last executing test programs: 2.807169021s ago: executing program 0 (id=982): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004f00)={'veth1_to_bridge\x00', &(0x7f0000004dc0)=@ethtool_eeprom={0xc, 0x5, 0x9d8d}}) r2 = socket(0x18, 0x0, 0x2) getpeername$netrom(r2, 0x0, &(0x7f0000000080)=0xffffffffffffff77) r3 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socket(0x26, 0x800, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0x4000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, 0x0, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f00003b1000/0x2000)=nil, 0x2000, 0xc, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r7}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%pS \x00'}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="03009d25dbff0610177a140000004500003014000000000190780a010100ac1408000000907800001400450000000066000004110000ac1414aa7f0000014b86a6038c44d0"], 0x3e) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r10 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) bind$l2tp6(r10, &(0x7f0000000180)={0xa, 0x0, 0x404000, @empty, 0x7cfd1f0f}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xffff}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0xfeb5, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0xfffc]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.767226368s ago: executing program 3 (id=983): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xff, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="010028bd700000ba04eaffff010000000180"], 0x18}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x2c0, 0xffffffff, 0xffffffff, 0x2c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xa, 0x0, 0x9d6, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvlan1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x10, 0x5], 0x0, 0x0, 0x2}}, @common=@icmp6={{0x28}, {0x11, "b6a7"}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3f0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$caif_stream(0x25, 0x1, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x7, 0x2, 0x3, 0x4, 0xffffffffffffffff}, @map_fd, @generic={0x79, 0x0, 0x7, 0xe7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @generic={0x8, 0x5, 0x7, 0x0, 0x7ff}], {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r9, 0x0) 2.341228251s ago: executing program 0 (id=989): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x8c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "04162d4438d68087a2b64c7dbc85c0d9c11281179e20c25774af3fca7617e8886001e5ef9ecb25cf59fffaef0971fc993c55a0d79559e77ea1f2ef3a48c02ff110"}]}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.19877611s ago: executing program 2 (id=992): close(0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x2, {0x1, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 2.183486644s ago: executing program 0 (id=993): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00001a000000000000000000000400000000002ad5e4983fcddb41aa9f804559bf3a3239fc663d83fbe8f01442e8ba273bae18ab1f34f178d06d0b37bdf9ab0ead3edc16bd6079f315ca2ccecf9dc8eb63", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) getsockopt(r1, 0x400000000000003a, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000c96fde76c5099b072ece640018110000fbbaf9", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff6d0fb702000008000000b70300000800000085000000060000003500f4ff00000000180100002020702500000000002020207b1af8ff00000000bfa100000000100007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00001a000000000000000000000400000000002ad5e4983fcddb41aa9f804559bf3a3239fc663d83fbe8f01442e8ba273bae18ab1f34f178d06d0b37bdf9ab0ead3edc16bd6079f315ca2ccecf9dc8eb63", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket(0x10, 0x2, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) (async) getsockopt(r1, 0x400000000000003a, 0x7, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000c96fde76c5099b072ece640018110000fbbaf9", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff6d0fb702000008000000b70300000800000085000000060000003500f4ff00000000180100002020702500000000002020207b1af8ff00000000bfa100000000100007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b70200000300000085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) 2.06430612s ago: executing program 4 (id=995): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r1, r2, 0x25, 0x2, @val=@netkit}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000002940)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, 'Sk>', 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x3, 0x0, 0x0, 0x1, 0x6, 0x10}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x3, {{0xe, 0x2, 0xe, 0x3, 0x1, 0x2, 0x7, 0x5}, 0x2, {0x0, 0x4994, 0x0, 0x7, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 1.948746289s ago: executing program 4 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa420800490000240001efe000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1.908815133s ago: executing program 1 (id=997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='snd_soc_dapm_connected\x00', r10, 0x0, 0xc57}, 0x18) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r12 = socket(0x10, 0x3, 0x0) close(r11) r13 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x9, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x4000000000000267, 0x0, 0x10, 0x59dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x20044080) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0xe}, {0x2, 0xb}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x40004) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.810936193s ago: executing program 3 (id=998): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000400)={r3, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x1}, 0x8) 1.711507898s ago: executing program 3 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 1.709330781s ago: executing program 4 (id=1000): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000aa3e76c015000000000040000008000000c31030000100000095000000000000005bcf09e5117806a4976a84102e9565c5127944f240c9cfe59f66aad648ba5bd49c4f8f298fddf0ef8da8de249eb3696e05cc71db890a305e823053d1006563"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000aa3e76c015000000000040000008000000c31030000100000095000000000000005bcf09e5117806a4976a84102e9565c5127944f240c9cfe59f66aad648ba5bd49c4f8f298fddf0ef8da8de249eb3696e05cc71db890a305e823053d1006563"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0xca, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x164, 0x18, 0x713, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x56, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x50, 0x60, "210466d38547aa140db9"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r4, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) (async) write$tun(r1, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631c4cd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712323409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e6"}}}}, 0xfce) write$cgroup_pid(r0, &(0x7f0000000080)=0xffffffffffffffff, 0x12) (async) write$cgroup_pid(r0, &(0x7f0000000080)=0xffffffffffffffff, 0x12) syz_emit_ethernet(0x92, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x84, 0x0, 0x0, 0x8, 0x6, 0x0, @multicast2, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack={0x5, 0x1a, [0x8, 0x3, 0x72, 0x8, 0x7, 0x9]}, @timestamp={0x8, 0xa, 0x7, 0x8a}, @fastopen={0x22, 0x3, "e2"}, @exp_fastopen={0xfe, 0x14, 0xf989, "079d22d6961c5af4c2cc061f44954a96"}, @fastopen={0x22, 0x8, "da0647316a11"}, @mptcp=@capable={0x1e, 0xc, 0x4, 0x1, 0x40, 0x1}]}}}}}}}, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c, 0x800) (async) r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c, 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@rand_addr, @dev, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r7, 0x29, 0xf6, 0x2, 0xffffffff, 0x20, @remote, @private0, 0x80, 0x7800, 0x0, 0xff}}) 1.404957872s ago: executing program 0 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000000000000c000000070000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4], 0x31) (async, rerun: 32) r6 = gettid() (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES8=0x0, @ANYBLOB="a15f6c1cd83c7582f432d332e026dc6873020b07862f024e3f181c24f587179cb2a9191df6725c9049b66b675a275213fdaf10c4deffda094e82e0884c57695fdb3c8dcd8535ecf201e327719b86e45fa7a0a9c6c064b7d744b66db31630c4081a848a0b46804d73b61901e7d797d229a4d988d08c", @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4c003}, 0x0) (async, rerun: 64) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r6) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_IF_ID={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x430}]}, 0x150}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) (async) write$tun(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x10a9) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 32) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0, 0x26}, 0x28) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb97907081175f37538e486dd"], 0xfdef) (async) r11 = accept(r0, &(0x7f00000004c0)=@caif=@dbg, &(0x7f0000000100)=0x80) (async) r12 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r12, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff}, 0xc) (async) writev(r12, &(0x7f0000000580)=[{&(0x7f0000000240)="476a94", 0x3}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}, 0x0, 0x0, 0x1a, 0x0, "b4a7e4bddf731630d97940d70a9a218e26b1e058006c5a417327d5ea994ef933d6f92334262c03d55245ebfbcec5b18509f791d9dd137fae7e465a0312b899ebcef494793aa6fc391c9bdd2c08d228c4"}, 0xd8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ppoll(&(0x7f0000000540)=[{r0, 0xb000}, {r10, 0x80}, {0xffffffffffffffff, 0x8000}, {r11, 0x1000}, {0xffffffffffffffff, 0x4250}], 0x5, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0)={[0x9]}, 0x8) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0xfdef) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0110c9000000fedbdf2501000000000000000941000000140018000007327564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x40000000) 1.404067692s ago: executing program 1 (id=1002): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f00000004c0)=@nl, 0x80, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003480)=""/224, 0xe0}, 0x28}], 0x5, 0x60, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @empty, [0xffffffff, 0xff000000, 0xffffffff, 0x1fe], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'vlan0\x00', 'veth1_macvtap\x00', {0xff}, {}, 0x0, 0x76, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000100)="63d1ed8e64dc3f6d000000003386", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) (async, rerun: 64) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d4) (rerun: 64) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xffffffff, 0x4e, 0x567}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r8, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r8, 0x4, 0x70bd25, 0xaadc, {}, ["", ""]}, 0x14}}, 0x4040801) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0x8000, 0x5, {{0x37, 0x4, 0x0, 0x4, 0xdc, 0x64, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0xf0, [@remote]}, @ssrr={0x89, 0xf, 0x28, [@dev={0xac, 0x14, 0x14, 0x9}, @rand_addr=0x64010100, @empty]}, @ssrr={0x89, 0x23, 0xb2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3e}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp={0x44, 0x2c, 0x3e, 0x0, 0x8, [0xb0a, 0x207, 0x0, 0x9, 0x362, 0x951, 0x4, 0x9, 0xff, 0x9]}, @timestamp_prespec={0x44, 0x34, 0xc5, 0x3, 0x5, [{@private=0xa010102, 0x8}, {@broadcast, 0x690}, {@rand_addr=0x64010100, 0xe}, {@private=0xa010100, 0x91}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0x56, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x2}, {@remote, 0x5}, {@multicast2}, {@empty, 0x1}, {@private=0xa010100, 0x9}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)=@getqdisc={0x40, 0x26, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x3, 0xa}, {0x9}, {0x9, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000040)) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000240)=0x4, 0x4) (async) sendto$inet(r4, &(0x7f0000000140)="8b756d278444abbe1079e63e016ffb9bd49a43980386d51b043595706b28f4f5577cb7a297a4b2cfe410264ec88066548fee394a051fd66b21967f88aecb78d09ef9daf3cc750785e44bac4d1a76f6", 0x4f, 0x1, &(0x7f0000000200)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.403738711s ago: executing program 3 (id=1003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendto$netrom(r1, &(0x7f0000000000)="160abc17775c8c317d1121f7bd7e1b4eeaaddcaf2580a97d2adecc07bbb27882c70208ac46ec78dd0e84a6b1a694c7fcabf11b4e753d27872941d96159b45ce8463f2e90e510129c45f5872e2f12bf33f1b8a2cd541fa55ec3b5476fef4327c94abe0949defb74b56e171091c093ff0a881e5077ec9769461c9cabf2a37bd167a011474c555522d62bce41bf0368a5a43dab02f3d6f2475d5152baa4552da7a2eef2dfc8f1dcfe958f1f4557096ba65b365240e74dc417e8515953d6e958530c6609077b4843fad034c70b2806c004", 0xcf, 0x80, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x1032, 0xffffffffffffffff, 0x21d67000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) sendto$netrom(r1, &(0x7f0000000000)="160abc17775c8c317d1121f7bd7e1b4eeaaddcaf2580a97d2adecc07bbb27882c70208ac46ec78dd0e84a6b1a694c7fcabf11b4e753d27872941d96159b45ce8463f2e90e510129c45f5872e2f12bf33f1b8a2cd541fa55ec3b5476fef4327c94abe0949defb74b56e171091c093ff0a881e5077ec9769461c9cabf2a37bd167a011474c555522d62bce41bf0368a5a43dab02f3d6f2475d5152baa4552da7a2eef2dfc8f1dcfe958f1f4557096ba65b365240e74dc417e8515953d6e958530c6609077b4843fad034c70b2806c004", 0xcf, 0x80, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x1032, 0xffffffffffffffff, 0x21d67000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) (async) 1.351757187s ago: executing program 2 (id=1004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1818000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) 1.306330362s ago: executing program 1 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x4, 0x10}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r8}]}}]}, 0x38}}, 0x4000080) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newchain={0xd8, 0x64, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0x8}, {0x0, 0x2}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x10}, @filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x80}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xf8}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff, 0xffffffff, 0xff]}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$kcm(0x11, 0x3, 0x0) (async) r14 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r14, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r14, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r14, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r14, &(0x7f0000001c00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001440)=ANY=[@ANYBLOB="18060000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7401028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040038d7000008000600", @ANYRES32=r6, @ANYRES64=0x0, @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRESHEX=r2, @ANYRESHEX=r9, @ANYRES32=r10, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYBLOB="54e6e073013da2fd34047ff35fbd20b45826c14adf6c7c8280278ee0dea3c7a440fb9b4b9c6c1c79bfc447c50010530518761d39182ffbebc091fbd238406e817b2970779e0beacddb712f400bc80753caf221f6192c259c6744e2827be57f4dbc94d1e04d5364814e86f18a6a26528666fae29c22a433670e89769ea8aea5b51044", @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="2c0102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000080087f0c0000002d000d024000000005004802050000005f0106400800000000012f030b000000010000060700000009000802e300000008000100", @ANYRES32=r6, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff0f00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRESDEC=r5, @ANYBLOB="84000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ff07000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYRES8=r7, @ANYRESHEX=r4, @ANYBLOB="ec00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040009000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e001000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004007202000008000100"/64, @ANYRES32=r10, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB], 0x618}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004811) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 1.1739673s ago: executing program 0 (id=1006): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r1, r2, 0x25, 0x2, @val=@netkit}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000002940)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, 'Sk>', 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x3, 0x0, 0x0, 0x1, 0x6, 0x10}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x3, {{0xe, 0x2, 0xe, 0x3, 0x1, 0x2, 0x7, 0x5}, 0x2, {0x0, 0x4994, 0x0, 0x7, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 1.164519012s ago: executing program 2 (id=1007): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x7, 0x1000}, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r2 = socket(0xa, 0x3, 0x87) sendmsg(r2, &(0x7f0000000540)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x809, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f00000005c0)='r', 0x1}], 0x2}, 0x0) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000034002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB="9754d562", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="82ff0800", @ANYRES32, @ANYBLOB="08001b"], 0x5c}}, 0x0) 1.124287492s ago: executing program 4 (id=1008): r0 = socket(0x23, 0x5, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x200408c0) (async) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x200408c0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x30000000}) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(r4) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) close(r1) (async) close(r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x9, 0x800, 0x1, @local, 'ip6gretap0\x00'}) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x9, 0x800, 0x1, @local, 'ip6gretap0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffffff, 0xff000000, 0xffffffff], [0x0, 0xffffffff, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe, 0x0, 0x23}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x4, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1.050881078s ago: executing program 0 (id=1009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000002c0)=0x10) connect$phonet_pipe(r1, &(0x7f0000000340)={0x23, 0x5, 0x6, 0x4e}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7, 0x8, 0x3, 0x401, {{0x23, 0x4, 0x2, 0x3f, 0x8c, 0x66, 0x0, 0x6, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, {[@rr={0x7, 0x27, 0x4a, [@loopback, @broadcast, @broadcast, @empty, @multicast2, @broadcast, @multicast2, @loopback, @loopback]}, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x7, 0x7, "aef464adf9"}, {0x1, 0xa, "5b98b244e980202c"}, {0x7, 0x5, "6695b1"}, {0x1, 0x10, "3d8bc5b9e98c79aceb1859184aca"}, {0x0, 0xa, "36b52d0a96519693"}]}, @cipso={0x86, 0x1a, 0x3, [{0x1, 0xc, "026df51b783e29819b08"}, {0x1, 0x8, "fbc6d62eaedd"}]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x1, 0x6, 0x4c60, 0x2200, r0, 0x55f6, '\x00', r3, r4, 0x2, 0x1, 0x5, 0xf}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2, 0x0, 0x4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a320000000005000400000000001400078006001500050000000800114000000000050005000a000000050001000600000010000300686173683a6970"], 0x5c}}, 0x84000) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000309000000000000004000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 701.219275ms ago: executing program 3 (id=1010): getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@typedef={0x10, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x0, 0x30, 0x30, 0x0, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/170, 0x2f, 0xaa, 0x0, 0x2}, 0x28) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x1000}], 0x1) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r0, 0x549bd000) (async, rerun: 64) r2 = socket(0x26, 0x1, 0x401) (rerun: 64) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44d408d94effd3d1) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001300)={0x0, 0xb, 0x4, [0x9, 0x54, 0x67dc, 0x100]}, &(0x7f0000001340)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001380)={r3, 0x10}, 0x8) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001500)={r3, @in6={{0xa, 0x4e24, 0xb350, @private2, 0x1ff}}, 0x3, 0xfffa}, &(0x7f00000015c0)=0x90) (async, rerun: 32) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000001600), &(0x7f0000001640)=0xc) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x17, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001740)='GPL\x00', 0x4, 0xb9, &(0x7f0000001780)=""/185, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001880)={0x5, 0xb, 0x4, 0x800}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000018c0)=[0xffffffffffffffff], &(0x7f0000001900)=[{0x4, 0x1, 0xd, 0x6}, {0x5, 0x3, 0x7, 0xa}, {0x1, 0x3, 0x5, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={r5, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000001a40)=[0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000001ac0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0xb, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) (async) close(r1) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)=@bridge_newvlan={0x28, 0x70, 0x400, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x44804) r8 = accept4$rose(r2, 0x0, &(0x7f0000001e00), 0x80000) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x30, r9, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0xb}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x738eb584ed987964}, 0x4) (async, rerun: 64) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000001f80)=0x1a) (rerun: 64) setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000001fc0)="7583509cd4903216f2ce29b27ad38354e5fdf1d7b9453525597da55f15ce32f1c682ce8ada1e3a37c2ff3e97a8b1b49810b65f06389f1e697018ca896b93cd41c2028cd668c4f5d71e1e190a6476e802839613bf1af951e0", 0x58) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000002040)={@mcast1}, &(0x7f0000002080)=0x14) ioctl$sock_ifreq(r8, 0x8925, &(0x7f00000020c0)={'ip6gre0\x00', @ifru_flags=0x1}) (async) socket$inet6(0xa, 0x1, 0x2) (async) r11 = gettid() sendmsg$netlink(r7, &(0x7f00000025c0)={&(0x7f0000002100)=@kern={0x10, 0x0, 0x0, 0x28002002}, 0xc, &(0x7f0000002400)=[{&(0x7f0000002140)={0x2c0, 0x14, 0x8, 0x70bd29, 0x25dfdbfc, "", [@typed={0xf6, 0x37ea, 0x0, 0x0, @binary="6e50a882bd6ff4ee211a9f75a31712b012bab1e061f1c07ae7e8a8af1a732ee0e1488d9fd5315dc41e74698909b90af3367aa4e3ae9b23268e95b2de0f5092f32e3b54f20218568e6ce84f00e4d9bb25818c857e4d190af9753e86fe7e36406e967c880b26c16b43ae4ae971fda7c84f0d3fdb9deb28fce9dc10a98b331e5444494087bfc7867db8c12771b0a0db164810187a7480775c36c27e3130f44c05ccf9049b05cd49eb242abb2a319d2b9bea05133683c060036f715f01224f971376669e8d6683572f38aefd6642530a4a00b889f1d963d075ad92e0046d6146e66fd2958eec52168642a36a5e9f0ded36f413b1"}, @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xd2, 0x7a, 0x0, 