270.635230][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 271.760025][ T9993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.970'. [ 271.828964][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.828991][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.830749][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.830769][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.169983][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 272.178049][T10012] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 272.296024][T10012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.409996][T10027] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 272.560478][T10027] ip6tnl1: entered promiscuous mode [ 272.560503][T10027] ip6tnl1: entered allmulticast mode [ 272.575711][T10034] netlink: 36 bytes leftover after parsing attributes in process `syz.3.981'. [ 272.598710][T10036] netlink: 'syz.4.979': attribute type 1 has an invalid length. [ 272.648499][T10037] ip6tnl1: entered promiscuous mode [ 272.648523][T10037] ip6tnl1: entered allmulticast mode [ 272.720641][T10045] netlink: 'syz.3.984': attribute type 4 has an invalid length. [ 272.729755][T10047] netlink: 'syz.3.984': attribute type 4 has an invalid length. [ 273.131042][T10068] tap0: tun_chr_ioctl cmd 2147767521 [ 273.148498][T10069] tap0: tun_chr_ioctl cmd 2147767521 [ 273.168922][T10071] tap0: tun_chr_ioctl cmd 1074025673 [ 273.339457][T10080] sctp: [Deprecated]: syz.0.990 (pid 10080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.339457][T10080] Use struct sctp_sack_info instead [ 273.403540][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 273.591071][T10091] BUG: Bad page state in process syz.0.994 pfn:74b86 [ 273.591122][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888074b86000 pfn:0x74b86 [ 273.591146][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.591184][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.591206][T10091] raw: ffff888074b86000 3ffffffffffffffd 00000000ffffffff 0000000000000000 [ 273.591218][T10091] page dumped because: page_pool leak [ 273.591233][T10091] page_owner tracks the page as allocated [ 273.591241][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 8860, tgid 8858 (syz.3.727), ts 242557546405 [ 273.591298][T10091] post_alloc_hook+0x1f9/0x250 [ 273.591325][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.591352][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.591376][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.591400][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.591425][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.591534][T10091] page_pool_alloc_frag_netmem+0x561/0x9b0 [ 273.591627][T10091] skb_pp_cow_data+0x1eb/0x18e0 [ 273.591722][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.591796][T10091] __netif_receive_skb_core+0x10e3/0x30c0 [ 273.591877][T10091] netif_receive_skb+0x1fe/0xbf0 [ 273.591943][T10091] tun_rx_batched+0x1de/0x790 [ 273.592015][T10091] tun_get_user+0x2bb1/0x4450 [ 273.592079][T10091] tun_chr_write_iter+0x113/0x200 [ 273.592130][T10091] vfs_write+0x612/0xba0 [ 273.592182][T10091] ksys_write+0x150/0x270 [ 273.592234][T10091] page last free pid 5803 tgid 5803 ts 238091631380 stack trace: [ 273.592278][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.592332][T10091] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 273.592394][T10091] __apply_to_page_range+0xbd8/0x1420 [ 273.592475][T10091] __kasan_release_vmalloc+0xa2/0xd0 [ 273.592531][T10091] purge_vmap_node+0x220/0x960 [ 273.592612][T10091] __purge_vmap_area_lazy+0x783/0xb40 [ 273.592671][T10091] drain_vmap_area_work+0x27/0x40 [ 273.592735][T10091] process_scheduled_works+0xc3d/0x1630 [ 273.592807][T10091] worker_thread+0xa47/0xfb0 [ 273.592925][T10091] kthread+0x38b/0x480 [ 273.592986][T10091] ret_from_fork+0x514/0xb70 [ 273.593084][T10091] ret_from_fork_asm+0x1a/0x30 [ 273.593187][T10091] Modules linked in: [ 273.593269][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Not tainted syzkaller #0 PREEMPT(full) [ 273.593338][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.593379][T10091] Call Trace: [ 273.593402][T10091] [ 273.593425][T10091] dump_stack_lvl+0xe8/0x150 [ 273.593527][T10091] bad_page+0x17f/0x1c0 [ 273.593625][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.593720][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.593868][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.593947][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.594010][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.594155][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.594230][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.594293][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.594390][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.594573][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.594663][T10091] tun_get_user+0x248b/0x4450 [ 273.594780][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.594888][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.594975][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.595058][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.595152][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.595239][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.595334][T10091] ? lock_acquire+0x115/0x350 [ 273.595396][T10091] ? tun_get+0x1c/0x2f0 [ 273.595489][T10091] ? tun_get+0x1c/0x2f0 [ 273.595556][T10091] ? tun_get+0x1c/0x2f0 [ 273.595652][T10091] tun_chr_write_iter+0x113/0x200 [ 273.595735][T10091] vfs_write+0x612/0xba0 [ 273.595819][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.595934][T10091] ? __fget_files+0x2a/0x420 [ 273.596051][T10091] ksys_write+0x150/0x270 [ 273.596110][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.596204][T10091] do_syscall_64+0x166/0x520 [ 273.596288][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.596350][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.596425][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.596480][T10091] RIP: 0033:0x7fc07355ea0e [ 273.596533][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.596571][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.596637][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.596675][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.596708][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.596748][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.596781][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.596869][T10091] [ 273.596898][T10091] Disabling lock debugging due to kernel taint [ 273.596929][T10091] BUG: Bad page state in process syz.0.994 pfn:76382 [ 273.596964][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x76382 [ 273.597018][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.597092][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.597132][T10091] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.597162][T10091] page dumped because: page_pool leak [ 273.597192][T10091] page_owner tracks