0x1, [@generic="4b0a71f19877ac90b62f7ff363838ca3bf9116eae1098a742494ac666b41e6e44a5db92d5e68affd703300618a0c371ff6f5279168809e7a3c45b75c42e7966f179b9f3a5b71a41720559e16a0cabb1260125993d403e4c64daf31fd1b8b78152e8cedb2639c44bce083da1b88ef75f20187135ff1d025edc09555deb18c9bfaa35e0eb9b18e094b439c45abe763db55e0b9c92f0d912dbb3cfa1e509a6465cf56649769478f4c77fa93801f09bb49b5f4698a1f8543f6172f8b595202b08fcc6a5f8b83614838716a826225aa80"]}, @generic="b4ff26dab6bce79cdc37206346ddb583b52feb9ac2342c7b66d17ea846747dc0ae6050f733ce441c60583b7840f1868587a4055614e9b90ea17e469ddda44ba7e840bce4260cfaf9badaf82ef97e02b81552bf80ccdb4499351084b6a06c26e92a01671a196542bdc8f949ea07133230522dda010a45f3a59c59d905c0bf1d5daa505fc531bfca412db37bcecc11f2bb84957dccaef65f4b714a6b5a5dbb2cc3e3c1606330490ce4d592e3ab", @typed={0x8, 0x131, 0x0, 0x0, @u32=0x2}, @typed={0x14, 0xa0, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@private0}]}, 0x2c0}], 0x1, &(0x7f0000002540)=[@rights={{0x18, 0x1, 0x1, [r1, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x78, 0x4000000}, 0x19) 608.343054ms ago: executing program 4 (id=1011): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x884) 459.850683ms ago: executing program 1 (id=1012): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000000)=0x3, 0x4) 281.259408ms ago: executing program 2 (id=1013): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x901040, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0xc223, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@ipv6_delrule={0x38, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000190081054e81f782db4cb904022008000300000000000007", 0x1c}], 0x1}, 0x14) 204.154184ms ago: executing program 3 (id=1014): close(0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x2, {0x1, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 162.85235ms ago: executing program 2 (id=1015): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xd, 0x31, 0xffffffffffffffff, 0x7c5c7000) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x10, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) 101.934356ms ago: executing program 4 (id=1016): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r2) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (rerun: 32) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x20000010) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) (async) socket(0x10, 0x803, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110b4000000000095000000000000002ccfae17479c54795fb11e6308bc53c9f8f88e0509240b51202d942ba1f18612b9f1e0943d410b4d642a1605c61c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 100.781796ms ago: executing program 1 (id=1017): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="181f000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) 19.80348ms ago: executing program 1 (id=1018): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0x5) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r5, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x1000000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)={r3, 0xfff, 0x0, "8eabb96479ee85623ef4e8e1c0780e7ab3fec54139af993d60c38d5e3f56e5eee504e161dcb75f9eabbcba4215132e7552813231d805e6ee6295bce6df89271e114a0583d8f67665b8eb367b92b67e48a1000bc203a2f8c3c2c9b85fb5c44e349cb36304bc8d714c70db8d1277dccb50b6d1d73dc6f006bd7415028f924415d19aa11712bae88baed371"}) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c0400000000000000160af36514001ac00400020208000200030000000400000000b556a705a51e618294ff0051f60a84c9", 0x45}, {&(0x7f0000000100)="dc91a0cda7e4b4e2f22c4bd4fcd49666371f24e1e0cc0100190f55c03aedd2a4b20a910000000000cdfc5ddb0ebe0b6321ed0abce37a5f0a3038280fdf2f1e8ce6486204599ec98215053ea75aa534b6856d3467969994188f2cb09ffd2a9e2b168e4174c9ec4f47443099fb856fc97db1f85768145b9a87ee620ef763915de0412be54728fc6e362570c390e26d329589a2a648b1ad48234ea62c5cb2e48bbd7414cd9f3c83f78c72fb80bbf1e3e6b1b72cc896c1b556c422bd39fee163802086b8062ecc1c8339", 0xc8}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0xc4) 0s ago: executing program 2 (id=1019): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r1, r2, 0x25, 0x2, @val=@netkit}, 0x1c) syz_emit_ethernet(0x11dc0, &(0x7f0000002940)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x2, 0x6, 'Sk>', 0x44, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x3, 0x0, 0x0, 0x1, 0x6, 0x10}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x3, {{0xe, 0x2, 0xe, 0x3, 0x1, 0x2, 0x7, 0x5}, 0x2, {0x0, 0x4994, 0x0, 0x7, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts. [ 65.464553][ T5812] cgroup: Unknown subsys name 'net' [ 65.558142][ T5812] cgroup: Unknown subsys name 'cpuset' [ 65.567062][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.010721][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.527985][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.566623][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.588756][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.589759][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.599628][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.604191][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.612047][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.625857][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.625880][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.635486][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.640255][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.654688][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.656271][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.662846][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.669223][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.678077][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.686039][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.691624][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.697892][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.706002][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.711896][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.717641][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.725781][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.732248][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.740727][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.425348][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.500961][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 70.591644][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.602914][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 70.720442][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.793871][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.801701][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.809198][ T5839] bridge_slave_0: entered allmulticast mode [ 70.816378][ T5839] bridge_slave_0: entered promiscuous mode [ 70.845884][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.853013][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.860329][ T5823] bridge_slave_0: entered allmulticast mode [ 70.867427][ T5823] bridge_slave_0: entered promiscuous mode [ 70.874816][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.882103][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.889996][ T5839] bridge_slave_1: entered allmulticast mode [ 70.896976][ T5839] bridge_slave_1: entered promiscuous mode [ 70.941245][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.948475][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.956086][ T5823] bridge_slave_1: entered allmulticast mode [ 70.963032][ T5823] bridge_slave_1: entered promiscuous mode [ 71.016580][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.066282][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.100992][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.108229][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.115967][ T5824] bridge_slave_0: entered allmulticast mode [ 71.122948][ T5824] bridge_slave_0: entered promiscuous mode [ 71.143554][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.163216][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.170769][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.178177][ T5831] bridge_slave_0: entered allmulticast mode [ 71.185438][ T5831] bridge_slave_0: entered promiscuous mode [ 71.193358][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.200918][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.208267][ T5824] bridge_slave_1: entered allmulticast mode [ 71.215845][ T5824] bridge_slave_1: entered promiscuous mode [ 71.235262][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.248172][ T5839] team0: Port device team_slave_0 added [ 71.265897][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.273068][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.280356][ T5831] bridge_slave_1: entered allmulticast mode [ 71.287404][ T5831] bridge_slave_1: entered promiscuous mode [ 71.307716][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.315050][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.322326][ T5828] bridge_slave_0: entered allmulticast mode [ 71.329754][ T5828] bridge_slave_0: entered promiscuous mode [ 71.338780][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.341368][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.345951][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.354925][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.359832][ T5828] bridge_slave_1: entered allmulticast mode [ 71.373008][ T5828] bridge_slave_1: entered promiscuous mode [ 71.384204][ T5839] team0: Port device team_slave_1 added [ 71.450277][ T5823] team0: Port device team_slave_0 added [ 71.458552][ T5823] team0: Port device team_slave_1 added [ 71.477747][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.524193][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.536759][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.549528][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.560609][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.567732][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.593900][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.606684][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.613635][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.639574][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.667684][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.690282][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.709036][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.716214][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.742359][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.800034][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.808210][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.809049][ T5147] Bluetooth: hci4: command tx timeout [ 71.835427][ T5845] Bluetooth: hci0: command tx timeout [ 71.840487][ T5838] Bluetooth: hci3: command tx timeout [ 71.845657][ T5845] Bluetooth: hci1: command tx timeout [ 71.851089][ T52] Bluetooth: hci2: command tx timeout [ 71.862224][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.885818][ T5824] team0: Port device team_slave_0 added [ 71.904120][ T5828] team0: Port device team_slave_0 added [ 71.919441][ T5831] team0: Port device team_slave_0 added [ 71.927088][ T5824] team0: Port device team_slave_1 added [ 71.945466][ T5828] team0: Port device team_slave_1 added [ 71.953817][ T5831] team0: Port device team_slave_1 added [ 71.990716][ T5839] hsr_slave_0: entered promiscuous mode [ 71.997168][ T5839] hsr_slave_1: entered promiscuous mode [ 72.050255][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.057268][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.083326][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.108069][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.115157][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.141138][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.152798][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.160095][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.186103][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.210588][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.217646][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.243830][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.268584][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.275682][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.302534][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.314114][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.321627][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.348173][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.377068][ T5823] hsr_slave_0: entered promiscuous mode [ 72.383347][ T5823] hsr_slave_1: entered promiscuous mode [ 72.389698][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 72.395539][ T5823] Cannot create hsr debugfs directory [ 72.522199][ T5824] hsr_slave_0: entered promiscuous mode [ 72.530304][ T5824] hsr_slave_1: entered promiscuous mode [ 72.536907][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 72.542771][ T5824] Cannot create hsr debugfs directory [ 72.556541][ T5828] hsr_slave_0: entered promiscuous mode [ 72.562824][ T5828] hsr_slave_1: entered promiscuous mode [ 72.569182][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 72.575320][ T5828] Cannot create hsr debugfs directory [ 72.652040][ T5831] hsr_slave_0: entered promiscuous mode [ 72.658456][ T5831] hsr_slave_1: entered promiscuous mode [ 72.664512][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 72.670866][ T5831] Cannot create hsr debugfs directory [ 73.113479][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.126302][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.137662][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.150070][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.214497][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.233338][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.258691][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.269698][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.342647][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.354552][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.377606][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.389511][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.489624][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.500485][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.511171][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.522575][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.561391][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.671624][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.681205][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.693018][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.703848][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.714632][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.760546][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.767817][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.787713][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.794998][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.808368][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.859469][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.886650][ T5838] Bluetooth: hci3: command tx timeout [ 73.892092][ T52] Bluetooth: hci2: command tx timeout [ 73.895662][ T5834] Bluetooth: hci1: command tx timeout [ 73.898185][ T52] Bluetooth: hci0: command tx timeout [ 73.909756][ T5147] Bluetooth: hci4: command tx timeout [ 73.912848][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.926660][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.958022][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.965197][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.999259][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.021619][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.028796][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.051362][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.119406][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.160970][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.168142][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.180301][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.187469][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.209625][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.258835][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.266062][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.311377][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.318553][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.341987][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.396364][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.453870][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.470278][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.495786][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.563250][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.570495][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.617476][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.624654][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.644020][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.657155][ T5839] veth0_vlan: entered promiscuous mode [ 74.750451][ T5839] veth1_vlan: entered promiscuous mode [ 74.869734][ T5824] veth0_vlan: entered promiscuous mode [ 74.908566][ T5824] veth1_vlan: entered promiscuous mode [ 74.924657][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.944613][ T5839] veth0_macvtap: entered promiscuous mode [ 74.980501][ T5839] veth1_macvtap: entered promiscuous mode [ 75.053887][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.098180][ T5824] veth0_macvtap: entered promiscuous mode [ 75.118986][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.148171][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.174464][ T5824] veth1_macvtap: entered promiscuous mode [ 75.207899][ T3468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.219576][ T3468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.241533][ T3468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.253040][ T3468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.270882][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.288521][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.318907][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.370744][ T3468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.381694][ T3468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.407420][ T3468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.416464][ T3468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.462563][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.470955][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.504294][ T5823] veth0_vlan: entered promiscuous mode [ 75.561904][ T5831] veth0_vlan: entered promiscuous mode [ 75.570237][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.580803][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.589680][ T5823] veth1_vlan: entered promiscuous mode [ 75.640884][ T5831] veth1_vlan: entered promiscuous mode [ 75.654179][ T5828] veth0_vlan: entered promiscuous mode [ 75.674512][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.691518][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.701213][ T5828] veth1_vlan: entered promiscuous mode [ 75.707385][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.784967][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.791870][ T5823] veth0_macvtap: entered promiscuous mode [ 75.792794][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.836921][ T5831] veth0_macvtap: entered promiscuous mode [ 75.864656][ T5823] veth1_macvtap: entered promiscuous mode [ 75.896368][ T5831] veth1_macvtap: entered promiscuous mode [ 75.931900][ T5828] veth0_macvtap: entered promiscuous mode [ 75.951200][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.966767][ T52] Bluetooth: hci0: command tx timeout [ 75.972228][ T52] Bluetooth: hci4: command tx timeout [ 75.975435][ T5147] Bluetooth: hci3: command tx timeout [ 75.978845][ T52] Bluetooth: hci1: command tx timeout [ 75.982975][ T5147] Bluetooth: hci2: command tx timeout [ 76.001530][ T5828] veth1_macvtap: entered promiscuous mode [ 76.021657][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.030541][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.043515][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.067723][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.086170][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.095014][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.109929][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.118999][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.136174][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.146830][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.162480][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.178531][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.200598][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.276112][ T3468] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.298410][ T3468] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.303123][ T5949] Zero length message leads to an empty skb [ 76.309915][ T3468] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.327148][ T5949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.337651][ T3468] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.415634][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.423478][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.466862][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.476106][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.819299][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.876947][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.982656][ T5954] sctp: [Deprecated]: syz.3.6 (pid 5954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.982656][ T5954] Use struct sctp_sack_info instead [ 77.028151][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.064901][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.110635][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.174740][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.367153][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.377608][ T5963] trusted_key: syz.0.1 sent an empty control message without MSG_MORE. [ 77.407433][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.605995][ T5967] "syz.1.2" (5967) uses obsolete ecb(arc4) skcipher [ 77.763997][ T5982] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.801407][ T5982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.834610][ T5982] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.858407][ T5987] warning: `syz.1.