the page as allocated [ 273.597213][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590853712 [ 273.597310][T10091] post_alloc_hook+0x1f9/0x250 [ 273.597364][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.597434][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.597500][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.597556][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.597624][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.597708][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.597785][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.597848][T10091] tun_get_user+0x248b/0x4450 [ 273.597913][T10091] tun_chr_write_iter+0x113/0x200 [ 273.597983][T10091] vfs_write+0x612/0xba0 [ 273.598026][T10091] ksys_write+0x150/0x270 [ 273.598071][T10091] do_syscall_64+0x166/0x520 [ 273.598137][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.598190][T10091] page last free pid 10089 tgid 10088 ts 273542954382 stack trace: [ 273.598225][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.598280][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.598338][T10091] rcu_core+0x926/0x1260 [ 273.598359][T10091] handle_softirqs+0x226/0x860 [ 273.598383][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.598407][T10091] irq_exit_rcu+0x9/0x30 [ 273.598429][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.598455][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.598534][T10091] Modules linked in: [ 273.598597][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.598687][T10091] Tainted: [B]=BAD_PAGE [ 273.598708][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.598742][T10091] Call Trace: [ 273.598771][T10091] [ 273.598792][T10091] dump_stack_lvl+0xe8/0x150 [ 273.598877][T10091] bad_page+0x17f/0x1c0 [ 273.598962][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.599035][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.599129][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.599193][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.599249][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.599363][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.599429][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.599484][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.599568][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.599689][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.599760][T10091] tun_get_user+0x248b/0x4450 [ 273.599849][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.599952][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.600057][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.600124][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.600200][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.600283][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.600367][T10091] ? lock_acquire+0x115/0x350 [ 273.600420][T10091] ? tun_get+0x1c/0x2f0 [ 273.600495][T10091] ? tun_get+0x1c/0x2f0 [ 273.600567][T10091] ? tun_get+0x1c/0x2f0 [ 273.600641][T10091] tun_chr_write_iter+0x113/0x200 [ 273.600720][T10091] vfs_write+0x612/0xba0 [ 273.600786][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.600845][T10091] ? __fget_files+0x2a/0x420 [ 273.600939][T10091] ksys_write+0x150/0x270 [ 273.601000][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.601072][T10091] do_syscall_64+0x166/0x520 [ 273.601150][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.601205][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.601277][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.601339][T10091] RIP: 0033:0x7fc07355ea0e [ 273.601407][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.601469][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.601544][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.601587][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.601629][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.601662][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.601701][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.601768][T10091] [ 273.601916][T10091] BUG: Bad page state in process syz.0.994 pfn:7f19d [ 273.601957][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7f19d [ 273.602013][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.602087][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.602123][T10091] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.602154][T10091] page dumped because: page_pool leak [ 273.602185][T10091] page_owner tracks the page as allocated [ 273.602206][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590837597 [ 273.602282][T10091] post_alloc_hook+0x1f9/0x250 [ 273.602335][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.602399][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.602463][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.602527][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.602600][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.602677][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.602780][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.602852][T10091] tun_get_user+0x248b/0x4450 [ 273.602916][T10091] tun_chr_write_iter+0x113/0x200 [ 273.602980][T10091] vfs_write+0x612/0xba0 [ 273.603030][T10091] ksys_write+0x150/0x270 [ 273.603073][T10091] do_syscall_64+0x166/0x520 [ 273.603150][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.603203][T10091] page last free pid 10089 tgid 10088 ts 273542992231 stack trace: [ 273.603245][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.603297][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.603358][T10091] rcu_core+0x926/0x1260 [ 273.603412][T10091] handle_softirqs+0x226/0x860 [ 273.603494][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.603571][T10091] irq_exit_rcu+0x9/0x30 [ 273.603650][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.603714][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.603776][T10091] Modules linked in: [ 273.603820][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.603901][T10091] Tainted: [B]=BAD_PAGE [ 273.603915][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.603948][T10091] Call Trace: [ 273.603969][T10091] [ 273.603991][T10091] dump_stack_lvl+0xe8/0x150 [ 273.604074][T10091] bad_page+0x17f/0x1c0 [ 273.604175][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.604263][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.604362][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.604426][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.604478][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.604601][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.604667][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.604728][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.604804][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.604912][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.604977][T10091] tun_get_user+0x248b/0x4450 [ 273.605072][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.605171][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.605249][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.605323][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.605405][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.605499][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.605606][T10091] ? lock_acquire+0x115/0x350 [ 273.605661][T10091] ? tun_get+0x1c/0x2f0 [ 273.605737][T10091] ? tun_get+0x1c/0x2f0 [ 273.605803][T10091] ? tun_get+0x1c/0x2f0 [ 273.605878][T10091] tun_chr_write_iter+0x113/0x200 [ 273.605945][T10091] vfs_write+0x612/0xba0 [ 273.606016][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.606075][T10091] ? __fget_files+0x2a/0x420 [ 273.606176][T10091] ksys_write+0x150/0x270 [ 273.606231][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.606304][T10091] do_syscall_64+0x166/0x520 [ 273.606380][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.606440][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.606506][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.606562][T10091] RIP: 0033:0x7fc07355ea0e [ 273.606622][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.606667][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.606728][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.606770][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.606812][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.606846][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.606894][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.606979][T10091] [ 273.607009][T10091] BUG: Bad page state in process syz.0.994 pfn:22f7d [ 273.607042][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x22f7d [ 273.607106][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.607171][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.607224][T10091] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.607255][T10091] page dumped because: page_pool leak [ 273.607279][T10091] page_owner tracks the page as allocated [ 273.607299][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590820477 [ 273.607374][T10091] post_alloc_hook+0x1f9/0x250 [ 273.607426][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.607491][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.607553][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.607622][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.607676][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.607767][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.607795][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.607860][T10091] tun_get_user+0x248b/0x4450 [ 273.607923][T10091] tun_chr_write_iter+0x113/0x200 [ 273.607985][T10091] vfs_write+0x612/0xba0 [ 273.608028][T10091] ksys_write+0x150/0x270 [ 273.608078][T10091] do_syscall_64+0x166/0x520 [ 273.608137][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.608176][T10091] page last free pid 10089 tgid 10088 ts 273543030268 stack trace: [ 273.608217][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.608269][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.608332][T10091] rcu_core+0x926/0x1260 [ 273.608387][T10091] handle_softirqs+0x226/0x860 [ 273.608459][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.608519][T10091] irq_exit_rcu+0x9/0x30 [ 273.608541][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.608564][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.608585][T10091] Modules linked in: [ 273.608608][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.608637][T10091] Tainted: [B]=BAD_PAGE [ 273.608644][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.608657][T10091] Call Trace: [ 273.608665][T10091] [ 273.608672][T10091] dump_stack_lvl+0xe8/0x150 [ 273.608703][T10091] bad_page+0x17f/0x1c0 [ 273.608732][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.608758][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.608798][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.608823][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.608843][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.608886][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.608913][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.608934][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.608966][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.609010][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.609036][T10091] tun_get_user+0x248b/0x4450 [ 273.609072][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.609108][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.609141][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.609168][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.609199][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.609231][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.609263][T10091] ? lock_acquire+0x115/0x350 [ 273.609285][T10091] ? tun_get+0x1c/0x2f0 [ 273.609313][T10091] ? tun_get+0x1c/0x2f0 [ 273.609338][T10091] ? tun_get+0x1c/0x2f0 [ 273.609366][T10091] tun_chr_write_iter+0x113/0x200 [ 273.609394][T10091] vfs_write+0x612/0xba0 [ 273.609419][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.609445][T10091] ? __fget_files+0x2a/0x420 [ 273.609483][T10091] ksys_write+0x150/0x270 [ 273.609506][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.609534][T10091] do_syscall_64+0x166/0x520 [ 273.609562][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.609584][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.609618][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.609639][T10091] RIP: 0033:0x7fc07355ea0e [ 273.609658][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.609677][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.609700][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.609717][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.609732][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.609747][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.609760][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.609787][T10091] [ 273.609815][T10091] BUG: Bad page state in process syz.0.994 pfn:1341a [ 273.609830][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x1341a [ 273.609852][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.609880][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.609899][T10091] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.609911][T10091] page dumped because: page_pool leak [ 273.609921][T10091] page_owner tracks the page as allocated [ 273.609929][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590801745 [ 273.609959][T10091] post_alloc_hook+0x1f9/0x250 [ 273.609979][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.610004][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.610029][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.610052][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.610075][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.610106][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.610138][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.610162][T10091] tun_get_user+0x248b/0x4450 [ 273.610187][T10091] tun_chr_write_iter+0x113/0x200 [ 273.610211][T10091] vfs_write+0x612/0xba0 [ 273.610229][T10091] ksys_write+0x150/0x270 [ 273.610246][T10091] do_syscall_64+0x166/0x520 [ 273.610352][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.610433][T10091] page last free pid 10089 tgid 10088 ts 273543067817 stack trace: [ 273.610482][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.610537][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.610610][T10091] rcu_core+0x926/0x1260 [ 273.610665][T10091] handle_softirqs+0x226/0x860 [ 273.610739][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.610811][T10091] irq_exit_rcu+0x9/0x30 [ 273.610874][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.610946][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.611001][T10091] Modules linked in: [ 273.611052][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.611114][T10091] Tainted: [B]=BAD_PAGE [ 273.611135][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.611175][T10091] Call Trace: [ 273.611197][T10091] [ 273.611219][T10091] dump_stack_lvl+0xe8/0x150 [ 273.611294][T10091] bad_page+0x17f/0x1c0 [ 273.611377][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.611454][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.611559][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.611633][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.611686][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.611816][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.611898][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.611959][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.612035][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.612144][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.612217][T10091] tun_get_user+0x248b/0x4450 [ 273.612303][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.612398][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.612482][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.612555][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.612631][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.612717][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.612800][T10091] ? lock_acquire+0x115/0x350 [ 273.612860][T10091] ? tun_get+0x1c/0x2f0 [ 273.612928][T10091] ? tun_get+0x1c/0x2f0 [ 273.612992][T10091] ? tun_get+0x1c/0x2f0 [ 273.613066][T10091] tun_chr_write_iter+0x113/0x200 [ 273.613141][T10091] vfs_write+0x612/0xba0 [ 273.613213][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.613302][T10091] ? __fget_files+0x2a/0x420 [ 273.613398][T10091] ksys_write+0x150/0x270 [ 273.613459][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.613534][T10091] do_syscall_64+0x166/0x520 [ 273.613644][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.613706][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.613769][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.613823][T10091] RIP: 0033:0x7fc07355ea0e [ 273.613874][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.613919][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.613980][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.614022][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.614056][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.614091][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.614110][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.614183][T10091] [ 273.614339][T10091] BUG: Bad page state in process syz.0.994 pfn:525e4 [ 273.614381][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x525e4 [ 273.614435][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.614509][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.614555][T10091] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.614595][T10091] page dumped because: page_pool leak [ 273.614625][T10091] page_owner tracks the page as allocated [ 273.614639][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590782727 [ 273.614721][T10091] post_alloc_hook+0x1f9/0x250 [ 273.614773][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.614837][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.614908][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.614979][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.615049][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.615131][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.615215][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.615279][T10091] tun_get_user+0x248b/0x4450 [ 273.615341][T10091] tun_chr_write_iter+0x113/0x200 [ 273.615404][T10091] vfs_write+0x612/0xba0 [ 273.615454][T10091] ksys_write+0x150/0x270 [ 273.615499][T10091] do_syscall_64+0x166/0x520 [ 273.615571][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.615633][T10091] page last free pid 10089 tgid 10088 ts 273543106480 stack trace: [ 273.615675][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.615728][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.615791][T10091] rcu_core+0x926/0x1260 [ 273.615844][T10091] handle_softirqs+0x226/0x860 [ 273.615908][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.615972][T10091] irq_exit_rcu+0x9/0x30 [ 273.616037][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.616095][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.616151][T10091] Modules linked in: [ 273.616201][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.616283][T10091] Tainted: [B]=BAD_PAGE [ 273.616304][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.616350][T10091] Call Trace: [ 273.616372][T10091] [ 273.616399][T10091] dump_stack_lvl+0xe8/0x150 [ 273.616476][T10091] bad_page+0x17f/0x1c0 [ 273.616533][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.616611][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.616715][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.616786][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.616839][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.616944][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.617019][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.617072][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.617158][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.617267][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.617339][T10091] tun_get_user+0x248b/0x4450 [ 273.617433][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.617529][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.617607][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.617689][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.617748][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.617778][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.617841][T10091] ? lock_acquire+0x115/0x350 [ 273.617912][T10091] ? tun_get+0x1c/0x2f0 [ 273.618004][T10091] ? tun_get+0x1c/0x2f0 [ 273.618077][T10091] ? tun_get+0x1c/0x2f0 [ 273.618139][T10091] tun_chr_write_iter+0x113/0x200 [ 273.618218][T10091] vfs_write+0x612/0xba0 [ 273.618281][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.618347][T10091] ? __fget_files+0x2a/0x420 [ 273.618450][T10091] ksys_write+0x150/0x270 [ 273.618505][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.618576][T10091] do_syscall_64+0x166/0x520 [ 273.618661][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.618715][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.618785][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.618838][T10091] RIP: 0033:0x7fc07355ea0e [ 273.618890][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.618933][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.618993][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.619036][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.619070][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.619104][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.619138][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.619202][T10091] [ 273.619233][T10091] BUG: Bad page state in process syz.0.994 pfn:276a3 [ 273.619274][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x276a3 [ 273.619341][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.619419][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.619473][T10091] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.619505][T10091] page dumped because: page_pool leak [ 273.619534][T10091] page_owner tracks the page as allocated [ 273.619554][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590763529 [ 273.619641][T10091] post_alloc_hook+0x1f9/0x250 [ 273.619695][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.619764][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.619828][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.619875][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.619936][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.620021][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.620091][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.620155][T10091] tun_get_user+0x248b/0x4450 [ 273.620225][T10091] tun_chr_write_iter+0x113/0x200 [ 273.620288][T10091] vfs_write+0x612/0xba0 [ 273.620331][T10091] ksys_write+0x150/0x270 [ 273.620375][T10091] do_syscall_64+0x166/0x520 [ 273.620447][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.620501][T10091] page last free pid 10089 tgid 10088 ts 273543143671 stack trace: [ 273.620535][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.620596][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.620686][T10091] rcu_core+0x926/0x1260 [ 273.620755][T10091] handle_softirqs+0x226/0x860 [ 273.620835][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.620911][T10091] irq_exit_rcu+0x9/0x30 [ 273.620974][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.621042][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.621091][T10091] Modules linked in: [ 273.621134][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.621216][T10091] Tainted: [B]=BAD_PAGE [ 273.621230][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.621261][T10091] Call Trace: [ 273.621282][T10091] [ 273.621304][T10091] dump_stack_lvl+0xe8/0x150 [ 273.621388][T10091] bad_page+0x17f/0x1c0 [ 273.621476][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.621547][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.621662][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.621728][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.621779][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.621893][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.621965][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.622021][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.622105][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.622229][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.622303][T10091] tun_get_user+0x248b/0x4450 [ 273.622389][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.622484][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.622570][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.622660][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.622737][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.622821][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.622899][T10091] ? lock_acquire+0x115/0x350 [ 273.622961][T10091] ? tun_get+0x1c/0x2f0 [ 273.623035][T10091] ? tun_get+0x1c/0x2f0 [ 273.623093][T10091] ? tun_get+0x1c/0x2f0 [ 273.623167][T10091] tun_chr_write_iter+0x113/0x200 [ 273.623240][T10091] vfs_write+0x612/0xba0 [ 273.623304][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.623368][T10091] ? __fget_files+0x2a/0x420 [ 273.623484][T10091] ksys_write+0x150/0x270 [ 273.623568][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.623656][T10091] do_syscall_64+0x166/0x520 [ 273.623731][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.623785][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.623851][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.623911][T10091] RIP: 0033:0x7fc07355ea0e [ 273.623958][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.624004][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.624066][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.624103][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.624123][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.624157][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.624199][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.624264][T10091] [ 273.624410][T10091] BUG: Bad page state in process syz.0.994 pfn:2f0a8 [ 273.624445][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f0a8640 pfn:0x2f0a8 [ 273.624498][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.624571][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.624630][T10091] raw: ffff88802f0a8640 0000000000000001 00000000ffffffff 0000000000000000 [ 273.624662][T10091] page dumped because: page_pool leak [ 273.624691][T10091] page_owner tracks the page as allocated [ 273.624712][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590744056 [ 273.624790][T10091] post_alloc_hook+0x1f9/0x250 [ 273.624839][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.624902][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.624978][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.625044][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.625098][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.625178][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.625252][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.625316][T10091] tun_get_user+0x248b/0x4450 [ 273.625380][T10091] tun_chr_write_iter+0x113/0x200 [ 273.625441][T10091] vfs_write+0x612/0xba0 [ 273.625484][T10091] ksys_write+0x150/0x270 [ 273.625538][T10091] do_syscall_64+0x166/0x520 [ 273.625620][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.625666][T10091] page last free pid 10089 tgid 10088 ts 273543181169 stack trace: [ 273.625707][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.625759][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.625820][T10091] rcu_core+0x926/0x1260 [ 273.625875][T10091] handle_softirqs+0x226/0x860 [ 273.625940][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.626011][T10091] irq_exit_rcu+0x9/0x30 [ 273.626078][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.626140][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.626197][T10091] Modules linked in: [ 273.626241][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.626319][T10091] Tainted: [B]=BAD_PAGE [ 273.626339][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.626374][T10091] Call Trace: [ 273.626382][T10091] [ 273.626389][T10091] dump_stack_lvl+0xe8/0x150 [ 273.626419][T10091] bad_page+0x17f/0x1c0 [ 273.626446][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.626471][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.626509][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.626535][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.626554][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.626605][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.626633][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.626655][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.626692][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.626736][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.626763][T10091] tun_get_user+0x248b/0x4450 [ 273.626799][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.626841][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.626875][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.626902][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.626933][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.626967][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.626999][T10091] ? lock_acquire+0x115/0x350 [ 273.627026][T10091] ? tun_get+0x1c/0x2f0 [ 273.627055][T10091] ? tun_get+0x1c/0x2f0 [ 273.627080][T10091] ? tun_get+0x1c/0x2f0 [ 273.627107][T10091] tun_chr_write_iter+0x113/0x200 [ 273.627135][T10091] vfs_write+0x612/0xba0 [ 273.627158][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.627181][T10091] ? __fget_files+0x2a/0x420 [ 273.627219][T10091] ksys_write+0x150/0x270 [ 273.627241][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.627270][T10091] do_syscall_64+0x166/0x520 [ 273.627299][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.627321][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.627347][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.627368][T10091] RIP: 0033:0x7fc07355ea0e [ 273.627385][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.627405][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.627427][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.627444][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.627459][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.627473][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.627487][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.627514][T10091] [ 273.627524][T10091] BUG: Bad page state in process syz.0.994 pfn:5037c [ 273.627538][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x5037c [ 273.627558][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.627583][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.627611][T10091] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.627657][T10091] page dumped because: page_pool leak [ 273.627705][T10091] page_owner tracks the page as allocated [ 273.627726][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590725091 [ 273.627810][T10091] post_alloc_hook+0x1f9/0x250 [ 273.627871][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.627937][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.628000][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.628062][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.628112][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.628189][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.628273][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.628337][T10091] tun_get_user+0x248b/0x4450 [ 273.628400][T10091] tun_chr_write_iter+0x113/0x200 [ 273.628472][T10091] vfs_write+0x612/0xba0 [ 273.628524][T10091] ksys_write+0x150/0x270 [ 273.628572][T10091] do_syscall_64+0x166/0x520 [ 273.628660][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.628720][T10091] page last free pid 10089 tgid 10088 ts 273543218541 stack trace: [ 273.628762][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.628819][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.628880][T10091] rcu_core+0x926/0x1260 [ 273.628935][T10091] handle_softirqs+0x226/0x860 [ 273.629008][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.629074][T10091] irq_exit_rcu+0x9/0x30 [ 273.629139][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.629225][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.629288][T10091] Modules linked in: [ 273.629332][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.629416][T10091] Tainted: [B]=BAD_PAGE [ 273.629437][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.629470][T10091] Call Trace: [ 273.629491][T10091] [ 273.629512][T10091] dump_stack_lvl+0xe8/0x150 [ 273.629596][T10091] bad_page+0x17f/0x1c0 [ 273.629684][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.629757][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.629861][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.629926][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.629978][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.630083][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.630168][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.630227][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.630312][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.630420][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.630493][T10091] tun_get_user+0x248b/0x4450 [ 273.630612][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.630754][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.630831][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.630902][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.630978][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.631063][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.631127][T10091] ? lock_acquire+0x115/0x350 [ 273.631192][T10091] ? tun_get+0x1c/0x2f0 [ 273.631268][T10091] ? tun_get+0x1c/0x2f0 [ 273.631332][T10091] ? tun_get+0x1c/0x2f0 [ 273.631410][T10091] tun_chr_write_iter+0x113/0x200 [ 273.631484][T10091] vfs_write+0x612/0xba0 [ 273.631549][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.631623][T10091] ? __fget_files+0x2a/0x420 [ 273.631718][T10091] ksys_write+0x150/0x270 [ 273.631780][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.631852][T10091] do_syscall_64+0x166/0x520 [ 273.631940][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.632008][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.632078][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.632120][T10091] RIP: 0033:0x7fc07355ea0e [ 