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.871356][ T5981] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.901980][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.913994][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 77.929717][ T5981] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10'. [ 78.037150][ T5990] Bluetooth: MGMT ver 1.23 [ 78.047292][ T5834] Bluetooth: hci3: command tx timeout [ 78.047318][ T52] Bluetooth: hci4: command tx timeout [ 78.052699][ T5834] Bluetooth: hci0: command tx timeout [ 78.052728][ T5834] Bluetooth: hci2: command tx timeout [ 78.071377][ T5147] Bluetooth: hci1: command tx timeout [ 78.300902][ T6001] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.324621][ T6003] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14'. [ 78.353053][ T6001] ªªªªªª: renamed from wg2 (while UP) [ 78.417396][ T6005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 78.588802][ T6003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.648876][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'. [ 78.789537][ T6003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.794086][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.878949][ T6028] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 78.983359][ T6003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.006847][ T6032] netlink: 36 bytes leftover after parsing attributes in process `syz.3.26'. [ 79.188962][ T6003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.328300][ T6034] delete_channel: no stack [ 79.778226][ T6069] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 80.042681][ T6082] syzkaller0: entered promiscuous mode [ 80.066494][ T6082] syzkaller0: entered allmulticast mode [ 80.258239][ T6096] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2771 [ 80.626134][ T6105] syzkaller0: entered promiscuous mode [ 80.631665][ T6105] syzkaller0: entered allmulticast mode [ 80.752949][ T6117] bond1 (unregistering): Released all slaves [ 80.800539][ T6121] netlink: 'syz.2.48': attribute type 13 has an invalid length. [ 80.926819][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 81.044453][ T6129] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 81.081897][ T6129] 0ªî{X¹¦: entered allmulticast mode [ 81.137085][ T6129] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 81.540315][ T6153] __nla_validate_parse: 6 callbacks suppressed [ 81.540331][ T6153] netlink: 56 bytes leftover after parsing attributes in process `syz.3.54'. [ 81.816964][ T6154] batadv_slave_1: entered promiscuous mode [ 81.875126][ T6154] batadv_slave_1: left promiscuous mode [ 82.522302][ T6196] bond1: option xmit_hash_policy: invalid value (10) [ 82.577916][ T6196] bond1 (unregistering): Released all slaves [ 83.194520][ T6195] netlink: 'syz.4.65': attribute type 6 has an invalid length. [ 83.301916][ T6228] FAULT_INJECTION: forcing a failure. [ 83.301916][ T6228] name failslab, interval 1, probability 0, space 0, times 1 [ 83.338657][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 83.383503][ T6228] CPU: 1 UID: 0 PID: 6228 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(full) [ 83.383527][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.383544][ T6228] Call Trace: [ 83.383552][ T6228] [ 83.383561][ T6228] dump_stack_lvl+0x189/0x250 [ 83.383600][ T6228] ? __pfx____ratelimit+0x10/0x10 [ 83.383621][ T6228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.383643][ T6228] ? __pfx__printk+0x10/0x10 [ 83.383669][ T6228] ? __pfx___might_resched+0x10/0x10 [ 83.383687][ T6228] ? fs_reclaim_acquire+0x7d/0x100 [ 83.383709][ T6228] should_fail_ex+0x414/0x560 [ 83.383739][ T6228] should_failslab+0xa8/0x100 [ 83.383760][ T6228] __kmalloc_node_noprof+0xd2/0x800 [ 83.383783][ T6228] ? alloc_slab_obj_exts+0x3e/0x100 [ 83.383812][ T6228] alloc_slab_obj_exts+0x3e/0x100 [ 83.383834][ T6228] allocate_slab+0x152/0x350 [ 83.383857][ T6228] ___slab_alloc+0xf56/0x1990 [ 83.383879][ T6228] ? fs_reclaim_acquire+0x7d/0x100 [ 83.383896][ T6228] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 83.383923][ T6228] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 83.383945][ T6228] __slab_alloc+0x65/0x100 [ 83.383968][ T6228] __kvmalloc_node_noprof+0x6ba/0x910 [ 83.383994][ T6228] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 83.384024][ T6228] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 83.384061][ T6228] __nf_unregister_net_hook+0x4f6/0x700 [ 83.384095][ T6228] nf_unregister_net_hooks+0xcb/0x140 [ 83.384121][ T6228] nf_ct_netns_put+0x36d/0x520 [ 83.384143][ T6228] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 83.384167][ T6228] nft_connlimit_destroy+0x5a/0xb0 [ 83.384188][ T6228] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 83.384209][ T6228] nft_set_elem_expr_setup+0x5e7/0x830 [ 83.384242][ T6228] nf_tables_newsetelem+0x24b1/0x4330 [ 83.384330][ T6228] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 83.384354][ T6228] ? __lock_acquire+0xab9/0xd20 [ 83.384397][ T6228] ? nla_validate_array+0xfc/0x260 [ 83.384451][ T6228] ? __pfx___nla_validate_parse+0x10/0x10 [ 83.384476][ T6228] ? __lock_acquire+0xab9/0xd20 [ 83.384509][ T6228] ? nfnl_pernet+0x23/0x240 [ 83.384539][ T6228] ? __nla_parse+0x40/0x60 [ 83.384562][ T6228] nfnetlink_rcv+0x11d9/0x2590 [ 83.384628][ T6228] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 83.384702][ T6228] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 83.384727][ T6228] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.384769][ T6228] netlink_unicast+0x82f/0x9e0 [ 83.384799][ T6228] ? __pfx_netlink_unicast+0x10/0x10 [ 83.384821][ T6228] ? netlink_sendmsg+0x642/0xb30 [ 83.384837][ T6228] ? skb_put+0x11b/0x210 [ 83.384857][ T6228] netlink_sendmsg+0x805/0xb30 [ 83.384885][ T6228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.384909][ T6228] ? aa_sock_msg_perm+0xf1/0x1d0 [ 83.384934][ T6228] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 83.384951][ T6228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.384972][ T6228] __sock_sendmsg+0x21c/0x270 [ 83.385000][ T6228] ____sys_sendmsg+0x505/0x830 [ 83.385028][ T6228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.385060][ T6228] ? import_iovec+0x74/0xa0 [ 83.385085][ T6228] ___sys_sendmsg+0x21f/0x2a0 [ 83.385108][ T6228] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.385171][ T6228] ? __fget_files+0x2a/0x420 [ 83.385187][ T6228] ? __fget_files+0x3a0/0x420 [ 83.385215][ T6228] __x64_sys_sendmsg+0x19b/0x260 [ 83.385239][ T6228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 83.385271][ T6228] ? __pfx_ksys_write+0x10/0x10 [ 83.385298][ T6228] ? do_syscall_64+0xbe/0xfa0 [ 83.385322][ T6228] do_syscall_64+0xfa/0xfa0 [ 83.385340][ T6228] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.385360][ T6228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.385377][ T6228] ? clear_bhb_loop+0x60/0xb0 [ 83.385398][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.385414][ T6228] RIP: 0033:0x7fc45c38f749 [ 83.385436][ T6228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.385450][ T6228] RSP: 002b:00007fc45d20a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.385469][ T6228] RAX: ffffffffffffffda RBX: 00007fc45c5e5fa0 RCX: 00007fc45c38f749 [ 83.385482][ T6228] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 83.385492][ T6228] RBP: 00007fc45d20a090 R08: 0000000000000000 R09: 0000000000000000 [ 83.385503][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.385513][ T6228] R13: 00007fc45c5e6038 R14: 00007fc45c5e5fa0 R15: 00007ffe7f8b81c8 [ 83.385546][ T6228] [ 83.438032][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.711908][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.78'. [ 83.746940][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.098175][ T6242] syz.0.79: vmalloc error: size 67108864, failed to allocated page array size 131072, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 84.201391][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) [ 84.201417][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.201427][ T6242] Call Trace: [ 84.201435][ T6242] [ 84.201443][ T6242] dump_stack_lvl+0x189/0x250 [ 84.201473][ T6242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.201495][ T6242] ? __pfx__printk+0x10/0x10 [ 84.201511][ T6242] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 84.201533][ T6242] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 84.201556][ T6242] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 84.201581][ T6242] warn_alloc+0x214/0x310 [ 84.201611][ T6242] ? __pfx_warn_alloc+0x10/0x10 [ 84.201641][ T6242] ? __get_vm_area_node+0x28f/0x300 [ 84.201664][ T6242] ? translate_table+0x198/0x2000 [ 84.201691][ T6242] __vmalloc_node_range_noprof+0x690/0x12d0 [ 84.201742][ T6242] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 84.201763][ T6242] ? translate_table+0x198/0x2000 [ 84.201795][ T6242] ? rcu_is_watching+0x15/0xb0 [ 84.201816][ T6242] ? translate_table+0x198/0x2000 [ 84.201838][ T6242] __kvmalloc_node_noprof+0x674/0x910 [ 84.201862][ T6242] ? translate_table+0x198/0x2000 [ 84.201882][ T6242] ? do_ipt_set_ctl+0x881/0xcd0 [ 84.201901][ T6242] ? nf_setsockopt+0x26f/0x290 [ 84.201917][ T6242] ? do_sock_setsockopt+0x17c/0x1b0 [ 84.201935][ T6242] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 84.201960][ T6242] translate_table+0x198/0x2000 [ 84.201998][ T6242] ? __lock_acquire+0xab9/0xd20 [ 84.202019][ T6242] ? __pfx_translate_table+0x10/0x10 [ 84.202045][ T6242] ? __might_fault+0xb0/0x130 [ 84.202089][ T6242] ? _copy_from_user+0x94/0xb0 [ 84.202116][ T6242] do_ipt_set_ctl+0x967/0xcd0 [ 84.202142][ T6242] ? rcu_is_watching+0x15/0xb0 [ 84.202160][ T6242] ? trace_contention_end+0x39/0x120 [ 84.202179][ T6242] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 84.202222][ T6242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.202249][ T6242] ? __pfx___mutex_lock+0x10/0x10 [ 84.202278][ T6242] ? file_init_path+0x3b/0x590 [ 84.202305][ T6242] nf_setsockopt+0x26f/0x290 [ 84.202323][ T6242] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 84.202342][ T6242] smc_setsockopt+0x232/0xab0 [ 84.202369][ T6242] ? __pfx_smc_setsockopt+0x10/0x10 [ 84.202388][ T6242] ? aa_sock_opt_perm+0xff/0x1b0 [ 84.202416][ T6242] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 84.202433][ T6242] ? __pfx_smc_setsockopt+0x10/0x10 [ 84.202454][ T6242] do_sock_setsockopt+0x17c/0x1b0 [ 84.202479][ T6242] __x64_sys_setsockopt+0x13f/0x1b0 [ 84.202505][ T6242] do_syscall_64+0xfa/0xfa0 [ 84.202523][ T6242] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.202542][ T6242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.202558][ T6242] ? clear_bhb_loop+0x60/0xb0 [ 84.202579][ T6242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.202595][ T6242] RIP: 0033:0x7fc45c38f749 [ 84.202612][ T6242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.202626][ T6242] RSP: 002b:00007fc45d20a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 84.202645][ T6242] RAX: ffffffffffffffda RBX: 00007fc45c5e5fa0 RCX: 00007fc45c38f749 [ 84.202657][ T6242] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 84.202667][ T6242] RBP: 00007fc45c413f91 R08: 0000000000000280 R09: 0000000000000000 [ 84.202678][ T6242] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 84.202688][ T6242] R13: 00007fc45c5e6038 R14: 00007fc45c5e5fa0 R15: 00007ffe7f8b81c8 [ 84.202766][ T6242] [ 84.202785][ T6242] Mem-Info: [ 84.476113][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.482863][ T6242] active_anon:6562 inactive_anon:0 isolated_anon:0 [ 84.482863][ T6242] active_file:2953 inactive_file:39878 isolated_file:0 [ 84.482863][ T6242] unevictable:768 dirty:515 writeback:0 [ 84.482863][ T6242] slab_reclaimable:10542 slab_unreclaimable:94906 [ 84.482863][ T6242] mapped:32249 shmem:1406 pagetables:1240 [ 84.482863][ T6242] sec_pagetables:0 bounce:0 [ 84.482863][ T6242] kernel_misc_reclaimable:0 [ 84.482863][ T6242] free:1324562 free_pcp:17770 free_cma:0 [ 84.488949][ T6268] netlink: 64 bytes leftover after parsing attributes in process `syz.2.82'. [ 84.535831][ T6242] Node 0 active_anon:26448kB inactive_anon:0kB active_file:11812kB inactive_file:159312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128996kB dirty:2044kB writeback:0kB shmem:4088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12140kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.680978][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.740634][ T6242] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.854577][ T6242] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 84.885356][ T6242] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 84.891145][ T6242] Node 0 DMA32 free:1388672kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26956kB inactive_anon:0kB active_file:11812kB inactive_file:159312kB unevictable:1536kB writepending:2088kB zspages:0kB present:3129332kB managed:2565012kB mlocked:0kB bounce:0kB free_pcp:51748kB local_pcp:22324kB free_cma:0kB [ 84.971584][ T6242] lowmem_reserve[]: 0 0 0 0 0 [ 84.977179][ T6242] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.009421][ T6242] lowmem_reserve[]: 0 0 0 0 0 [ 85.014301][ T6242] Node 1 Normal free:3894328kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19136kB local_pcp:9504kB free_cma:0kB [ 85.048322][ T6242] lowmem_reserve[]: 0 0 0 0 0 [ 85.056170][ T6242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 85.110644][ T6242] Node 0 DMA32: 2*4kB (UM) 1*8kB (E) 1*16kB (U) 1*32kB (E) 2*64kB (ME) 2*128kB (UM) 1*256kB (E) 2*512kB (ME) 2*1024kB (UM) 2*2048kB (UM) 337*4096kB (M) = 1388224kB [ 85.159399][ T6242] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 85.196334][ T6242] Node 1 Normal: 198*4kB (UME) 52*8kB (UME) 50*16kB (UME) 59*32kB (UME) 18*64kB (UME) 9*128kB (UME) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894328kB [ 85.255028][ T6242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.271100][ T6242] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.281271][ T6242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.291361][ T6242] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.322620][ T6242] 44359 total pagecache pages [ 85.340894][ T6242] 0 pages in swap cache [ 85.364968][ T6242] Free swap = 124996kB [ 85.370483][ T6242] Total swap = 124996kB [ 85.374656][ T6242] 2097051 pages RAM [ 85.403834][ T6242] 0 pages HighMem/MovableOnly [ 85.418669][ T6242] 424156 pages reserved [ 85.422947][ T6242] 0 pages cma reserved [ 85.489823][ T6290] syzkaller0: entered promiscuous mode [ 85.497896][ T6290] syzkaller0: entered allmulticast mode [ 86.072541][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 86.150420][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 86.578136][ T6344] syzkaller0: entered promiscuous mode [ 86.589771][ T6344] syzkaller0: entered allmulticast mode [ 86.707979][ T24] cfg80211: failed to load regulatory.db [ 87.139752][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.147837][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.155763][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.163631][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.171546][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.179510][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.187459][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.195385][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.203287][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.211216][ T6360] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 87.582012][ T6375] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.111'. [ 88.227537][ T6402] bond1: option tlb_dynamic_lb: invalid value (115) [ 88.237565][ T6402] bond1 (unregistering): Released all slaves [ 88.951831][ T6439] tipc: Failed to remove unknown binding: 66,1,1/0:1691627310/1691627312 [ 89.001535][ T6439] tipc: Failed to remove unknown binding: 66,1,1/0:1691627310/1691627312 [ 89.083069][ T6439] tipc: Failed to remove unknown binding: 66,1,1/0:1691627310/1691627312 [ 89.114679][ T6446] syzkaller1: entered promiscuous mode [ 89.128070][ T6446] syzkaller1: entered allmulticast mode [ 89.164949][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 89.259711][ T6451] netlink: 'syz.0.128': attribute type 15 has an invalid length. [ 89.293187][ T6451] netlink: 84 bytes leftover after parsing attributes in process `syz.0.128'. [ 89.674400][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.132'. [ 89.695749][ T6474] netlink: 'syz.0.132': attribute type 7 has an invalid length. [ 89.716377][ T6474] netlink: 'syz.0.132': attribute type 8 has an invalid length. [ 89.747404][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 89.793832][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 89.843315][ T6474] syz_tun: entered promiscuous mode [ 89.882287][ T6474] syz_tun: left promiscuous mode [ 90.063133][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 90.214105][ T6483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 90.246368][ T6494] netlink: 76 bytes leftover after parsing attributes in process `syz.3.136'. [ 90.818358][ T6524] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 90.845520][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 90.988759][ T6524] dummy0: entered promiscuous mode [ 91.024333][ T6524] bridge0: port 3(dummy0) entered blocking state [ 91.045202][ T6524] bridge0: port 3(dummy0) entered disabled state [ 91.083346][ T6524] dummy0: entered allmulticast mode [ 91.136321][ T6524] bridge0: port 3(dummy0) entered blocking state [ 91.142939][ T6524] bridge0: port 3(dummy0) entered forwarding state [ 91.609718][ T6566] netlink: 'syz.1.148': attribute type 10 has an invalid length. [ 91.670047][ T6569] syzkaller0: entered promiscuous mode [ 91.692538][ T6569] syzkaller0: entered allmulticast mode [ 91.752241][ T6566] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.798122][ T6566] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.855762][ T6572] netlink: 'syz.4.147': attribute type 4 has an invalid length. [ 92.414545][ T6579] syzkaller0: entered promiscuous mode [ 92.455625][ T6579] syzkaller0: entered allmulticast mode [ 94.092673][ T6614] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 94.162155][ T6647] __nla_validate_parse: 3 callbacks suppressed [ 94.162174][ T6647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.161'. [ 94.326697][ T6651] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 94.355791][ T6651] bond1 (unregistering): Released all slaves [ 94.364670][ T6657] x_tables: duplicate underflow at hook 1 [ 94.637691][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 94.720107][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 94.765098][ T6670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 94.859389][ T6683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.175'. [ 94.880809][ T6675] netlink: 256 bytes leftover after parsing attributes in process `syz.0.169'. [ 94.925174][ T6675] unsupported nlmsg_type 40 [ 94.932346][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.169'. [ 95.349425][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 95.489858][ T6715] tipc: Started in network mode [ 95.503188][ T6715] tipc: Node identity ac14140f, cluster identity 4711 [ 95.535542][ T6715] tipc: New replicast peer: 255.255.255.255 [ 95.562828][ T6715] tipc: Enabled bearer , priority 10 [ 96.108681][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.205'. [ 96.269933][ T6758] netlink: 6664 bytes leftover after parsing attributes in process `syz.2.209'. [ 96.556530][ T5925] tipc: Node number set to 2886997007 [ 96.601898][ T6776] xt_hashlimit: max too large, truncated to 1048576 [ 96.627999][ T6776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.875294][ T6788] tipc: Started in network mode [ 96.880198][ T6788] tipc: Node identity 6e1f68ae04b7, cluster identity 4711 [ 96.888799][ T6788] tipc: Enabled bearer , priority 0 [ 96.922279][ T6788] syzkaller0: entered promiscuous mode [ 96.929081][ T6788] syzkaller0: entered allmulticast mode [ 96.960877][ T6788] tipc: Resetting bearer [ 97.047508][ T6786] tipc: Resetting bearer [ 97.110492][ T6786] tipc: Disabling bearer [ 97.525572][ T6822] tipc: Started in network mode [ 97.545855][ T6822] tipc: Node identity ee0da6ef2c14, cluster identity 4711 [ 97.553166][ T6822] tipc: Enabled bearer , priority 0 [ 97.671813][ T6823] syzkaller0: entered promiscuous mode [ 97.712982][ T6823] syzkaller0: entered allmulticast mode [ 97.747006][ T6823] tipc: Resetting bearer [ 97.777092][ T6821] tipc: Resetting bearer [ 97.919745][ T6836] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 99.246455][ T6821] tipc: Disabling bearer [ 99.267907][ T5951] tipc: Node number set to 3256461039 [ 99.293362][ T6864] tipc: Enabled bearer , priority 0 [ 99.340586][ T6864] syzkaller0: entered promiscuous mode [ 99.361303][ T6864] syzkaller0: entered allmulticast mode [ 99.491573][ T6872] __nla_validate_parse: 2 callbacks suppressed [ 99.491589][ T6872] netlink: 52 bytes leftover after parsing attributes in process `syz.2.257'. [ 99.500532][ T6865] tipc: Resetting bearer [ 99.553278][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 99.565754][ T6863] tipc: Resetting bearer [ 99.632450][ T6863] tipc: Disabling bearer [ 99.670727][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.808553][ T6872] bridge_slave_0 (unregistering): left allmulticast mode [ 99.817938][ T6872] bridge_slave_0 (unregistering): left promiscuous mode [ 99.826214][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.837025][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 99.866525][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 100.023352][ T6899] netlink: 84 bytes leftover after parsing attributes in process `syz.0.268'. [ 100.300131][ T6916] netlink: 32 bytes leftover after parsing attributes in process `syz.4.274'. [ 100.316824][ T6914] Illegal XDP return value 4294967294 on prog (id 62) dev syz_tun, expect packet loss! [ 100.537067][ T6930] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 100.782249][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cee0400: rx timeout, send abort [ 101.282974][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ece000: rx timeout, send abort [ 101.291421][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cee0400: abort rx timeout. Force session deactivation [ 101.626876][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 101.791233][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ece000: abort rx timeout. Force session deactivation [ 101.844438][ T6984] netlink: 'syz.2.305': attribute type 11 has an invalid length. [ 102.122325][ T6996] lo: Caught tx_queue_len zero misconfig [ 102.131087][ T6996] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 102.275099][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 102.824810][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 102.844074][ T5891] IPVS: starting estimator thread 0... [ 102.965174][ T7028] IPVS: using max 28 ests per chain, 67200 per kthread [ 103.271081][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 103.393879][ T7044] syzkaller1: entered promiscuous mode [ 103.435238][ T7044] syzkaller1: entered allmulticast mode [ 103.477464][ T7044] netlink: 'syz.3.328': attribute type 7 has an invalid length. [ 103.493822][ T7051] netlink: 'syz.1.329': attribute type 2 has an invalid length. [ 103.516802][ T7051] !: entered promiscuous mode [ 103.523794][ T7044] netlink: 'syz.3.328': attribute type 8 has an invalid length. [ 103.644204][ T7066] xt_hashlimit: size too large, truncated to 1048576 [ 104.124037][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d84800: rx timeout, send abort [ 104.497587][ T7107] tipc: Enabled bearer , priority 0 [ 104.513407][ T7109] bridge_slave_0: left allmulticast mode [ 104.519303][ T7109] bridge_slave_0: left promiscuous mode [ 104.525517][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.552115][ T7109] bridge_slave_1: left allmulticast mode [ 104.565237][ T7109] bridge_slave_1: left promiscuous mode [ 104.576581][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.624154][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d86400: rx timeout, send abort [ 104.632536][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d84800: abort rx timeout. Force session deactivation [ 104.634582][ T7109] bond0: (slave bond_slave_0): Releasing