273.632170][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.632215][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.632277][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.632319][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.632361][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.632394][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.632427][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.632499][T10091] [ 273.632712][T10091] BUG: Bad page state in process syz.0.994 pfn:34055 [ 273.632752][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034055000 pfn:0x34055 [ 273.632805][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.632871][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.632922][T10091] raw: ffff888034055000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.632954][T10091] page dumped because: page_pool leak [ 273.632983][T10091] page_owner tracks the page as allocated [ 273.632997][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590706716 [ 273.633080][T10091] post_alloc_hook+0x1f9/0x250 [ 273.633119][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.633183][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.633255][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.633332][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.633401][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.633484][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.633577][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.633649][T10091] tun_get_user+0x248b/0x4450 [ 273.633711][T10091] tun_chr_write_iter+0x113/0x200 [ 273.633774][T10091] vfs_write+0x612/0xba0 [ 273.633817][T10091] ksys_write+0x150/0x270 [ 273.633866][T10091] do_syscall_64+0x166/0x520 [ 273.633937][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.633986][T10091] page last free pid 10089 tgid 10088 ts 273543256971 stack trace: [ 273.634027][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.634080][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.634137][T10091] rcu_core+0x926/0x1260 [ 273.634197][T10091] handle_softirqs+0x226/0x860 [ 273.634263][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.634335][T10091] irq_exit_rcu+0x9/0x30 [ 273.634399][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.634465][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.634520][T10091] Modules linked in: [ 273.634570][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.634654][T10091] Tainted: [B]=BAD_PAGE [ 273.634682][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.634721][T10091] Call Trace: [ 273.634741][T10091] [ 273.634770][T10091] dump_stack_lvl+0xe8/0x150 [ 273.634852][T10091] bad_page+0x17f/0x1c0 [ 273.634929][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.635002][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.635106][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.635169][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.635214][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.635321][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.635387][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.635448][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.635524][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.635648][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.635713][T10091] tun_get_user+0x248b/0x4450 [ 273.635813][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.635893][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.635978][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.636052][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.636139][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.636219][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.636250][T10091] ? lock_acquire+0x115/0x350 [ 273.636270][T10091] ? tun_get+0x1c/0x2f0 [ 273.636297][T10091] ? tun_get+0x1c/0x2f0 [ 273.636321][T10091] ? tun_get+0x1c/0x2f0 [ 273.636348][T10091] tun_chr_write_iter+0x113/0x200 [ 273.636398][T10091] vfs_write+0x612/0xba0 [ 273.636478][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.636569][T10091] ? __fget_files+0x2a/0x420 [ 273.636672][T10091] ksys_write+0x150/0x270 [ 273.636728][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.636801][T10091] do_syscall_64+0x166/0x520 [ 273.636876][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.636937][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.637002][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.637054][T10091] RIP: 0033:0x7fc07355ea0e [ 273.637092][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.637136][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.637199][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.637242][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.637285][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.637318][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.637350][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.637427][T10091] [ 273.637492][T10091] BUG: Bad page state in process syz.0.994 pfn:389b2 [ 273.637533][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880389b2140 pfn:0x389b2 [ 273.637637][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.637710][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.637762][T10091] raw: ffff8880389b2140 0000000000000001 00000000ffffffff 0000000000000000 [ 273.637793][T10091] page dumped because: page_pool leak [ 273.637815][T10091] page_owner tracks the page as allocated [ 273.637843][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590687869 [ 273.637941][T10091] post_alloc_hook+0x1f9/0x250 [ 273.638002][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.638066][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.638117][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.638179][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.638234][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.638317][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.638393][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.638456][T10091] tun_get_user+0x248b/0x4450 [ 273.638525][T10091] tun_chr_write_iter+0x113/0x200 [ 273.638597][T10091] vfs_write+0x612/0xba0 [ 273.638641][T10091] ksys_write+0x150/0x270 [ 273.638693][T10091] do_syscall_64+0x166/0x520 [ 273.638757][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.638819][T10091] page last free pid 10089 tgid 10088 ts 273543295821 stack trace: [ 273.638854][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.638907][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.638968][T10091] rcu_core+0x926/0x1260 [ 273.639023][T10091] handle_softirqs+0x226/0x860 [ 273.639088][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.639146][T10091] irq_exit_rcu+0x9/0x30 [ 273.639218][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.639305][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.639373][T10091] Modules linked in: [ 273.639415][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.639489][T10091] Tainted: [B]=BAD_PAGE [ 273.639503][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.639543][T10091] Call Trace: [ 273.639557][T10091] [ 