backup interface [ 104.661393][ T7109] bond0: (slave bond_slave_1): Releasing backup interface [ 104.709515][ T7109] team0: Port device team_slave_0 removed [ 104.724535][ T7109] team0: Port device team_slave_1 removed [ 104.731882][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.742925][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.752634][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.762902][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.774582][ T7109] net_ratelimit: 44 callbacks suppressed [ 104.774598][ T7109] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.801205][ T7114] syzkaller0: entered promiscuous mode [ 104.807218][ T7114] syzkaller0: entered allmulticast mode [ 104.852711][ T7107] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 104.884976][ T7120] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 104.906969][ T7123] tipc: Resetting bearer [ 104.929041][ T7129] __nla_validate_parse: 1 callbacks suppressed [ 104.929057][ T7129] netlink: 112 bytes leftover after parsing attributes in process `syz.2.350'. [ 104.944560][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 104.954299][ T7105] tipc: Resetting bearer [ 104.955707][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 104.972446][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 104.997515][ T7105] tipc: Disabling bearer [ 105.024186][ T7129] bond0: option min_links: invalid value (18446744073707782144) [ 105.033315][ T7129] bond0: option min_links: allowed values 0 - 2147483647 [ 105.132446][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d86400: abort rx timeout. Force session deactivation [ 105.233047][ T7143] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 105.643823][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054e6e000: rx timeout, send abort [ 105.650072][ T7167] netlink: 'syz.1.361': attribute type 33 has an invalid length. [ 105.660231][ T7167] netlink: 152 bytes leftover after parsing attributes in process `syz.1.361'. [ 105.742066][ T7169] syzkaller1: entered promiscuous mode [ 105.747831][ T7169] syzkaller1: entered allmulticast mode [ 106.143993][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054e6e400: rx timeout, send abort [ 106.152324][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054e6e000: abort rx timeout. Force session deactivation [ 106.271081][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.372'. [ 106.488338][ T7206] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.377'. [ 106.652494][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054e6e400: abort rx timeout. Force session deactivation [ 106.933699][ T7232] tipc: Started in network mode [ 106.949924][ T7232] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 106.959565][ T7232] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 106.969402][ T7232] tipc: Enabled bearer , priority 10 [ 106.986272][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'. [ 106.996501][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 107.007309][ T7223] macvlan0: entered allmulticast mode [ 107.012859][ T7223] veth1_vlan: entered allmulticast mode [ 107.107880][ T7236] tipc: Started in network mode [ 107.112994][ T7236] tipc: Node identity 769f4b49a185, cluster identity 4711 [ 107.115206][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880552aa400: rx timeout, send abort [ 107.121757][ T7236] tipc: Enabled bearer , priority 0 [ 107.139210][ T7236] syzkaller0: entered promiscuous mode [ 107.144786][ T7236] syzkaller0: entered allmulticast mode [ 107.155445][ T7236] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 107.181052][ T7236] tipc: Resetting bearer [ 107.189210][ T7235] tipc: Resetting bearer [ 107.207952][ T7235] tipc: Disabling bearer [ 107.616068][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880552a9800: rx timeout, send abort [ 107.628330][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880552aa400: abort rx timeout. Force session deactivation [ 108.067422][ T7287] dummy0: entered promiscuous mode [ 108.072877][ T7287] macsec1: entered promiscuous mode [ 108.095250][ T7287] macsec1: entered allmulticast mode [ 108.100568][ T7287] dummy0: entered allmulticast mode [ 108.112628][ T7287] dummy0: left allmulticast mode [ 108.124285][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880552a9800: abort rx timeout. Force session deactivation [ 108.128740][ T7287] dummy0: left promiscuous mode [ 108.188524][ T5951] tipc: Node number set to 1 [ 108.230696][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.410'. [ 108.279384][ T7307] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 108.414387][ T7304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.524193][ T7324] tipc: Enabled bearer , priority 0 [ 108.547863][ T7323] tipc: Disabling bearer [ 108.940644][ T7348] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 109.035734][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.065744][ T7351] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 109.105719][ T7351] bond0: (slave sit0): Error -95 calling set_mac_address [ 109.317457][ T7369] tipc: Enabled bearer , priority 0 [ 109.433954][ T7368] tipc: Disabling bearer [ 109.671969][ T7393] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 110.073379][ T7412] macsec1: entered allmulticast mode [ 110.101615][ T7412] macsec0: entered allmulticast mode [ 110.137319][ T7412] veth1_macvtap: entered allmulticast mode [ 110.274651][ T7429] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 110.664450][ T7461] FAULT_INJECTION: forcing a failure. [ 110.664450][ T7461] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.693777][ T7461] CPU: 1 UID: 0 PID: 7461 Comm: syz.3.455 Not tainted syzkaller #0 PREEMPT(full) [ 110.693807][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.693817][ T7461] Call Trace: [ 110.693824][ T7461] [ 110.693832][ T7461] dump_stack_lvl+0x189/0x250 [ 110.693859][ T7461] ? __pfx____ratelimit+0x10/0x10 [ 110.693878][ T7461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.693899][ T7461] ? __pfx__printk+0x10/0x10 [ 110.693917][ T7461] ? __might_fault+0xb0/0x130 [ 110.693952][ T7461] should_fail_ex+0x414/0x560 [ 110.693982][ T7461] _copy_from_user+0x2d/0xb0 [ 110.694004][ T7461] kstrtouint_from_user+0xc4/0x170 [ 110.694025][ T7461] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 110.694060][ T7461] proc_fail_nth_write+0x88/0x200 [ 110.694082][ T7461] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 110.694107][ T7461] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 110.694130][ T7461] vfs_write+0x27e/0xb30 [ 110.694163][ T7461] ? __pfx_vfs_write+0x10/0x10 [ 110.694185][ T7461] ? __fget_files+0x2a/0x420 [ 110.694205][ T7461] ? __fget_files+0x3a0/0x420 [ 110.694219][ T7461] ? __fget_files+0x2a/0x420 [ 110.694244][ T7461] ksys_write+0x145/0x250 [ 110.694268][ T7461] ? __pfx_ksys_write+0x10/0x10 [ 110.694292][ T7461] ? do_syscall_64+0xbe/0xfa0 [ 110.694316][ T7461] do_syscall_64+0xfa/0xfa0 [ 110.694334][ T7461] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.694354][ T7461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.694369][ T7461] ? clear_bhb_loop+0x60/0xb0 [ 110.694390][ T7461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.694405][ T7461] RIP: 0033:0x7fd5e298e1ff [ 110.694421][ T7461] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 110.694434][ T7461] RSP: 002b:00007fd5e37d8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 110.694452][ T7461] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd5e298e1ff [ 110.694464][ T7461] RDX: 0000000000000001 RSI: 00007fd5e37d80a0 RDI: 0000000000000004 [ 110.694475][ T7461] RBP: 00007fd5e37d8090 R08: 0000000000000000 R09: 0000000000000000 [ 110.694485][ T7461] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 110.694495][ T7461] R13: 00007fd5e2be6038 R14: 00007fd5e2be5fa0 R15: 00007ffdb7ec56b8 [ 110.694525][ T7461] [ 111.837813][ T7504] netlink: 'syz.0.467': attribute type 11 has an invalid length. [ 111.861507][ T7504] netlink: 'syz.0.467': attribute type 11 has an invalid length. [ 111.883578][ T7504] __nla_validate_parse: 10 callbacks suppressed [ 111.883595][ T7504] netlink: 204 bytes leftover after parsing attributes in process `syz.0.467'. [ 112.399418][ T7522] syzkaller0: entered promiscuous mode [ 112.405566][ T7522] syzkaller0: entered allmulticast mode [ 112.736242][ T7554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.476'. [ 112.746957][ T7555] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 112.900225][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.477'. [ 113.630412][ T7534] tipc: Enabled bearer , priority 0 [ 113.642673][ T7536] syzkaller0: entered promiscuous mode [ 113.648434][ T7536] syzkaller0: entered allmulticast mode [ 113.685999][ T7549] tipc: Resetting bearer [ 113.694112][ T7555] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.742288][ T7533] tipc: Resetting bearer [ 113.774663][ T7533] tipc: Disabling bearer [ 114.039233][ T7582] netlink: 76 bytes leftover after parsing attributes in process `syz.3.485'. [ 114.067469][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 114.419373][ T7594] syzkaller0: entered promiscuous mode [ 114.425041][ T7594] syzkaller0: entered allmulticast mode [ 114.618751][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 115.700297][ T7623] tipc: Enabling of bearer rejected, failed to enable media [ 115.916245][ T7636] veth3: entered promiscuous mode [ 116.212475][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 116.233050][ T7657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 116.780523][ T7671] syzkaller0: entered promiscuous mode [ 116.829123][ T7671] syzkaller0: entered allmulticast mode [ 117.958048][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.511'. [ 117.967234][ T7680] netem: invalid attributes len -18 [ 117.972439][ T7680] netem: change failed [ 118.128528][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.515'. [ 118.226448][ T7697] syzkaller1: entered promiscuous mode [ 118.242695][ T7697] syzkaller1: entered allmulticast mode [ 118.269887][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.515'. [ 118.719699][ T7726] FAULT_INJECTION: forcing a failure. [ 118.719699][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 118.731109][ T7722] syzkaller0: entered promiscuous mode [ 118.738088][ T7722] syzkaller0: entered allmulticast mode [ 118.744207][ T7726] CPU: 1 UID: 0 PID: 7726 Comm: syz.1.528 Not tainted syzkaller #0 PREEMPT(full) [ 118.744229][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.744238][ T7726] Call Trace: [ 118.744245][ T7726] [ 118.744251][ T7726] dump_stack_lvl+0x189/0x250 [ 118.744279][ T7726] ? __pfx____ratelimit+0x10/0x10 [ 118.744295][ T7726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.744314][ T7726] ? __pfx__printk+0x10/0x10 [ 118.744336][ T7726] ? __pfx___might_resched+0x10/0x10 [ 118.744359][ T7726] should_fail_ex+0x414/0x560 [ 118.744387][ T7726] should_failslab+0xa8/0x100 [ 118.744406][ T7726] __kmalloc_noprof+0xcb/0x7f0 [ 118.744428][ T7726] ? kfree+0x4d/0x6d0 [ 118.744445][ T7726] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 118.744476][ T7726] tomoyo_realpath_from_path+0xe3/0x5d0 [ 118.744502][ T7726] ? tomoyo_domain+0xd9/0x130 [ 118.744524][ T7726] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 118.744545][ T7726] tomoyo_path_number_perm+0x1e8/0x5a0 [ 118.744570][ T7726] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 118.744629][ T7726] ? __fget_files+0x2a/0x420 [ 118.744651][ T7726] ? __fget_files+0x3a0/0x420 [ 118.744666][ T7726] ? __fget_files+0x2a/0x420 [ 118.744687][ T7726] security_file_ioctl+0xcb/0x2d0 [ 118.744710][ T7726] __se_sys_ioctl+0x47/0x170 [ 118.744738][ T7726] do_syscall_64+0xfa/0xfa0 [ 118.744757][ T7726] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.744777][ T7726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.744791][ T7726] ? clear_bhb_loop+0x60/0xb0 [ 118.744809][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.744823][ T7726] RIP: 0033:0x7fc7c6d8f749 [ 118.744837][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.744857][ T7726] RSP: 002b:00007fc7c7cc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.744875][ T7726] RAX: ffffffffffffffda RBX: 00007fc7c6fe5fa0 RCX: 00007fc7c6d8f749 [ 118.744886][ T7726] RDX: 0000200000000040 RSI: 0000000000008b01 RDI: 0000000000000003 [ 118.744895][ T7726] RBP: 00007fc7c7cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 118.744905][ T7726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.744914][ T7726] R13: 00007fc7c6fe6038 R14: 00007fc7c6fe5fa0 R15: 00007ffe300eef08 [ 118.744944][ T7726] [ 118.975677][ T7726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 119.015732][ T7729] netlink: 44 bytes leftover after parsing attributes in process `syz.2.524'. [ 120.233818][ T7748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 120.356263][ T7743] syzkaller0: entered promiscuous mode [ 120.367105][ T7743] syzkaller0: entered allmulticast mode [ 120.443214][ T7751] netlink: 'syz.2.532': attribute type 23 has an invalid length. [ 121.829810][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.546'. [ 121.862043][ T7785] syzkaller0: entered promiscuous mode [ 121.875698][ T7785] syzkaller0: entered allmulticast mode [ 121.959293][ T7796] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 121.993009][ T7797] netlink: 'syz.1.546': attribute type 6 has an invalid length. [ 122.001166][ T7797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 122.050609][ T7798] netlink: 84 bytes leftover after parsing attributes in process `syz.1.546'. [ 122.886777][ T7790] pim6reg: entered allmulticast mode [ 122.906799][ T7795] pim6reg: left allmulticast mode [ 122.927933][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.936421][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.978964][ T7804] Bluetooth: MGMT ver 1.23 [ 123.020726][ T7804] tipc: Enabled bearer , priority 0 [ 123.065959][ T7804] syzkaller0: entered promiscuous mode [ 123.071588][ T7804] syzkaller0: entered allmulticast mode [ 123.142122][ T7813] netlink: 'syz.4.552': attribute type 1 has an invalid length. [ 123.193938][ T7813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.229327][ T7804] tipc: Resetting bearer [ 123.247514][ T7813] bond1: option lacp_rate: unable to set because the bond device is up [ 123.287115][ T7803] tipc: Resetting bearer [ 123.335557][ T7803] tipc: Disabling bearer [ 123.348950][ T7821] bridge0: entered allmulticast mode [ 123.357378][ T7822] dummy0: Caught tx_queue_len zero misconfig [ 123.363422][ T7822] sch_tbf: burst 2 is lower than device dummy0 mtu (1514) ! [ 123.384154][ T7825] tipc: Enabling of bearer rejected, failed to enable media [ 123.404240][ T7816] bridge_slave_1: left allmulticast mode [ 123.410324][ T7816] bridge_slave_1: left promiscuous mode [ 123.424224][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.482202][ T7816] bridge_slave_0: left allmulticast mode [ 123.500788][ T7816] bridge_slave_0: left promiscuous mode [ 123.517967][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.930578][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 124.061260][ T30] audit: type=1800 audit(1764542307.205:2): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.565" name="blkio.bfq.time_recursive" dev="tmpfs" ino=619 res=0 errno=0 [ 124.108658][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 124.148467][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 125.220478][ T7886] vlan2: entered promiscuous mode [ 125.226800][ T7886] vlan2: entered allmulticast mode [ 125.231933][ T7886] hsr_slave_1: entered allmulticast mode [ 125.484798][ T7899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.576'. [ 125.512794][ T7901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.576'. [ 125.672376][ T7913] netlink: 'syz.2.579': attribute type 1 has an invalid length. [ 125.707903][ T7912] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 125.716878][ T7915] veth0_to_bridge: entered promiscuous mode [ 125.734673][ T7912] netlink: 2 bytes leftover after parsing attributes in process `syz.1.580'. [ 125.768181][ T7914] veth0_to_bridge: left promiscuous mode [ 125.808069][ T7921] bond1: (slave bridge1): making interface the new active one [ 125.855932][ T7921] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 125.864625][ T7912] batadv_slave_1: entered promiscuous mode [ 125.873061][ T7912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.895022][ T7912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.976292][ T7925] syzkaller0: entered promiscuous mode [ 125.981988][ T7925] syzkaller0: entered allmulticast mode [ 126.031755][ T7925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.584'. [ 126.576336][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 126.797069][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'. [ 126.815889][ T7976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'. [ 126.905125][ T7976] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 126.972614][ T7976] bridge0: port 3(dummy0) entered disabled state [ 126.987795][ T7976] dummy0: left allmulticast mode [ 126.990461][ T7981] netlink: 'syz.4.602': attribute type 6 has an invalid length. [ 127.003755][ T7976] dummy0: left promiscuous mode [ 127.012181][ T7976] bridge0: port 3(dummy0) entered disabled state [ 127.029953][ T7976] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.138712][ T7981] netlink: 'syz.4.602': attribute type 6 has an invalid length. [ 127.298440][ T7990] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 127.315683][ T7990] bond2 (unregistering): Released all slaves [ 127.612717][ T8000] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 128.373766][ T8034] netlink: 'syz.2.620': attribute type 33 has an invalid length. [ 130.135074][ T8067] syz.3.630 (8067) used greatest stack depth: 15320 bytes left [ 132.246135][ T8138] syzkaller0: entered promiscuous mode [ 132.254975][ T8138] syzkaller0: entered allmulticast mode [ 132.771187][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.782592][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.095745][ T8178] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 134.103654][ T8178] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 134.187008][ T8188] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 134.279996][ T8188] __nla_validate_parse: 8 callbacks suppressed [ 134.280014][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 134.314968][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 134.368210][ T8196] netlink: 104 bytes leftover after parsing attributes in process `syz.0.665'. [ 134.925800][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'. [ 134.970361][ T8214] bond0: (slave rose0): Enslaving as an active interface with an up link [ 135.315773][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.676'. [ 135.836908][ T8239] netlink: 'syz.4.680': attribute type 39 has an invalid length. [ 136.138985][ T8247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.682'. [ 136.179389][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 136.263397][ T8253] bridge_slave_1: left allmulticast mode [ 136.271990][ T8253] bridge_slave_1: left promiscuous mode [ 136.306152][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.401434][ T8257] netlink: 64 bytes leftover after parsing attributes in process `syz.4.684'. [ 136.410863][ T8257] block nbd0: not configured, cannot reconfigure [ 136.529829][ T8263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.700960][ T8251] netlink: 288 bytes leftover after parsing attributes in process `syz.4.684'. [ 136.973371][ T5951] IPVS: starting estimator thread 0... [ 137.028526][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.689'. [ 137.065388][ T8270] IPVS: using max 37 ests per chain, 88800 per kthread [ 137.094708][ T8274] IPVS: set_ctl: invalid protocol: 30 66.0.0.0:1024 [ 137.153145][ T8278] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 137.185486][ T8278] netlink: 'syz.3.691': attribute type 2 has an invalid length. [ 137.273562][ T8288] openvswitch: netlink: EtherType 0 is less than min 600 [ 137.465264][ T8293] FAULT_INJECTION: forcing a failure. [ 137.465264][ T8293] name failslab, interval 1, probability 0, space 0, times 0 [ 137.472489][ T8294] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 137.486950][ T8293] CPU: 1 UID: 0 PID: 8293 Comm: syz.4.695 Not tainted syzkaller #0 PREEMPT(full) [ 137.486974][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.486984][ T8293] Call Trace: [ 137.486991][ T8293] [ 137.486998][ T8293] dump_stack_lvl+0x189/0x250 [ 137.487025][ T8293] ? __pfx____ratelimit+0x10/0x10 [ 137.487045][ T8293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.487065][ T8293] ? __pfx__printk+0x10/0x10 [ 137.487089][ T8293] ? __pfx___might_resched+0x10/0x10 [ 137.487107][ T8293] ? fs_reclaim_acquire+0x7d/0x100 [ 137.487127][ T8293] should_fail_ex+0x414/0x560 [ 137.487163][ T8293] should_failslab+0xa8/0x100 [ 137.487182][ T8293] __kmalloc_noprof+0xcb/0x7f0 [ 137.487204][ T8293] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 137.487228][ T8293] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 137.487253][ T8293] genl_family_rcv_msg_doit+0xb8/0x300 [ 137.487277][ T8293] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 137.487298][ T8293] ? __pfx_genl_get_cmd+0x10/0x10 [ 137.487320][ T8293] ? __pfx_ethnl_default_doit+0x10/0x10 [ 137.487340][ T8293] ? __pfx_ethnl_default_start+0x10/0x10 [ 137.487358][ T8293] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 137.487377][ T8293] ? __pfx_ethnl_default_done+0x10/0x10 [ 137.487411][ T8293] genl_rcv_msg+0x60e/0x790 [ 137.487434][ T8293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.487449][ T8293] ? __pfx_ethnl_default_doit+0x10/0x10 [ 137.487473][ T8293] ? __asan_memcpy+0x40/0x70 [ 137.487493][ T8293] ? __pfx_ref_tracker_free+0x10/0x10 [ 137.487517][ T8293] netlink_rcv_skb+0x208/0x470 [ 137.487535][ T8293] ? __lock_acquire+0xab9/0xd20 [ 137.487552][ T8293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.487569][ T8293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.487607][ T8293] ? down_read+0x1ad/0x2e0 [ 137.487632][ T8293] genl_rcv+0x28/0x40 [ 137.487654][ T8293] netlink_unicast+0x82f/0x9e0 [ 137.487682][ T8293] ? __pfx_netlink_unicast+0x10/0x10 [ 137.487702][ T8293] ? netlink_sendmsg+0x642/0xb30 [ 137.487720][ T8293] ? skb_put+0x11b/0x210 [ 137.487744][ T8293] netlink_sendmsg+0x805/0xb30 [ 137.487774][ T8293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.487798][ T8293] ? aa_sock_msg_perm+0xf1/0x1d0 [ 137.487824][ T8293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.487840][ T8293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.487861][ T8293] __sock_sendmsg+0x21c/0x270 [ 137.487889][ T8293] ____sys_sendmsg+0x505/0x830 [ 137.487915][ T8293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.487950][ T8293] ? import_iovec+0x74/0xa0 [ 137.487974][ T8293] ___sys_sendmsg+0x21f/0x2a0 [ 137.487997][ T8293] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.488052][ T8293] ? __fget_files+0x2a/0x420 [ 137.488069][ T8293] ? __fget_files+0x3a0/0x420 [ 137.488097][ T8293] __x64_sys_sendmsg+0x19b/0x260 [ 137.488121][ T8293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.488157][ T8293] ? __pfx_ksys_write+0x10/0x10 [ 137.488184][ T8293] ? do_syscall_64+0xbe/0xfa0 [ 137.488208][ T8293] do_syscall_64+0xfa/0xfa0 [ 137.488226][ T8293] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.488243][ T8293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.488255][ T8293] ? clear_bhb_loop+0x60/0xb0 [ 137.488274][ T8293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.488289][ T8293] RIP: 0033:0x7f531d38f749 [ 137.488305][ T8293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.488319][ T8293] RSP: 002b:00007f531e280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.488337][ T8293] RAX: ffffffffffffffda RBX: 00007f531d5e5fa0 RCX: 00007f531d38f749 [ 137.488350][ T8293] RDX: 0000000000000010 RSI: 0000200000001180 RDI: 0000000000000003 [ 137.488360][ T8293] RBP: 00007f531e280090 R08: 0000000000000000 R09: 0000000000000000 [ 137.488370][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.488380][ T8293] R13: 00007f531d5e6038 R14: 00007f531d5e5fa0 R15: 00007ffec8ea9a88 [ 137.488411][ T8293] [ 137.972586][ T8294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.380305][ T8317] tipc: Enabling of bearer rejected, failed to enable media [ 138.570794][ T8328] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 138.772983][ T8333] FAULT_INJECTION: forcing a failure. [ 138.772983][ T8333] name failslab, interval 1, probability 0, space 0, times 0 [ 138.822031][ T8333] CPU: 0 UID: 0 PID: 8333 Comm: syz.3.707 Not tainted syzkaller #0 PREEMPT(full) [ 138.822055][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.822065][ T8333] Call Trace: [ 138.822072][ T8333] [ 138.822079][ T8333] dump_stack_lvl+0x189/0x250 [ 138.822107][ T8333] ? __pfx____ratelimit+0x10/0x10 [ 138.822127][ T8333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.822148][ T8333] ? __pfx__printk+0x10/0x10 [ 138.822170][ T8333] ? __pfx___might_resched+0x10/0x10 [ 138.822187][ T8333] ? fs_reclaim_acquire+0x7d/0x100 [ 138.822208][ T8333] should_fail_ex+0x414/0x560 [ 138.822238][ T8333] should_failslab+0xa8/0x100 [ 138.822257][ T8333] __kmalloc_noprof+0xcb/0x7f0 [ 138.822279][ T8333] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 138.822305][ T8333] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 138.822330][ T8333] genl_family_rcv_msg_doit+0xb8/0x300 [ 138.822354][ T8333] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.822375][ T8333] ? __pfx_genl_get_cmd+0x10/0x10 [ 138.822396][ T8333] ? __pfx_ethnl_default_doit+0x10/0x10 [ 138.822417][ T8333] ? __pfx_ethnl_default_start+0x10/0x10 [ 138.822436][ T8333] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 138.822455][ T8333] ? __pfx_ethnl_default_done+0x10/0x10 [ 138.822491][ T8333] genl_rcv_msg+0x60e/0x790 [ 138.822514][ T8333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.822529][ T8333] ? __pfx_ethnl_default_doit+0x10/0x10 [ 138.822553][ T8333] ? __asan_memcpy+0x40/0x70 [ 138.822573][ T8333] ? __pfx_ref_tracker_free+0x10/0x10 [ 138.822598][ T8333] netlink_rcv_skb+0x208/0x470 [ 138.822617][ T8333] ? __lock_acquire+0xab9/0xd20 [ 138.822635][ T8333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.822652][ T8333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.822701][ T8333] ? down_read+0x1ad/0x2e0 [ 138.822727][ T8333] genl_rcv+0x28/0x40 [ 138.822749][ T8333] netlink_unicast+0x82f/0x9e0 [ 138.822778][ T8333] ? __pfx_netlink_unicast+0x10/0x10 [ 138.822799][ T8333] ? netlink_sendmsg+0x642/0xb30 [ 138.822817][ T8333] ? skb_put+0x11b/0x210 [ 138.822841][ T8333] netlink_sendmsg+0x805/0xb30 [ 138.822872][ T8333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.822896][ T8333] ? aa_sock_msg_perm+0xf1/0x1d0 [ 138.822921][ T8333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.822937][ T8333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.822959][ T8333] __sock_sendmsg+0x21c/0x270 [ 138.822988][ T8333] ____sys_sendmsg+0x505/0x830 [ 138.823015][ T8333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.823046][ T8333] ? import_iovec+0x74/0xa0 [ 138.823075][ T8333] ___sys_sendmsg+0x21f/0x2a0 [ 138.823105][ T8333] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.823166][ T8333] ? __fget_files+0x2a/0x420 [ 138.823182][ T8333] ? __fget_files+0x3a0/0x420 [ 138.823211][ T8333] __x64_sys_sendmsg+0x19b/0x260 [ 138.823234][ T8333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.823266][ T8333] ? __pfx_ksys_write+0x10/0x10 [ 138.823293][ T8333] ? do_syscall_64+0xbe/0xfa0 [ 138.823317][ T8333] do_syscall_64+0xfa/0xfa0 [ 138.823333][ T8333] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.823351][ T8333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.823367][ T8333] ? clear_bhb_loop+0x60/0xb0 [ 138.823386][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.823401][ T8333] RIP: 0033:0x7fd5e298f749 [ 138.823417][ T8333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.823431][ T8333] RSP: 002b:00007fd5e37d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.823449][ T8333] RAX: ffffffffffffffda RBX: 00007fd5e2be5fa0 RCX: 00007fd5e298f749 [ 138.823461][ T8333] RDX: 0000000000000010 RSI: 0000200000001180 RDI: 0000000000000003 [ 138.823471][ T8333] RBP: 00007fd5e37d8090 R08: 0000000000000000 R09: 0000000000000000 [ 138.823481][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.823491][ T8333] R13: 00007fd5e2be6038 R14: 00007fd5e2be5fa0 R15: 00007ffdb7ec56b8 [ 138.823523][ T8333] [ 139.203409][ T5834] Bluetooth: hci0: command tx timeout [ 139.307996][ T8345] __nla_validate_parse: 1 callbacks suppressed [ 139.308013][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 139.325528][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 139.362852][ T8345] batadv1: entered promiscuous mode [ 139.430639][ T8345] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 139.473486][ T8351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.712'. [ 139.863657][ T8367] Cannot find del_set index 49151 as target [ 140.027665][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.720'. [ 140.047517][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.720'. [ 140.065263][ T8372] netlink: 'syz.1.720': attribute type 7 has an invalid length. [ 140.182621][ T8385] FAULT_INJECTION: forcing a failure. [ 140.182621][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 140.198470][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.4.724 Not tainted syzkaller #0 PREEMPT(full) [ 140.198494][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.198520][ T8385] Call Trace: [ 140.198527][ T8385] [ 140.198534][ T8385] dump_stack_lvl+0x189/0x250 [ 140.198559][ T8385] ? __pfx____ratelimit+0x10/0x10 [ 140.198577][ T8385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.198596][ T8385] ? __pfx__printk+0x10/0x10 [ 140.198618][ T8385] ? __pfx___might_resched+0x10/0x10 [ 140.198642][ T8385] should_fail_ex+0x414/0x560 [ 140.198672][ T8385] should_failslab+0xa8/0x100 [ 140.198691][ T8385] __kmalloc_noprof+0xcb/0x7f0 [ 140.198712][ T8385] ? ethnl_default_doit+0x1d8/0xcd0 [ 140.198740][ T8385] ethnl_default_doit+0x1d8/0xcd0 [ 140.198763][ T8385] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 140.198791][ T8385] genl_family_rcv_msg_doit+0x215/0x300 [ 140.198814][ T8385] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.198854][ T8385] genl_rcv_msg+0x60e/0x790 [ 140.198877][ T8385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.198891][ T8385] ? __pfx_ethnl_default_doit+0x10/0x10 [ 140.198914][ T8385] ? __asan_memcpy+0x40/0x70 [ 140.198934][ T8385] ? __pfx_ref_tracker_free+0x10/0x10 [ 140.198959][ T8385] netlink_rcv_skb+0x208/0x470 [ 140.198977][ T8385] ? __lock_acquire+0xab9/0xd20 [ 140.198993][ T8385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.199010][ T8385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.199049][ T8385] ? down_read+0x1ad/0x2e0 [ 140.199072][ T8385] genl_rcv+0x28/0x40 [ 140.199093][ T8385] netlink_unicast+0x82f/0x9e0 [ 140.199119][ T8385] ? __pfx_netlink_unicast+0x10/0x10 [ 140.199139][ T8385] ? netlink_sendmsg+0x642/0xb30 [ 140.199157][ T8385] ? skb_put+0x11b/0x210 [ 140.199179][ T8385] netlink_sendmsg+0x805/0xb30 [ 140.199207][ T8385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.199229][ T8385] ? aa_sock_msg_perm+0xf1/0x1d0 [ 140.199254][ T8385] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.199270][ T8385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.199291][ T8385] __sock_sendmsg+0x21c/0x270 [ 140.199317][ T8385] ____sys_sendmsg+0x505/0x830 [ 140.199342][ T8385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.199370][ T8385] ? import_iovec+0x74/0xa0 [ 140.199395][ T8385] ___sys_sendmsg+0x21f/0x2a0 [ 140.199415][ T8385] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.199468][ T8385] ? __fget_files+0x2a/0x420 [ 140.199483][ T8385] ? __fget_files+0x3a0/0x420 [ 140.199511][ T8385] __x64_sys_sendmsg+0x19b/0x260 [ 140.199534][ T8385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.199563][ T8385] ? __pfx_ksys_write+0x10/0x10 [ 140.199590][ T8385] ? do_syscall_64+0xbe/0xfa0 [ 140.199613][ T8385] do_syscall_64+0xfa/0xfa0 [ 140.199631][ T8385] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.199649][ T8385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.199665][ T8385] ? clear_bhb_loop+0x60/0xb0 [ 140.199685][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.199701][ T8385] RIP: 0033:0x7f531d38f749 [ 140.199716][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.199728][ T8385] RSP: 002b:00007f531e280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.199746][ T8385] RAX: ffffffffffffffda RBX: 00007f531d5e5fa0 RCX: 00007f531d38f749 [ 140.199757][ T8385] RDX: 0000000000000010 RSI: 0000200000001180 RDI: 0000000000000003 [ 140.199766][ T8385] RBP: 00007f531e280090 R08: 0000000000000000 R09: 0000000000000000 [ 140.199774][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.199791][ T8385] R13: 00007f531d5e6038 R14: 00007f531d5e5fa0 R15: 00007ffec8ea9a88 [ 140.199823][ T8385] [ 140.744143][ T8393] syzkaller0: entered promiscuous mode [ 140.770048][ T8393] syzkaller0: entered allmulticast mode [ 140.791640][ T8402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.727'. [ 140.917028][ T8411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.732'. [ 141.531150][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.741'. [ 141.553756][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.4.739'. [ 141.732232][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.745'. [ 141.961124][ T8460] tunl0: Caught tx_queue_len zero misconfig [ 141.995399][ T8460] netlink: 'syz.2.747': attribute type 58 has an invalid length. [ 142.048230][ T8468] netlink: 'syz.2.747': attribute type 2 has an invalid length. [ 142.186410][ T8475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.033959][ T5898] IPVS: starting estimator thread 0... [ 143.134915][ T8517] IPVS: using max 31 ests per chain, 74400 per kthread [ 143.157965][ T8520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.314356][ T8532] 0ªX¹¦À: renamed from caif0 [ 143.334741][ T8532] 0ªX¹¦À: entered allmulticast mode [ 143.362997][ T8532] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 143.734487][ T8550] lo: Caught tx_queue_len zero misconfig [ 143.758089][ T8550] netlink: 'syz.0.779': attribute type 3 has an invalid length. [ 144.225370][ T8582] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 144.313703][ T8582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.392617][ T8590] Bluetooth: MGMT ver 1.23 [ 144.719094][ T8627] __nla_validate_parse: 9 callbacks suppressed [ 144.719112][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 144.978830][ T8643] netlink: 'syz.1.808': attribute type 13 has an invalid length. [ 145.181139][ T8643] gretap0: refused to change device tx_queue_len [ 145.187616][ T8643] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 145.940802][ T8667] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 146.295899][ T8696] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 146.499375][ T8709] tipc: Enabling of bearer rejected, failed to enable media [ 146.691650][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.825'. [ 146.720956][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.827'. [ 146.762259][ T8720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.828'. [ 146.907126][ T8727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.827'. [ 146.925362][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 147.263237][ T8738] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 147.406655][ T8737] bond1: (slave gretap1): making interface the new active one [ 147.457000][ T8737] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 147.584310][ T8739] vlan2: entered allmulticast mode [ 147.589649][ T8739] bond1: entered allmulticast mode [ 147.597536][ T8739] gretap1: entered allmulticast mode [ 147.604480][ T8739] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 147.709829][ T8738] vlan2: entered allmulticast mode [ 147.727740][ T8738] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 147.781267][ T8735] netlink: 'syz.3.830': attribute type 15 has an invalid length. [ 148.025883][ T8765] tipc: Enabling of bearer rejected, failed to enable media [ 148.202793][ T8773] : renamed from bond_slave_0 (while UP) [ 148.251603][ T8776] netlink: 'syz.1.842': attribute type 49 has an invalid length. [ 148.262129][ T8776] sctp: [Deprecated]: syz.1.842 (pid 8776) Use of int in max_burst socket option deprecated. [ 148.262129][ T8776] Use struct sctp_assoc_value instead [ 148.272061][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 148.357524][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.841'. [ 148.538207][ T8783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.844'. [ 148.866594][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 148.942409][ T8800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.956143][ T8801] netlink: 'syz.0.851': attribute type 12 has an invalid length. [ 148.965673][ T8800] netlink: 'syz.0.851': attribute type 12 has an invalid length. [ 149.194636][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 149.667529][ T8830] veth1_to_bond: entered allmulticast mode [ 149.728883][ T8830] __nla_validate_parse: 3 callbacks suppressed [ 149.728899][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 149.853469][ T8830] bond0: (slave bond_slave_1): Releasing backup interface [ 149.908389][ T8830] veth1_to_bond (unregistering): left allmulticast mode [ 150.128068][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.865'. [ 150.159688][ T8843] tipc: Enabled bearer , priority 0 [ 150.167218][ T8843] syzkaller0: entered promiscuous mode [ 150.172704][ T8843] syzkaller0: entered allmulticast mode [ 150.272328][ T8843] tipc: Resetting bearer [ 150.282256][ T8848] syzkaller0: entered promiscuous mode [ 150.302558][ T8848] syzkaller0: entered allmulticast mode [ 150.330158][ T8840] tipc: Resetting bearer [ 150.402509][ T8840] tipc: Disabling bearer [ 150.667048][ T8864] openvswitch: netlink: Message has 4 unknown bytes. [ 150.682666][ T8868] netlink: 'syz.4.871': attribute type 29 has an invalid length. [ 151.127255][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 151.212534][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'. [ 151.592555][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 151.631022][ T8895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 151.791492][ T8904] netlink: 'syz.1.882': attribute type 2 has an invalid length. [ 152.078763][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 152.134378][ T8916] tipc: Enabled bearer , priority 0 [ 152.168734][ T8916] syzkaller0: entered promiscuous mode [ 152.174247][ T8916] syzkaller0: entered allmulticast mode [ 152.219058][ T8923] netlink: 'syz.0.888': attribute type 13 has an invalid length. [ 152.236839][ T30] audit: type=1800 audit(1764542335.365:3): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.888" name="blkio.bfq.time_recursive" dev="tmpfs" ino=910 res=0 errno=0 [ 152.265028][ T8923] netlink: 'syz.0.888': attribute type 17 has an invalid length. [ 152.409423][ T8923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.457182][ T8914] tipc: Resetting bearer [ 152.503613][ T8914] tipc: Disabling bearer [ 152.880345][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 153.034683][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cebc800: rx timeout, send abort [ 153.064267][ T8962] netlink: 'syz.3.901': attribute type 6 has an invalid length. [ 153.348676][ T8973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 153.534854][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cebe400: rx timeout, send abort [ 153.543319][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cebc800: abort rx timeout. Force session deactivation [ 153.569790][ T8977] syzkaller0: entered promiscuous mode [ 153.580366][ T8977] syzkaller0: entered allmulticast mode [ 154.045443][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cebe400: abort rx timeout. Force session deactivation [ 155.806749][ T9020] tipc: Enabling of bearer rejected, failed to enable media [ 156.095775][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056cfe800: rx timeout, send abort [ 156.190498][ T9052] netlink: 'syz.4.928': attribute type 3 has an invalid length. [ 156.200084][ T9050] netlink: 92 bytes leftover after parsing attributes in process `syz.1.927'. [ 156.209592][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.927'. [ 156.314357][ T9057] syzkaller0: entered promiscuous mode [ 156.320847][ T9057] syzkaller0: entered allmulticast mode [ 156.462220][ T9069] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 156.462362][ T9064] tipc: Enabling of bearer rejected, failed to enable media [ 156.595978][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056cfd000: rx timeout, send abort [ 156.604945][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056cfe800: abort rx timeout. Force session deactivation [ 156.940460][ T9104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.944'. [ 157.104233][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056cfd000: abort rx timeout. Force session deactivation [ 157.109728][ T9116] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 157.204728][ T9125] tipc: Enabling of bearer rejected, failed to enable media [ 157.245213][ T9116] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.270930][ T9116] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 157.373408][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cef5800: rx timeout, send abort [ 157.548877][ T9147] netlink: 'syz.4.956': attribute type 1 has an invalid length. [ 157.578117][ T9152] netlink: 'syz.1.959': attribute type 21 has an invalid length. [ 157.582744][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 157.588500][ T9152] netlink: 132 bytes leftover after parsing attributes in process `syz.1.959'. [ 157.596150][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 157.644770][ T9153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.678905][ T9155] FAULT_INJECTION: forcing a failure. [ 157.678905][ T9155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.692163][ T9155] CPU: 1 UID: 0 PID: 9155 Comm: syz.1.960 Not tainted syzkaller #0 PREEMPT(full) [ 157.692186][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.692196][ T9155] Call Trace: [ 157.692204][ T9155] [ 157.692211][ T9155] dump_stack_lvl+0x189/0x250 [ 157.692239][ T9155] ? __pfx____ratelimit+0x10/0x10 [ 157.692259][ T9155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.692281][ T9155] ? __pfx__printk+0x10/0x10 [ 157.692297][ T9155] ? __might_fault+0xb0/0x130 [ 157.692329][ T9155] should_fail_ex+0x414/0x560 [ 157.692357][ T9155] _copy_from_user+0x2d/0xb0 [ 157.692378][ T9155] __sys_bpf+0x1e3/0x860 [ 157.692396][ T9155] ? __pfx___sys_bpf+0x10/0x10 [ 157.692427][ T9155] ? ksys_write+0x22a/0x250 [ 157.692450][ T9155] ? __pfx_ksys_write+0x10/0x10 [ 157.692477][ T9155] __x64_sys_bpf+0x7c/0x90 [ 157.692500][ T9155] do_syscall_64+0xfa/0xfa0 [ 157.692517][ T9155] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.692535][ T9155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.692550][ T9155] ? clear_bhb_loop+0x60/0xb0 [ 157.692569][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.692584][ T9155] RIP: 0033:0x7fc7c6d8f749 [ 157.692599][ T9155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.692612][ T9155] RSP: 002b:00007fc7c7cc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 157.692630][ T9155] RAX: ffffffffffffffda RBX: 00007fc7c6fe5fa0 RCX: 00007fc7c6d8f749 [ 157.692641][ T9155] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 157.692651][ T9155] RBP: 00007fc7c7cc5090 R08: 0000000000000000 R09: 0000000000000000 [ 157.692661][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.692670][ T9155] R13: 00007fc7c6fe6038 R14: 00007fc7c6fe5fa0 R15: 00007ffe300eef08 [ 157.692699][ T9155] [ 157.878466][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f83c400: rx timeout, send abort [ 157.887108][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cef5800: abort rx timeout. Force session deactivation [ 158.163604][ T9167] tipc: Enabled bearer , priority 0 [ 158.173881][ T9166] tipc: Disabling bearer [ 158.184329][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 158.386796][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f83c400: abort rx timeout. Force session deactivation [ 158.424277][ T9188] netlink: 'syz.4.970': attribute type 2 has an invalid length. [ 158.478597][ T9188] : entered promiscuous mode [ 158.549671][ T9187] netlink: 192 bytes leftover after parsing attributes in process `syz.2.971'. [ 158.724618][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057701400: rx timeout, send abort [ 158.734644][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.4.970'. [ 158.844097][ T9197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.973'. [ 159.224743][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057701000: rx timeout, send abort [ 159.233102][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057701400: abort rx timeout. Force session deactivation [ 159.394657][ T9223] tipc: Enabled bearer , priority 0 [ 159.438502][ T9222] tipc: Disabling bearer [ 159.619554][ T9240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.659827][ T9242] netlink: 'syz.1.985': attribute type 1 has an invalid length. [ 159.733028][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057701000: abort rx timeout. Force session deactivation [ 159.779609][ T9251] bond2: (slave gretap2): making interface the new active one [ 159.791105][ T9251] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 159.962301][ T9261] x_tables: duplicate underflow at hook 1 [ 160.020350][ T9264] netlink: 'syz.1.994': attribute type 2 has an invalid length. [ 160.037144][ T9264] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 160.054470][ T9264] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 160.067577][ T9264] team0: Port device team_slave_0 removed [ 160.083016][ T9264] block nbd0: not configured, cannot reconfigure [ 160.192889][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cd16400: rx timeout, send abort [ 160.234744][ T9273] tipc: Enabled bearer , priority 0 [ 160.251609][ T9271] tipc: Enabled bearer , priority 0 [ 160.276601][ T9273] syzkaller0: entered promiscuous mode [ 160.284188][ T9273] syzkaller0: entered allmulticast mode [ 160.306125][ T9270] tipc: Disabling bearer [ 160.466727][ T9274] tipc: Resetting bearer [ 160.522566][ T9272] tipc: Resetting bearer [ 160.572562][ T9272] tipc: Disabling bearer [ 160.693044][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cd17400: rx timeout, send abort [ 160.701447][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cd16400: abort rx timeout. Force session deactivation [ 161.201349][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806cd17400: abort rx timeout. Force session deactivation [ 161.577773][ T9317] __nla_validate_parse: 9 callbacks suppressed [ 161.577792][ T9317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'. [ 161.687737][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 161.703097][ T9317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.720876][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 161.850977][ T9334] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 162.158521][ T9351] syzkaller0: entered promiscuous mode [ 162.188287][ T9351] syzkaller0: entered allmulticast mode [ 162.199512][ T9358] BUG: Bad page state in process syz.2.1019 pfn:23651 [ 162.206622][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023651dc0 pfn:0x23651 [ 162.216768][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.223914][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 162.232900][ T9358] raw: ffff888023651dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 162.241531][ T9358] page dumped because: page_pool leak [ 162.246961][ T9358] page_owner tracks the page as allocated [ 162.252698][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199369817, free_ts 159047152339 [ 162.269774][ T9358] post_alloc_hook+0x234/0x290 [ 162.274573][ T9358] get_page_from_freelist+0x2365/0x2440 [ 162.280230][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 162.286094][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 162.291571][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 162.297721][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 162.302589][ T9358] do_xdp_generic+0x699/0x11a0 [ 162.307402][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 162.313133][ T9358] __netif_receive_skb+0x72/0x380 [ 162.318291][ T9358] netif_receive_skb+0x1cb/0x790 [ 162.323248][ T9358] tun_rx_batched+0x1b9/0x730 [ 162.327975][ T9358] tun_get_user+0x2b65/0x3e90 [ 162.332670][ T9358] tun_chr_write_iter+0x113/0x200 [ 162.337741][ T9358] vfs_write+0x5c9/0xb30 [ 162.341999][ T9358] ksys_write+0x145/0x250 [ 162.346382][ T9358] do_syscall_64+0xfa/0xfa0 [ 162.350894][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 162.357248][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 162.362386][ T9358] __put_partials+0x146/0x170 [ 162.367101][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 162.371875][ T9358] __slab_free+0x2b9/0x390 [ 162.376330][ T9358] qlist_free_all+0x97/0x140 [ 162.380931][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 162.386436][ T9358] __kasan_slab_alloc+0x22/0x80 [ 162.391301][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 162.396804][ T9358] vm_area_dup+0x2b/0x680 [ 162.401140][ T9358] dup_mmap+0x903/0x1b10 [ 162.405430][ T9358] copy_mm+0x13c/0x4b0 [ 162.409510][ T9358] copy_process+0x1706/0x3c00 [ 162.414172][ T9358] kernel_clone+0x21e/0x840 [ 162.418712][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 162.423485][ T9358] do_syscall_64+0xfa/0xfa0 [ 162.428038][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.433933][ T9358] Modules linked in: [ 162.437888][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Not tainted syzkaller #0 PREEMPT(full) [ 162.437911][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.437922][ T9358] Call Trace: [ 162.437930][ T9358] [ 162.437938][ T9358] dump_stack_lvl+0x189/0x250 [ 162.437969][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.437991][ T9358] ? __pfx_print_modules+0x10/0x10 [ 162.438021][ T9358] bad_page+0x180/0x1c0 [ 162.438042][ T9358] __free_frozen_pages+0xce2/0xd30 [ 162.438076][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 162.438122][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 162.438149][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 162.438167][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 162.438219][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 162.438255][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 162.438283][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 162.438341][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 162.438364][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 162.438385][ T9358] ? __pfx___up_read+0x10/0x10 [ 162.438407][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 162.438433][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 162.438454][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 162.438474][ T9358] ? irqentry_exit+0x74/0x90 [ 162.438495][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.438520][ T9358] ? __lock_acquire+0xab9/0xd20 [ 162.438545][ T9358] ? netif_receive_skb+0x115/0x790 [ 162.438570][ T9358] ? netif_receive_skb+0x115/0x790 [ 162.438595][ T9358] __netif_receive_skb+0x72/0x380 [ 162.438610][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 162.438634][ T9358] ? netif_receive_skb+0x115/0x790 [ 162.438657][ T9358] netif_receive_skb+0x1cb/0x790 [ 162.438681][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 162.438701][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 162.438731][ T9358] ? tun_rx_batched+0x160/0x730 [ 162.438755][ T9358] tun_rx_batched+0x1b9/0x730 [ 162.438775][ T9358] ? __lock_acquire+0xab9/0xd20 [ 162.438797][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 162.438821][ T9358] ? tun_get_user+0x272f/0x3e90 [ 162.438857][ T9358] tun_get_user+0x2b65/0x3e90 [ 162.438891][ T9358] ? tun_get_user+0x272f/0x3e90 [ 162.438916][ T9358] ? aa_file_perm+0x44d/0x1550 [ 162.438933][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 162.438950][ T9358] ? __futex_wait+0x34a/0x3d0 [ 162.438977][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 162.438992][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 162.439018][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 162.439035][ T9358] ? __lock_acquire+0xab9/0xd20 [ 162.439053][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.439075][ T9358] ? tun_get+0x1c/0x2f0 [ 162.439101][ T9358] ? tun_get+0x1c/0x2f0 [ 162.439121][ T9358] ? tun_get+0x1c/0x2f0 [ 162.439146][ T9358] tun_chr_write_iter+0x113/0x200 [ 162.439170][ T9358] vfs_write+0x5c9/0xb30 [ 162.439199][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.439221][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 162.439253][ T9358] ? __fget_files+0x2a/0x420 [ 162.439290][ T9358] ksys_write+0x145/0x250 [ 162.439317][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 162.439346][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 162.439372][ T9358] do_syscall_64+0xfa/0xfa0 [ 162.439391][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.439411][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.439428][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 162.439449][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.439465][ T9358] RIP: 0033:0x7fe67c78e1ff [ 162.439481][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.439496][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.439514][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 162.439526][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 162.439538][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 162.439549][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 162.439560][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 162.439592][ T9358] [ 162.439600][ T9358] Disabling lock debugging due to kernel taint [ 162.847580][ T9358] BUG: Bad page state in process syz.2.1019 pfn:23650 [ 162.854428][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023650dc0 pfn:0x23650 [ 162.864535][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 162.871672][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 162.880279][ T9358] raw: ffff888023650dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 162.888881][ T9358] page dumped because: page_pool leak [ 162.894250][ T9358] page_owner tracks the page as allocated [ 162.899977][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199351380, free_ts 159047169903 [ 162.917014][ T9358] post_alloc_hook+0x234/0x290 [ 162.921770][ T9358] get_page_from_freelist+0x2365/0x2440 [ 162.927343][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 162.933147][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 162.938620][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 162.944691][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 162.949619][ T9358] do_xdp_generic+0x699/0x11a0 [ 162.954395][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 162.960131][ T9358] __netif_receive_skb+0x72/0x380 [ 162.965176][ T9358] netif_receive_skb+0x1cb/0x790 [ 162.970122][ T9358] tun_rx_batched+0x1b9/0x730 [ 162.974835][ T9358] tun_get_user+0x2b65/0x3e90 [ 162.979519][ T9358] tun_chr_write_iter+0x113/0x200 [ 162.984543][ T9358] vfs_write+0x5c9/0xb30 [ 162.988826][ T9358] ksys_write+0x145/0x250 [ 162.993158][ T9358] do_syscall_64+0xfa/0xfa0 [ 162.997704][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 163.004028][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 163.009165][ T9358] __put_partials+0x146/0x170 [ 163.013845][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 163.018626][ T9358] __slab_free+0x2b9/0x390 [ 163.023040][ T9358] qlist_free_all+0x97/0x140 [ 163.027653][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 163.033113][ T9358] __kasan_slab_alloc+0x22/0x80 [ 163.038069][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 163.043533][ T9358] vm_area_dup+0x2b/0x680 [ 163.047878][ T9358] dup_mmap+0x903/0x1b10 [ 163.052121][ T9358] copy_mm+0x13c/0x4b0 [ 163.056229][ T9358] copy_process+0x1706/0x3c00 [ 163.060905][ T9358] kernel_clone+0x21e/0x840 [ 163.065422][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 163.070184][ T9358] do_syscall_64+0xfa/0xfa0 [ 163.074671][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.080579][ T9358] Modules linked in: [ 163.084475][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 163.084490][ T9358] Tainted: [B]=BAD_PAGE [ 163.084494][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.084500][ T9358] Call Trace: [ 163.084504][ T9358] [ 163.084509][ T9358] dump_stack_lvl+0x189/0x250 [ 163.084526][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.084538][ T9358] ? __pfx_print_modules+0x10/0x10 [ 163.084551][ T9358] bad_page+0x180/0x1c0 [ 163.084564][ T9358] __free_frozen_pages+0xce2/0xd30 [ 163.084580][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 163.084598][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 163.084611][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 163.084620][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 163.084640][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 163.084655][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 163.084667][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 163.084685][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 163.084702][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 163.084721][ T9358] ? __pfx___up_read+0x10/0x10 [ 163.084743][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 163.084761][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 163.084771][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 163.084781][ T9358] ? irqentry_exit+0x74/0x90 [ 163.084801][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.084820][ T9358] ? __lock_acquire+0xab9/0xd20 [ 163.084838][ T9358] ? netif_receive_skb+0x115/0x790 [ 163.084858][ T9358] ? netif_receive_skb+0x115/0x790 [ 163.084881][ T9358] __netif_receive_skb+0x72/0x380 [ 163.084895][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 163.084916][ T9358] ? netif_receive_skb+0x115/0x790 [ 163.084937][ T9358] netif_receive_skb+0x1cb/0x790 [ 163.084960][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 163.084977][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 163.085001][ T9358] ? tun_rx_batched+0x160/0x730 [ 163.085019][ T9358] tun_rx_batched+0x1b9/0x730 [ 163.085036][ T9358] ? __lock_acquire+0xab9/0xd20 [ 163.085050][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 163.085068][ T9358] ? tun_get_user+0x272f/0x3e90 [ 163.085088][ T9358] tun_get_user+0x2b65/0x3e90 [ 163.085109][ T9358] ? tun_get_user+0x272f/0x3e90 [ 163.085126][ T9358] ? aa_file_perm+0x44d/0x1550 [ 163.085139][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 163.085154][ T9358] ? __futex_wait+0x34a/0x3d0 [ 163.085171][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 163.085184][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 163.085202][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 163.085222][ T9358] ? __lock_acquire+0xab9/0xd20 [ 163.085235][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 163.085251][ T9358] ? tun_get+0x1c/0x2f0 [ 163.085268][ T9358] ? tun_get+0x1c/0x2f0 [ 163.085283][ T9358] ? tun_get+0x1c/0x2f0 [ 163.085300][ T9358] tun_chr_write_iter+0x113/0x200 [ 163.085317][ T9358] vfs_write+0x5c9/0xb30 [ 163.085338][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 163.085354][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 163.085375][ T9358] ? __fget_files+0x2a/0x420 [ 163.085391][ T9358] ksys_write+0x145/0x250 [ 163.085410][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 163.085430][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 163.085447][ T9358] do_syscall_64+0xfa/0xfa0 [ 163.085464][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.085479][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.085493][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 163.085507][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.085521][ T9358] RIP: 0033:0x7fe67c78e1ff [ 163.085534][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 163.085546][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 163.085562][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 163.085573][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 163.085583][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 163.085591][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 163.085600][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 163.085617][ T9358] [ 163.491928][ T9358] BUG: Bad page state in process syz.2.1019 pfn:30bef [ 163.498799][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030befdc0 pfn:0x30bef [ 163.508886][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 163.516017][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 163.524612][ T9358] raw: ffff888030befdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 163.533210][ T9358] page dumped because: page_pool leak [ 163.538589][ T9358] page_owner tracks the page as allocated [ 163.544294][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199325525, free_ts 159047186512 [ 163.561325][ T9358] post_alloc_hook+0x234/0x290 [ 163.566132][ T9358] get_page_from_freelist+0x2365/0x2440 [ 163.571688][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 163.577515][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 163.583059][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 163.589146][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 163.594003][ T9358] do_xdp_generic+0x699/0x11a0 [ 163.598790][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 163.604512][ T9358] __netif_receive_skb+0x72/0x380 [ 163.609641][ T9358] netif_receive_skb+0x1cb/0x790 [ 163.614587][ T9358] tun_rx_batched+0x1b9/0x730 [ 163.619739][ T9358] tun_get_user+0x2b65/0x3e90 [ 163.624420][ T9358] tun_chr_write_iter+0x113/0x200 [ 163.629468][ T9358] vfs_write+0x5c9/0xb30 [ 163.633720][ T9358] ksys_write+0x145/0x250 [ 163.638094][ T9358] do_syscall_64+0xfa/0xfa0 [ 163.642594][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 163.648926][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 163.654041][ T9358] __put_partials+0x146/0x170 [ 163.658729][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 163.663493][ T9358] __slab_free+0x2b9/0x390 [ 163.667928][ T9358] qlist_free_all+0x97/0x140 [ 163.672520][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 163.677998][ T9358] __kasan_slab_alloc+0x22/0x80 [ 163.682848][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 163.688330][ T9358] vm_area_dup+0x2b/0x680 [ 163.692658][ T9358] dup_mmap+0x903/0x1b10 [ 163.696915][ T9358] copy_mm+0x13c/0x4b0 [ 163.700982][ T9358] copy_process+0x1706/0x3c00 [ 163.705681][ T9358] kernel_clone+0x21e/0x840 [ 163.710185][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 163.714969][ T9358] do_syscall_64+0xfa/0xfa0 [ 163.719473][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.725386][ T9358] Modules linked in: [ 163.729282][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 163.729298][ T9358] Tainted: [B]=BAD_PAGE [ 163.729301][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.729308][ T9358] Call Trace: [ 163.729312][ T9358] [ 163.729317][ T9358] dump_stack_lvl+0x189/0x250 [ 163.729335][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.729348][ T9358] ? __pfx_print_modules+0x10/0x10 [ 163.729361][ T9358] bad_page+0x180/0x1c0 [ 163.729373][ T9358] __free_frozen_pages+0xce2/0xd30 [ 163.729389][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 163.729410][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 163.729424][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 163.729433][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 163.729452][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 163.729468][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 163.729480][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 163.729511][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 163.729530][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 163.729550][ T9358] ? __pfx___up_read+0x10/0x10 [ 163.729565][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 163.729577][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 163.729587][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 163.729596][ T9358] ? irqentry_exit+0x74/0x90 [ 163.729607][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.729619][ T9358] ? __lock_acquire+0xab9/0xd20 [ 163.729630][ T9358] ? netif_receive_skb+0x115/0x790 [ 163.729644][ T9358] ? netif_receive_skb+0x115/0x790 [ 163.729657][ T9358] __netif_receive_skb+0x72/0x380 [ 163.729666][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 163.729678][ T9358] ? netif_receive_skb+0x115/0x790 [ 163.729691][ T9358] netif_receive_skb+0x1cb/0x790 [ 163.729704][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 163.729715][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 163.729729][ T9358] ? tun_rx_batched+0x160/0x730 [ 163.729741][ T9358] tun_rx_batched+0x1b9/0x730 [ 163.729757][ T9358] ? __lock_acquire+0xab9/0xd20 [ 163.729766][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 163.729778][ T9358] ? tun_get_user+0x272f/0x3e90 [ 163.729792][ T9358] tun_get_user+0x2b65/0x3e90 [ 163.729806][ T9358] ? tun_get_user+0x272f/0x3e90 [ 163.729818][ T9358] ? aa_file_perm+0x44d/0x1550 [ 163.729827][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 163.729837][ T9358] ? __futex_wait+0x34a/0x3d0 [ 163.729849][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 163.729858][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 163.729870][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 163.729880][ T9358] ? __lock_acquire+0xab9/0xd20 [ 163.729889][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 163.729899][ T9358] ? tun_get+0x1c/0x2f0 [ 163.729911][ T9358] ? tun_get+0x1c/0x2f0 [ 163.729922][ T9358] ? tun_get+0x1c/0x2f0 [ 163.729933][ T9358] tun_chr_write_iter+0x113/0x200 [ 163.729945][ T9358] vfs_write+0x5c9/0xb30 [ 163.729959][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 163.729970][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 163.729985][ T9358] ? __fget_files+0x2a/0x420 [ 163.729996][ T9358] ksys_write+0x145/0x250 [ 163.730009][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 163.730022][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 163.730034][ T9358] do_syscall_64+0xfa/0xfa0 [ 163.730045][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.730055][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.730064][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 163.730075][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.730084][ T9358] RIP: 0033:0x7fe67c78e1ff [ 163.730094][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 163.730102][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 163.730113][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 163.730121][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 163.730127][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 163.730133][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 163.730143][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 163.730154][ T9358] [ 163.730161][ T9358] BUG: Bad page state in process syz.2.1019 pfn:30bee [ 164.145352][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030beedc0 pfn:0x30bee [ 164.155459][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 164.162582][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 164.171196][ T9358] raw: ffff888030beedc0 0000000000000001 00000000ffffffff 0000000000000000 [ 164.179792][ T9358] page dumped because: page_pool leak [ 164.185177][ T9358] page_owner tracks the page as allocated [ 164.190886][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199308557, free_ts 159047203550 [ 164.207932][ T9358] post_alloc_hook+0x234/0x290 [ 164.212728][ T9358] get_page_from_freelist+0x2365/0x2440 [ 164.218299][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 164.224109][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 164.229596][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 164.235690][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 164.240530][ T9358] do_xdp_generic+0x699/0x11a0 [ 164.245338][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 164.251063][ T9358] __netif_receive_skb+0x72/0x380 [ 164.256223][ T9358] netif_receive_skb+0x1cb/0x790 [ 164.261178][ T9358] tun_rx_batched+0x1b9/0x730 [ 164.265902][ T9358] tun_get_user+0x2b65/0x3e90 [ 164.270586][ T9358] tun_chr_write_iter+0x113/0x200 [ 164.275628][ T9358] vfs_write+0x5c9/0xb30 [ 164.279888][ T9358] ksys_write+0x145/0x250 [ 164.284204][ T9358] do_syscall_64+0xfa/0xfa0 [ 164.288730][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 164.295068][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 164.300174][ T9358] __put_partials+0x146/0x170 [ 164.304951][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 164.309715][ T9358] __slab_free+0x2b9/0x390 [ 164.314115][ T9358] qlist_free_all+0x97/0x140 [ 164.318725][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 164.324185][ T9358] __kasan_slab_alloc+0x22/0x80 [ 164.329050][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 164.334511][ T9358] vm_area_dup+0x2b/0x680 [ 164.338857][ T9358] dup_mmap+0x903/0x1b10 [ 164.343105][ T9358] copy_mm+0x13c/0x4b0 [ 164.347195][ T9358] copy_process+0x1706/0x3c00 [ 164.351879][ T9358] kernel_clone+0x21e/0x840 [ 164.356398][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 164.361162][ T9358] do_syscall_64+0xfa/0xfa0 [ 164.365724][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.371632][ T9358] Modules linked in: [ 164.375560][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 164.375584][ T9358] Tainted: [B]=BAD_PAGE [ 164.375590][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.375600][ T9358] Call Trace: [ 164.375607][ T9358] [ 164.375615][ T9358] dump_stack_lvl+0x189/0x250 [ 164.375644][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.375666][ T9358] ? __pfx_print_modules+0x10/0x10 [ 164.375692][ T9358] bad_page+0x180/0x1c0 [ 164.375713][ T9358] __free_frozen_pages+0xce2/0xd30 [ 164.375740][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 164.375774][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 164.375798][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 164.375813][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 164.375849][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 164.375877][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 164.375899][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 164.375933][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 164.375952][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 164.375973][ T9358] ? __pfx___up_read+0x10/0x10 [ 164.375995][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 164.376016][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 164.376049][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 164.376074][ T9358] ? irqentry_exit+0x74/0x90 [ 164.376094][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.376116][ T9358] ? __lock_acquire+0xab9/0xd20 [ 164.376137][ T9358] ? netif_receive_skb+0x115/0x790 [ 164.376161][ T9358] ? netif_receive_skb+0x115/0x790 [ 164.376185][ T9358] __netif_receive_skb+0x72/0x380 [ 164.376200][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 164.376222][ T9358] ? netif_receive_skb+0x115/0x790 [ 164.376245][ T9358] netif_receive_skb+0x1cb/0x790 [ 164.376269][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 164.376288][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 164.376314][ T9358] ? tun_rx_batched+0x160/0x730 [ 164.376336][ T9358] tun_rx_batched+0x1b9/0x730 [ 164.376356][ T9358] ? __lock_acquire+0xab9/0xd20 [ 164.376374][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 164.376396][ T9358] ? tun_get_user+0x272f/0x3e90 [ 164.376423][ T9358] tun_get_user+0x2b65/0x3e90 [ 164.376449][ T9358] ? tun_get_user+0x272f/0x3e90 [ 164.376471][ T9358] ? aa_file_perm+0x44d/0x1550 [ 164.376488][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 164.376507][ T9358] ? __futex_wait+0x34a/0x3d0 [ 164.376529][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 164.376545][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 164.376569][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 164.376586][ T9358] ? __lock_acquire+0xab9/0xd20 [ 164.376603][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 164.376623][ T9358] ? tun_get+0x1c/0x2f0 [ 164.376644][ T9358] ? tun_get+0x1c/0x2f0 [ 164.376663][ T9358] ? tun_get+0x1c/0x2f0 [ 164.376684][ T9358] tun_chr_write_iter+0x113/0x200 [ 164.376707][ T9358] vfs_write+0x5c9/0xb30 [ 164.376732][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 164.376753][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 164.376788][ T9358] ? __fget_files+0x2a/0x420 [ 164.376806][ T9358] ksys_write+0x145/0x250 [ 164.376829][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 164.376854][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 164.376877][ T9358] do_syscall_64+0xfa/0xfa0 [ 164.376896][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.376916][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.376934][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 164.376951][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.376964][ T9358] RIP: 0033:0x7fe67c78e1ff [ 164.376978][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 164.376992][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 164.377010][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 164.377022][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 164.377033][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.377045][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 164.377056][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 164.377083][ T9358] [ 164.377095][ T9358] BUG: Bad page state in process syz.2.1019 pfn:30bed [ 164.791294][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888030beddc0 pfn:0x30bed [ 164.801368][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 164.808520][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 164.817141][ T9358] raw: ffff888030beddc0 0000000000000001 00000000ffffffff 0000000000000000 [ 164.825744][ T9358] page dumped because: page_pool leak [ 164.831113][ T9358] page_owner tracks the page as allocated [ 164.836854][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199291697, free_ts 159047220941 [ 164.853892][ T9358] post_alloc_hook+0x234/0x290 [ 164.858680][ T9358] get_page_from_freelist+0x2365/0x2440 [ 164.864224][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 164.870078][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 164.875576][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 164.881635][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 164.886511][ T9358] do_xdp_generic+0x699/0x11a0 [ 164.891278][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 164.897012][ T9358] __netif_receive_skb+0x72/0x380 [ 164.902055][ T9358] netif_receive_skb+0x1cb/0x790 [ 164.907020][ T9358] tun_rx_batched+0x1b9/0x730 [ 164.911709][ T9358] tun_get_user+0x2b65/0x3e90 [ 164.916421][ T9358] tun_chr_write_iter+0x113/0x200 [ 164.921455][ T9358] vfs_write+0x5c9/0xb30 [ 164.925726][ T9358] ksys_write+0x145/0x250 [ 164.930062][ T9358] do_syscall_64+0xfa/0xfa0 [ 164.934553][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 164.940892][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 164.946043][ T9358] __put_partials+0x146/0x170 [ 164.950722][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 164.955497][ T9358] __slab_free+0x2b9/0x390 [ 164.959916][ T9358] qlist_free_all+0x97/0x140 [ 164.964512][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 164.969996][ T9358] __kasan_slab_alloc+0x22/0x80 [ 164.974878][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 164.980336][ T9358] vm_area_dup+0x2b/0x680 [ 164.984647][ T9358] dup_mmap+0x903/0x1b10 [ 164.988914][ T9358] copy_mm+0x13c/0x4b0 [ 164.992988][ T9358] copy_process+0x1706/0x3c00 [ 164.997696][ T9358] kernel_clone+0x21e/0x840 [ 165.002207][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 165.007016][ T9358] do_syscall_64+0xfa/0xfa0 [ 165.011537][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.017444][ T9358] Modules linked in: [ 165.021347][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 165.021370][ T9358] Tainted: [B]=BAD_PAGE [ 165.021376][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.021386][ T9358] Call Trace: [ 165.021392][ T9358] [ 165.021399][ T9358] dump_stack_lvl+0x189/0x250 [ 165.021425][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.021447][ T9358] ? __pfx_print_modules+0x10/0x10 [ 165.021472][ T9358] bad_page+0x180/0x1c0 [ 165.021493][ T9358] __free_frozen_pages+0xce2/0xd30 [ 165.021523][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 165.021559][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 165.021580][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 165.021596][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 165.021631][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 165.021659][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 165.021681][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 165.021714][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 165.021730][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 165.021748][ T9358] ? __pfx___up_read+0x10/0x10 [ 165.021767][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 165.021788][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 165.021805][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 165.021821][ T9358] ? irqentry_exit+0x74/0x90 [ 165.021839][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.021860][ T9358] ? __lock_acquire+0xab9/0xd20 [ 165.021877][ T9358] ? netif_receive_skb+0x115/0x790 [ 165.021901][ T9358] ? netif_receive_skb+0x115/0x790 [ 165.021925][ T9358] __netif_receive_skb+0x72/0x380 [ 165.021941][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 165.021961][ T9358] ? netif_receive_skb+0x115/0x790 [ 165.021984][ T9358] netif_receive_skb+0x1cb/0x790 [ 165.022008][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 165.022027][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 165.022053][ T9358] ? tun_rx_batched+0x160/0x730 [ 165.022074][ T9358] tun_rx_batched+0x1b9/0x730 [ 165.022094][ T9358] ? __lock_acquire+0xab9/0xd20 [ 165.022112][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 165.022135][ T9358] ? tun_get_user+0x272f/0x3e90 [ 165.022161][ T9358] tun_get_user+0x2b65/0x3e90 [ 165.022187][ T9358] ? tun_get_user+0x272f/0x3e90 [ 165.022209][ T9358] ? aa_file_perm+0x44d/0x1550 [ 165.022226][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 165.022245][ T9358] ? __futex_wait+0x34a/0x3d0 [ 165.022268][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 165.022285][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 165.022308][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 165.022332][ T9358] ? __lock_acquire+0xab9/0xd20 [ 165.022350][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.022369][ T9358] ? tun_get+0x1c/0x2f0 [ 165.022392][ T9358] ? tun_get+0x1c/0x2f0 [ 165.022411][ T9358] ? tun_get+0x1c/0x2f0 [ 165.022432][ T9358] tun_chr_write_iter+0x113/0x200 [ 165.022454][ T9358] vfs_write+0x5c9/0xb30 [ 165.022479][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 165.022499][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 165.022525][ T9358] ? __fget_files+0x2a/0x420 [ 165.022546][ T9358] ksys_write+0x145/0x250 [ 165.022569][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 165.022593][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 165.022615][ T9358] do_syscall_64+0xfa/0xfa0 [ 165.022634][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.022654][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.022671][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 165.022690][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.022707][ T9358] RIP: 0033:0x7fe67c78e1ff [ 165.022722][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 165.022738][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 165.022758][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 165.022772][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 165.022784][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.022796][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 165.022807][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 165.022828][ T9358] [ 165.022837][ T9358] BUG: Bad page state in process syz.2.1019 pfn:57a5e [ 165.437259][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057a5edc0 pfn:0x57a5e [ 165.447339][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 165.454471][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 165.463173][ T9358] raw: ffff888057a5edc0 0000000000000001 00000000ffffffff 0000000000000000 [ 165.471772][ T9358] page dumped because: page_pool leak [ 165.477151][ T9358] page_owner tracks the page as allocated [ 165.482860][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199274343, free_ts 159047276599 [ 165.499898][ T9358] post_alloc_hook+0x234/0x290 [ 165.504669][ T9358] get_page_from_freelist+0x2365/0x2440 [ 165.510278][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 165.516119][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 165.521579][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 165.527691][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 165.532556][ T9358] do_xdp_generic+0x699/0x11a0 [ 165.537357][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 165.543073][ T9358] __netif_receive_skb+0x72/0x380 [ 165.548124][ T9358] netif_receive_skb+0x1cb/0x790 [ 165.553062][ T9358] tun_rx_batched+0x1b9/0x730 [ 165.557757][ T9358] tun_get_user+0x2b65/0x3e90 [ 165.562434][ T9358] tun_chr_write_iter+0x113/0x200 [ 165.567472][ T9358] vfs_write+0x5c9/0xb30 [ 165.571719][ T9358] ksys_write+0x145/0x250 [ 165.576069][ T9358] do_syscall_64+0xfa/0xfa0 [ 165.580569][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 165.586909][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 165.592025][ T9358] __put_partials+0x146/0x170 [ 165.596721][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 165.601488][ T9358] __slab_free+0x2b9/0x390 [ 165.605947][ T9358] qlist_free_all+0x97/0x140 [ 165.610544][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 165.616039][ T9358] __kasan_slab_alloc+0x22/0x80 [ 165.620886][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 165.626375][ T9358] vm_area_dup+0x2b/0x680 [ 165.630702][ T9358] dup_mmap+0x903/0x1b10 [ 165.634965][ T9358] copy_mm+0x13c/0x4b0 [ 165.639039][ T9358] copy_process+0x1706/0x3c00 [ 165.643710][ T9358] kernel_clone+0x21e/0x840 [ 165.648270][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 165.653041][ T9358] do_syscall_64+0xfa/0xfa0 [ 165.657591][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.663511][ T9358] Modules linked in: [ 165.667451][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 165.667475][ T9358] Tainted: [B]=BAD_PAGE [ 165.667481][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.667491][ T9358] Call Trace: [ 165.667498][ T9358] [ 165.667505][ T9358] dump_stack_lvl+0x189/0x250 [ 165.667532][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.667555][ T9358] ? __pfx_print_modules+0x10/0x10 [ 165.667580][ T9358] bad_page+0x180/0x1c0 [ 165.667601][ T9358] __free_frozen_pages+0xce2/0xd30 [ 165.667630][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 165.667663][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 165.667687][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 165.667703][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 165.667736][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 165.667764][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 165.667785][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 165.667820][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 165.667839][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 165.667860][ T9358] ? __pfx___up_read+0x10/0x10 [ 165.667883][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 165.667904][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 165.667924][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 165.667943][ T9358] ? irqentry_exit+0x74/0x90 [ 165.667962][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.667984][ T9358] ? __lock_acquire+0xab9/0xd20 [ 165.668004][ T9358] ? netif_receive_skb+0x115/0x790 [ 165.668028][ T9358] ? netif_receive_skb+0x115/0x790 [ 165.668051][ T9358] __netif_receive_skb+0x72/0x380 [ 165.668065][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 165.668086][ T9358] ? netif_receive_skb+0x115/0x790 [ 165.668110][ T9358] netif_receive_skb+0x1cb/0x790 [ 165.668134][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 165.668153][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 165.668180][ T9358] ? tun_rx_batched+0x160/0x730 [ 165.668203][ T9358] tun_rx_batched+0x1b9/0x730 [ 165.668232][ T9358] ? __lock_acquire+0xab9/0xd20 [ 165.668251][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 165.668274][ T9358] ? tun_get_user+0x272f/0x3e90 [ 165.668298][ T9358] tun_get_user+0x2b65/0x3e90 [ 165.668325][ T9358] ? tun_get_user+0x272f/0x3e90 [ 165.668346][ T9358] ? aa_file_perm+0x44d/0x1550 [ 165.668363][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 165.668382][ T9358] ? __futex_wait+0x34a/0x3d0 [ 165.668405][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 165.668421][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 165.668444][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 165.668460][ T9358] ? __lock_acquire+0xab9/0xd20 [ 165.668478][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 165.668497][ T9358] ? tun_get+0x1c/0x2f0 [ 165.668519][ T9358] ? tun_get+0x1c/0x2f0 [ 165.668539][ T9358] ? tun_get+0x1c/0x2f0 [ 165.668559][ T9358] tun_chr_write_iter+0x113/0x200 [ 165.668581][ T9358] vfs_write+0x5c9/0xb30 [ 165.668606][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 165.668627][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 165.668654][ T9358] ? __fget_files+0x2a/0x420 [ 165.668674][ T9358] ksys_write+0x145/0x250 [ 165.668699][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 165.668723][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 165.668745][ T9358] do_syscall_64+0xfa/0xfa0 [ 165.668765][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.668785][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.668802][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 165.668821][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.668838][ T9358] RIP: 0033:0x7fe67c78e1ff [ 165.668853][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 165.668869][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 165.668889][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 165.668904][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 165.668916][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 165.668928][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 165.668940][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 165.668961][ T9358] [ 165.668972][ T9358] BUG: Bad page state in process syz.2.1019 pfn:57a5b [ 166.083035][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057a5bdc0 pfn:0x57a5b [ 166.093127][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 166.100274][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 166.108874][ T9358] raw: ffff888057a5bdc0 0000000000000001 00000000ffffffff 0000000000000000 [ 166.117550][ T9358] page dumped because: page_pool leak [ 166.122911][ T9358] page_owner tracks the page as allocated [ 166.128637][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199256783, free_ts 159047294153 [ 166.145677][ T9358] post_alloc_hook+0x234/0x290 [ 166.150432][ T9358] get_page_from_freelist+0x2365/0x2440 [ 166.155996][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 166.161810][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 166.167368][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 166.173436][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 166.178303][ T9358] do_xdp_generic+0x699/0x11a0 [ 166.183073][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 166.188806][ T9358] __netif_receive_skb+0x72/0x380 [ 166.193823][ T9358] netif_receive_skb+0x1cb/0x790 [ 166.198773][ T9358] tun_rx_batched+0x1b9/0x730 [ 166.203450][ T9358] tun_get_user+0x2b65/0x3e90 [ 166.208153][ T9358] tun_chr_write_iter+0x113/0x200 [ 166.213186][ T9358] vfs_write+0x5c9/0xb30 [ 166.217461][ T9358] ksys_write+0x145/0x250 [ 166.221792][ T9358] do_syscall_64+0xfa/0xfa0 [ 166.226332][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 166.232656][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 166.237801][ T9358] __put_partials+0x146/0x170 [ 166.242480][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 166.247306][ T9358] __slab_free+0x2b9/0x390 [ 166.251719][ T9358] qlist_free_all+0x97/0x140 [ 166.256321][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 166.261778][ T9358] __kasan_slab_alloc+0x22/0x80 [ 166.266643][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 166.272106][ T9358] vm_area_dup+0x2b/0x680 [ 166.276465][ T9358] dup_mmap+0x903/0x1b10 [ 166.280709][ T9358] copy_mm+0x13c/0x4b0 [ 166.284759][ T9358] copy_process+0x1706/0x3c00 [ 166.289447][ T9358] kernel_clone+0x21e/0x840 [ 166.293946][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 166.298729][ T9358] do_syscall_64+0xfa/0xfa0 [ 166.303243][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.309151][ T9358] Modules linked in: [ 166.313043][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 166.313058][ T9358] Tainted: [B]=BAD_PAGE [ 166.313062][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.313069][ T9358] Call Trace: [ 166.313073][ T9358] [ 166.313078][ T9358] dump_stack_lvl+0x189/0x250 [ 166.313095][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.313107][ T9358] ? __pfx_print_modules+0x10/0x10 [ 166.313121][ T9358] bad_page+0x180/0x1c0 [ 166.313133][ T9358] __free_frozen_pages+0xce2/0xd30 [ 166.313154][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 166.313174][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 166.313187][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 166.313197][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 166.313216][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 166.313232][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 166.313244][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 166.313263][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 166.313274][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 166.313285][ T9358] ? __pfx___up_read+0x10/0x10 [ 166.313298][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 166.313310][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 166.313320][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 166.313330][ T9358] ? irqentry_exit+0x74/0x90 [ 166.313341][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.313353][ T9358] ? __lock_acquire+0xab9/0xd20 [ 166.313364][ T9358] ? netif_receive_skb+0x115/0x790 [ 166.313377][ T9358] ? netif_receive_skb+0x115/0x790 [ 166.313391][ T9358] __netif_receive_skb+0x72/0x380 [ 166.313400][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 166.313413][ T9358] ? netif_receive_skb+0x115/0x790 [ 166.313426][ T9358] netif_receive_skb+0x1cb/0x790 [ 166.313439][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 166.313450][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 166.313464][ T9358] ? tun_rx_batched+0x160/0x730 [ 166.313477][ T9358] tun_rx_batched+0x1b9/0x730 [ 166.313488][ T9358] ? __lock_acquire+0xab9/0xd20 [ 166.313499][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 166.313511][ T9358] ? tun_get_user+0x272f/0x3e90 [ 166.313525][ T9358] tun_get_user+0x2b65/0x3e90 [ 166.313539][ T9358] ? tun_get_user+0x272f/0x3e90 [ 166.313551][ T9358] ? aa_file_perm+0x44d/0x1550 [ 166.313560][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 166.313571][ T9358] ? __futex_wait+0x34a/0x3d0 [ 166.313583][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 166.313592][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.313604][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 166.313614][ T9358] ? __lock_acquire+0xab9/0xd20 [ 166.313623][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.313633][ T9358] ? tun_get+0x1c/0x2f0 [ 166.313645][ T9358] ? tun_get+0x1c/0x2f0 [ 166.313655][ T9358] ? tun_get+0x1c/0x2f0 [ 166.313667][ T9358] tun_chr_write_iter+0x113/0x200 [ 166.313679][ T9358] vfs_write+0x5c9/0xb30 [ 166.313693][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 166.313704][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 166.313719][ T9358] ? __fget_files+0x2a/0x420 [ 166.313730][ T9358] ksys_write+0x145/0x250 [ 166.313743][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 166.313756][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 166.313769][ T9358] do_syscall_64+0xfa/0xfa0 [ 166.313779][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.313790][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.313800][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 166.313810][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.313826][ T9358] RIP: 0033:0x7fe67c78e1ff [ 166.313841][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 