273.639578][T10091] dump_stack_lvl+0xe8/0x150 [ 273.639671][T10091] bad_page+0x17f/0x1c0 [ 273.639747][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.639820][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.639924][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.639990][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.640041][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.640144][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.640210][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.640264][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.640348][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.640455][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.640528][T10091] tun_get_user+0x248b/0x4450 [ 273.640629][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.640731][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.640815][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.640896][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.640971][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.641055][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.641133][T10091] ? lock_acquire+0x115/0x350 [ 273.641187][T10091] ? tun_get+0x1c/0x2f0 [ 273.641261][T10091] ? tun_get+0x1c/0x2f0 [ 273.641325][T10091] ? tun_get+0x1c/0x2f0 [ 273.641398][T10091] tun_chr_write_iter+0x113/0x200 [ 273.641472][T10091] vfs_write+0x612/0xba0 [ 273.641534][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.641617][T10091] ? __fget_files+0x2a/0x420 [ 273.641710][T10091] ksys_write+0x150/0x270 [ 273.641746][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.641772][T10091] do_syscall_64+0x166/0x520 [ 273.641801][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.641881][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.641962][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.642022][T10091] RIP: 0033:0x7fc07355ea0e [ 273.642066][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.642104][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.642167][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.642202][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.642243][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.642284][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.642317][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.642383][T10091] [ 273.642492][T10091] BUG: Bad page state in process syz.0.994 pfn:83066 [ 273.642533][T10091] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x83066 [ 273.642597][T10091] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.642663][T10091] raw: 00fff00000000000 dead000000000040 ffff88801c7aa000 0000000000000000 [ 273.642732][T10091] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 273.642763][T10091] page dumped because: page_pool leak [ 273.642786][T10091] page_owner tracks the page as allocated [ 273.642807][T10091] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 10091, tgid 10090 (syz.0.994), ts 273590669813 [ 273.642887][T10091] post_alloc_hook+0x1f9/0x250 [ 273.642934][T10091] get_page_from_freelist+0x2209/0x2280 [ 273.643005][T10091] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 273.643068][T10091] __alloc_pages_noprof+0x10/0x100 [ 273.643135][T10091] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 273.643199][T10091] __page_pool_alloc_netmems_slow+0x14f/0x720 [ 273.643285][T10091] skb_pp_cow_data+0xc08/0x18e0 [ 273.643386][T10091] do_xdp_generic+0x78f/0x12f0 [ 273.643474][T10091] tun_get_user+0x248b/0x4450 [ 273.643549][T10091] tun_chr_write_iter+0x113/0x200 [ 273.643613][T10091] vfs_write+0x612/0xba0 [ 273.643666][T10091] ksys_write+0x150/0x270 [ 273.643712][T10091] do_syscall_64+0x166/0x520 [ 273.643813][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.643866][T10091] page last free pid 10089 tgid 10088 ts 273543332975 stack trace: [ 273.643907][T10091] __free_frozen_pages+0xc93/0xd90 [ 273.643961][T10091] tlb_remove_table_rcu+0x85/0x100 [ 273.644023][T10091] rcu_core+0x926/0x1260 [ 273.644091][T10091] handle_softirqs+0x226/0x860 [ 273.644157][T10091] __irq_exit_rcu+0xcb/0x220 [ 273.644222][T10091] irq_exit_rcu+0x9/0x30 [ 273.644285][T10091] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 273.644348][T10091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.644410][T10091] Modules linked in: [ 273.644454][T10091] CPU: 0 UID: 0 PID: 10091 Comm: syz.0.994 Tainted: G B syzkaller #0 PREEMPT(full) [ 273.644521][T10091] Tainted: [B]=BAD_PAGE [ 273.644542][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 273.644582][T10091] Call Trace: [ 273.644632][T10091] [ 273.644661][T10091] dump_stack_lvl+0xe8/0x150 [ 273.644755][T10091] bad_page+0x17f/0x1c0 [ 273.644838][T10091] __free_frozen_pages+0xd37/0xd90 [ 273.644917][T10091] bpf_xdp_frags_shrink_tail+0x4ed/0x800 [ 273.645014][T10091] bpf_xdp_adjust_tail+0x1ce/0x210 [ 273.645077][T10091] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 273.645109][T10091] bpf_prog_run_generic_xdp+0x612/0x1560 [ 273.645216][T10091] do_xdp_generic+0xae1/0x12f0 [ 273.645289][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.645342][T10091] ? do_xdp_generic+0x6d9/0x12f0 [ 273.645424][T10091] ? __pfx_do_xdp_generic+0x10/0x10 [ 273.645531][T10091] ? tun_get_user+0x1d3f/0x4450 [ 273.645606][T10091] tun_get_user+0x248b/0x4450 [ 273.645701][T10091] ? aa_file_perm+0x18b/0x15f0 [ 273.645797][T10091] ? aa_file_perm+0x4ed/0x15f0 [ 273.645873][T10091] ? __pfx_tun_get_user+0x10/0x10 [ 273.645947][T10091] ? __lock_acquire+0x747/0x2de0 [ 273.646028][T10091] ? ref_tracker_alloc+0x172/0x530 [ 273.646119][T10091] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 273.646217][T10091] ? lock_acquire+0x115/0x350 [ 273.646270][T10091] ? tun_get+0x1c/0x2f0 [ 273.646344][T10091] ? tun_get+0x1c/0x2f0 [ 273.646408][T10091] ? tun_get+0x1c/0x2f0 [ 273.646481][T10091] tun_chr_write_iter+0x113/0x200 [ 273.646554][T10091] vfs_write+0x612/0xba0 [ 273.646627][T10091] ? __pfx_vfs_write+0x10/0x10 [ 273.646699][T10091] ? __fget_files+0x2a/0x420 [ 273.646794][T10091] ksys_write+0x150/0x270 [ 273.646848][T10091] ? __pfx_ksys_write+0x10/0x10 [ 273.646920][T10091] do_syscall_64+0x166/0x520 [ 273.647000][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.647060][T10091] ? clear_bhb_loop+0x70/0xc0 [ 273.647127][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.647183][T10091] RIP: 0033:0x7fc07355ea0e [ 273.647225][T10091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.647278][T10091] RSP: 002b:00007fc074402fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.647331][T10091] RAX: ffffffffffffffda RBX: 00007fc0744036c0 RCX: 00007fc07355ea0e [ 273.647373][T10091] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 00000000000000c8 [ 273.647413][T10091] RBP: 00007fc073635888 R08: 0000000000000000 R09: 0000000000000000 [ 273.647446][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.647485][T10091] R13: 00007fc073826038 R14: 00007fc073825fa0 R15: 00007ffdd84eb818 [ 273.647526][T10091] [ 274.952011][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!