166.313857][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 166.313876][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 166.313885][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 166.313891][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.313900][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 166.313906][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 166.313917][ T9358] [ 166.313925][ T9358] BUG: Bad page state in process syz.2.1019 pfn:57a5a [ 166.728035][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057a5adc0 pfn:0x57a5a [ 166.738116][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 166.745246][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 166.753807][ T9358] raw: ffff888057a5adc0 0000000000000001 00000000ffffffff 0000000000000000 [ 166.762394][ T9358] page dumped because: page_pool leak [ 166.767771][ T9358] page_owner tracks the page as allocated [ 166.773463][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199239129, free_ts 159047310295 [ 166.790494][ T9358] post_alloc_hook+0x234/0x290 [ 166.795282][ T9358] get_page_from_freelist+0x2365/0x2440 [ 166.800809][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 166.806637][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 166.812100][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 166.818206][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 166.823056][ T9358] do_xdp_generic+0x699/0x11a0 [ 166.827844][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 166.833561][ T9358] __netif_receive_skb+0x72/0x380 [ 166.838599][ T9358] netif_receive_skb+0x1cb/0x790 [ 166.843543][ T9358] tun_rx_batched+0x1b9/0x730 [ 166.848242][ T9358] tun_get_user+0x2b65/0x3e90 [ 166.852920][ T9358] tun_chr_write_iter+0x113/0x200 [ 166.857959][ T9358] vfs_write+0x5c9/0xb30 [ 166.862201][ T9358] ksys_write+0x145/0x250 [ 166.866547][ T9358] do_syscall_64+0xfa/0xfa0 [ 166.871049][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 166.877395][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 166.882516][ T9358] __put_partials+0x146/0x170 [ 166.887203][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 166.891965][ T9358] __slab_free+0x2b9/0x390 [ 166.896415][ T9358] qlist_free_all+0x97/0x140 [ 166.901004][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 166.906482][ T9358] __kasan_slab_alloc+0x22/0x80 [ 166.911332][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 166.916803][ T9358] vm_area_dup+0x2b/0x680 [ 166.921128][ T9358] dup_mmap+0x903/0x1b10 [ 166.925384][ T9358] copy_mm+0x13c/0x4b0 [ 166.929448][ T9358] copy_process+0x1706/0x3c00 [ 166.934113][ T9358] kernel_clone+0x21e/0x840 [ 166.938648][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 166.943427][ T9358] do_syscall_64+0xfa/0xfa0 [ 166.947967][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.953876][ T9358] Modules linked in: [ 166.957795][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 166.957819][ T9358] Tainted: [B]=BAD_PAGE [ 166.957823][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.957834][ T9358] Call Trace: [ 166.957840][ T9358] [ 166.957847][ T9358] dump_stack_lvl+0x189/0x250 [ 166.957874][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.957894][ T9358] ? __pfx_print_modules+0x10/0x10 [ 166.957918][ T9358] bad_page+0x180/0x1c0 [ 166.957937][ T9358] __free_frozen_pages+0xce2/0xd30 [ 166.957966][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 166.958000][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 166.958024][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 166.958040][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 166.958085][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 166.958113][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 166.958136][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 166.958169][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 166.958188][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 166.958209][ T9358] ? __pfx___up_read+0x10/0x10 [ 166.958231][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 166.958252][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 166.958271][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 166.958289][ T9358] ? irqentry_exit+0x74/0x90 [ 166.958307][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.958327][ T9358] ? __lock_acquire+0xab9/0xd20 [ 166.958343][ T9358] ? netif_receive_skb+0x115/0x790 [ 166.958365][ T9358] ? netif_receive_skb+0x115/0x790 [ 166.958387][ T9358] __netif_receive_skb+0x72/0x380 [ 166.958400][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 166.958419][ T9358] ? netif_receive_skb+0x115/0x790 [ 166.958440][ T9358] netif_receive_skb+0x1cb/0x790 [ 166.958461][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 166.958478][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 166.958503][ T9358] ? tun_rx_batched+0x160/0x730 [ 166.958524][ T9358] tun_rx_batched+0x1b9/0x730 [ 166.958544][ T9358] ? __lock_acquire+0xab9/0xd20 [ 166.958561][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 166.958583][ T9358] ? tun_get_user+0x272f/0x3e90 [ 166.958608][ T9358] tun_get_user+0x2b65/0x3e90 [ 166.958632][ T9358] ? tun_get_user+0x272f/0x3e90 [ 166.958653][ T9358] ? aa_file_perm+0x44d/0x1550 [ 166.958670][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 166.958688][ T9358] ? __futex_wait+0x34a/0x3d0 [ 166.958707][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 166.958721][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.958741][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 166.958755][ T9358] ? __lock_acquire+0xab9/0xd20 [ 166.958771][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.958790][ T9358] ? tun_get+0x1c/0x2f0 [ 166.958811][ T9358] ? tun_get+0x1c/0x2f0 [ 166.958826][ T9358] ? tun_get+0x1c/0x2f0 [ 166.958846][ T9358] tun_chr_write_iter+0x113/0x200 [ 166.958864][ T9358] vfs_write+0x5c9/0xb30 [ 166.958887][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 166.958907][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 166.958933][ T9358] ? __fget_files+0x2a/0x420 [ 166.958952][ T9358] ksys_write+0x145/0x250 [ 166.958975][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 166.958999][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 166.959021][ T9358] do_syscall_64+0xfa/0xfa0 [ 166.959040][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.959068][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.959086][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 166.959104][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.959121][ T9358] RIP: 0033:0x7fe67c78e1ff [ 166.959137][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 166.959153][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 166.959173][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 166.959186][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 166.959198][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.959210][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 166.959221][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 166.959242][ T9358] [ 166.959252][ T9358] BUG: Bad page state in process syz.2.1019 pfn:57a59 [ 167.373044][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057a59dc0 pfn:0x57a59 [ 167.383144][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 167.390311][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 167.399033][ T9358] raw: ffff888057a59dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 167.407639][ T9358] page dumped because: page_pool leak [ 167.413006][ T9358] page_owner tracks the page as allocated [ 167.418756][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199221051, free_ts 159047327416 [ 167.435790][ T9358] post_alloc_hook+0x234/0x290 [ 167.440548][ T9358] get_page_from_freelist+0x2365/0x2440 [ 167.446126][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 167.452031][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 167.457518][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 167.463589][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 167.468453][ T9358] do_xdp_generic+0x699/0x11a0 [ 167.473216][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 167.478954][ T9358] __netif_receive_skb+0x72/0x380 [ 167.483991][ T9358] netif_receive_skb+0x1cb/0x790 [ 167.488965][ T9358] tun_rx_batched+0x1b9/0x730 [ 167.493650][ T9358] tun_get_user+0x2b65/0x3e90 [ 167.498335][ T9358] tun_chr_write_iter+0x113/0x200 [ 167.503358][ T9358] vfs_write+0x5c9/0xb30 [ 167.507613][ T9358] ksys_write+0x145/0x250 [ 167.511980][ T9358] do_syscall_64+0xfa/0xfa0 [ 167.516506][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 167.522824][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 167.527969][ T9358] __put_partials+0x146/0x170 [ 167.532648][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 167.537446][ T9358] __slab_free+0x2b9/0x390 [ 167.541861][ T9358] qlist_free_all+0x97/0x140 [ 167.546473][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 167.551927][ T9358] __kasan_slab_alloc+0x22/0x80 [ 167.556786][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 167.562241][ T9358] vm_area_dup+0x2b/0x680 [ 167.566581][ T9358] dup_mmap+0x903/0x1b10 [ 167.570825][ T9358] copy_mm+0x13c/0x4b0 [ 167.574908][ T9358] copy_process+0x1706/0x3c00 [ 167.579581][ T9358] kernel_clone+0x21e/0x840 [ 167.584063][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 167.588843][ T9358] do_syscall_64+0xfa/0xfa0 [ 167.593345][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.599252][ T9358] Modules linked in: [ 167.603156][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 167.603171][ T9358] Tainted: [B]=BAD_PAGE [ 167.603175][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.603182][ T9358] Call Trace: [ 167.603186][ T9358] [ 167.603191][ T9358] dump_stack_lvl+0x189/0x250 [ 167.603208][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.603221][ T9358] ? __pfx_print_modules+0x10/0x10 [ 167.603234][ T9358] bad_page+0x180/0x1c0 [ 167.603246][ T9358] __free_frozen_pages+0xce2/0xd30 [ 167.603263][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 167.603282][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 167.603295][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 167.603304][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 167.603325][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 167.603340][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 167.603353][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 167.603371][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 167.603382][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 167.603394][ T9358] ? __pfx___up_read+0x10/0x10 [ 167.603406][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 167.603418][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 167.603428][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 167.603438][ T9358] ? irqentry_exit+0x74/0x90 [ 167.603450][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.603461][ T9358] ? __lock_acquire+0xab9/0xd20 [ 167.603472][ T9358] ? netif_receive_skb+0x115/0x790 [ 167.603486][ T9358] ? netif_receive_skb+0x115/0x790 [ 167.603500][ T9358] __netif_receive_skb+0x72/0x380 [ 167.603508][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 167.603521][ T9358] ? netif_receive_skb+0x115/0x790 [ 167.603534][ T9358] netif_receive_skb+0x1cb/0x790 [ 167.603547][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 167.603557][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 167.603572][ T9358] ? tun_rx_batched+0x160/0x730 [ 167.603584][ T9358] tun_rx_batched+0x1b9/0x730 [ 167.603596][ T9358] ? __lock_acquire+0xab9/0xd20 [ 167.603606][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 167.603625][ T9358] ? tun_get_user+0x272f/0x3e90 [ 167.603650][ T9358] tun_get_user+0x2b65/0x3e90 [ 167.603676][ T9358] ? tun_get_user+0x272f/0x3e90 [ 167.603692][ T9358] ? aa_file_perm+0x44d/0x1550 [ 167.603701][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 167.603712][ T9358] ? __futex_wait+0x34a/0x3d0 [ 167.603724][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 167.603733][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 167.603748][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 167.603760][ T9358] ? __lock_acquire+0xab9/0xd20 [ 167.603773][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 167.603784][ T9358] ? tun_get+0x1c/0x2f0 [ 167.603796][ T9358] ? tun_get+0x1c/0x2f0 [ 167.603806][ T9358] ? tun_get+0x1c/0x2f0 [ 167.603818][ T9358] tun_chr_write_iter+0x113/0x200 [ 167.603830][ T9358] vfs_write+0x5c9/0xb30 [ 167.603844][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 167.603855][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 167.603870][ T9358] ? __fget_files+0x2a/0x420 [ 167.603882][ T9358] ksys_write+0x145/0x250 [ 167.603895][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 167.603908][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 167.603921][ T9358] do_syscall_64+0xfa/0xfa0 [ 167.603931][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.603942][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.603951][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 167.603961][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.603971][ T9358] RIP: 0033:0x7fe67c78e1ff [ 167.603980][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 167.603990][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 167.604007][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 167.604014][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 167.604021][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.604027][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 167.604033][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 167.604045][ T9358] [ 167.604052][ T9358] BUG: Bad page state in process syz.2.1019 pfn:3151a [ 168.018384][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803151adc0 pfn:0x3151a [ 168.028474][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 168.035614][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 168.044201][ T9358] raw: ffff88803151adc0 0000000000000001 00000000ffffffff 0000000000000000 [ 168.052814][ T9358] page dumped because: page_pool leak [ 168.058193][ T9358] page_owner tracks the page as allocated [ 168.063884][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199204770, free_ts 159047345204 [ 168.080913][ T9358] post_alloc_hook+0x234/0x290 [ 168.085714][ T9358] get_page_from_freelist+0x2365/0x2440 [ 168.091250][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 168.097073][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 168.102527][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 168.108611][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 168.113460][ T9358] do_xdp_generic+0x699/0x11a0 [ 168.118235][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 168.123950][ T9358] __netif_receive_skb+0x72/0x380 [ 168.128987][ T9358] netif_receive_skb+0x1cb/0x790 [ 168.133929][ T9358] tun_rx_batched+0x1b9/0x730 [ 168.138630][ T9358] tun_get_user+0x2b65/0x3e90 [ 168.143304][ T9358] tun_chr_write_iter+0x113/0x200 [ 168.148347][ T9358] vfs_write+0x5c9/0xb30 [ 168.152592][ T9358] ksys_write+0x145/0x250 [ 168.156948][ T9358] do_syscall_64+0xfa/0xfa0 [ 168.161458][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 168.167806][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 168.172920][ T9358] __put_partials+0x146/0x170 [ 168.177644][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 168.182401][ T9358] __slab_free+0x2b9/0x390 [ 168.186826][ T9358] qlist_free_all+0x97/0x140 [ 168.191416][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 168.196892][ T9358] __kasan_slab_alloc+0x22/0x80 [ 168.201741][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 168.207211][ T9358] vm_area_dup+0x2b/0x680 [ 168.211534][ T9358] dup_mmap+0x903/0x1b10 [ 168.215832][ T9358] copy_mm+0x13c/0x4b0 [ 168.219903][ T9358] copy_process+0x1706/0x3c00 [ 168.224579][ T9358] kernel_clone+0x21e/0x840 [ 168.229104][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 168.233880][ T9358] do_syscall_64+0xfa/0xfa0 [ 168.238403][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.244295][ T9358] Modules linked in: [ 168.248220][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 168.248243][ T9358] Tainted: [B]=BAD_PAGE [ 168.248250][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.248260][ T9358] Call Trace: [ 168.248266][ T9358] [ 168.248272][ T9358] dump_stack_lvl+0x189/0x250 [ 168.248299][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.248319][ T9358] ? __pfx_print_modules+0x10/0x10 [ 168.248342][ T9358] bad_page+0x180/0x1c0 [ 168.248363][ T9358] __free_frozen_pages+0xce2/0xd30 [ 168.248392][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 168.248427][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 168.248450][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 168.248465][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 168.248500][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 168.248530][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 168.248552][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 168.248585][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 168.248601][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 168.248620][ T9358] ? __pfx___up_read+0x10/0x10 [ 168.248641][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 168.248663][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 168.248680][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 168.248698][ T9358] ? irqentry_exit+0x74/0x90 [ 168.248718][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.248740][ T9358] ? __lock_acquire+0xab9/0xd20 [ 168.248760][ T9358] ? netif_receive_skb+0x115/0x790 [ 168.248784][ T9358] ? netif_receive_skb+0x115/0x790 [ 168.248809][ T9358] __netif_receive_skb+0x72/0x380 [ 168.248825][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 168.248846][ T9358] ? netif_receive_skb+0x115/0x790 [ 168.248870][ T9358] netif_receive_skb+0x1cb/0x790 [ 168.248893][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 168.248913][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 168.248947][ T9358] ? tun_rx_batched+0x160/0x730 [ 168.248969][ T9358] tun_rx_batched+0x1b9/0x730 [ 168.248990][ T9358] ? __lock_acquire+0xab9/0xd20 [ 168.249008][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 168.249030][ T9358] ? tun_get_user+0x272f/0x3e90 [ 168.249056][ T9358] tun_get_user+0x2b65/0x3e90 [ 168.249082][ T9358] ? tun_get_user+0x272f/0x3e90 [ 168.249104][ T9358] ? aa_file_perm+0x44d/0x1550 [ 168.249121][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 168.249140][ T9358] ? __futex_wait+0x34a/0x3d0 [ 168.249161][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 168.249177][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 168.249200][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 168.249216][ T9358] ? __lock_acquire+0xab9/0xd20 [ 168.249232][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 168.249251][ T9358] ? tun_get+0x1c/0x2f0 [ 168.249274][ T9358] ? tun_get+0x1c/0x2f0 [ 168.249293][ T9358] ? tun_get+0x1c/0x2f0 [ 168.249316][ T9358] tun_chr_write_iter+0x113/0x200 [ 168.249338][ T9358] vfs_write+0x5c9/0xb30 [ 168.249363][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 168.249384][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 168.249410][ T9358] ? __fget_files+0x2a/0x420 [ 168.249430][ T9358] ksys_write+0x145/0x250 [ 168.249453][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 168.249477][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 168.249500][ T9358] do_syscall_64+0xfa/0xfa0 [ 168.249519][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.249538][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.249555][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 168.249574][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.249591][ T9358] RIP: 0033:0x7fe67c78e1ff [ 168.249607][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 168.249623][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 168.249643][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 168.249656][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 168.249668][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.249679][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 168.249691][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 168.249712][ T9358] [ 168.249723][ T9358] BUG: Bad page state in process syz.2.1019 pfn:31519 [ 168.663774][ T9358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031519dc0 pfn:0x31519 [ 168.673859][ T9358] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 168.681018][ T9358] raw: 00fff00000000000 dead000000000040 ffff8880222ac000 0000000000000000 [ 168.689624][ T9358] raw: ffff888031519dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 168.698222][ T9358] page dumped because: page_pool leak [ 168.703586][ T9358] page_owner tracks the page as allocated [ 168.709327][ T9358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 9358, tgid 9357 (syz.2.1019), ts 162199188357, free_ts 159047362395 [ 168.726361][ T9358] post_alloc_hook+0x234/0x290 [ 168.731117][ T9358] get_page_from_freelist+0x2365/0x2440 [ 168.736683][ T9358] __alloc_frozen_pages_noprof+0x181/0x370 [ 168.742489][ T9358] alloc_pages_bulk_noprof+0x560/0x710 [ 168.747986][ T9358] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 168.754058][ T9358] skb_pp_cow_data+0xb47/0x13e0 [ 168.758930][ T9358] do_xdp_generic+0x699/0x11a0 [ 168.763697][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 168.769430][ T9358] __netif_receive_skb+0x72/0x380 [ 168.774453][ T9358] netif_receive_skb+0x1cb/0x790 [ 168.779407][ T9358] tun_rx_batched+0x1b9/0x730 [ 168.784085][ T9358] tun_get_user+0x2b65/0x3e90 [ 168.788786][ T9358] tun_chr_write_iter+0x113/0x200 [ 168.793816][ T9358] vfs_write+0x5c9/0xb30 [ 168.798094][ T9358] ksys_write+0x145/0x250 [ 168.802442][ T9358] do_syscall_64+0xfa/0xfa0 [ 168.806985][ T9358] page last free pid 5839 tgid 5839 stack trace: [ 168.813307][ T9358] __free_frozen_pages+0xbc4/0xd30 [ 168.818459][ T9358] __put_partials+0x146/0x170 [ 168.823147][ T9358] put_cpu_partial+0x1f2/0x2e0 [ 168.827934][ T9358] __slab_free+0x2b9/0x390 [ 168.832353][ T9358] qlist_free_all+0x97/0x140 [ 168.836960][ T9358] kasan_quarantine_reduce+0x148/0x160 [ 168.842421][ T9358] __kasan_slab_alloc+0x22/0x80 [ 168.847280][ T9358] kmem_cache_alloc_noprof+0x367/0x6e0 [ 168.852737][ T9358] vm_area_dup+0x2b/0x680 [ 168.857074][ T9358] dup_mmap+0x903/0x1b10 [ 168.861321][ T9358] copy_mm+0x13c/0x4b0 [ 168.865405][ T9358] copy_process+0x1706/0x3c00 [ 168.870079][ T9358] kernel_clone+0x21e/0x840 [ 168.874563][ T9358] __x64_sys_clone+0x18b/0x1e0 [ 168.879341][ T9358] do_syscall_64+0xfa/0xfa0 [ 168.883844][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.889761][ T9358] Modules linked in: [ 168.893658][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.2.1019 Tainted: G B syzkaller #0 PREEMPT(full) [ 168.893674][ T9358] Tainted: [B]=BAD_PAGE [ 168.893678][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.893685][ T9358] Call Trace: [ 168.893689][ T9358] [ 168.893694][ T9358] dump_stack_lvl+0x189/0x250 [ 168.893711][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.893724][ T9358] ? __pfx_print_modules+0x10/0x10 [ 168.893740][ T9358] bad_page+0x180/0x1c0 [ 168.893760][ T9358] __free_frozen_pages+0xce2/0xd30 [ 168.893788][ T9358] bpf_xdp_frags_shrink_tail+0x4f7/0x7f0 [ 168.893814][ T9358] bpf_xdp_adjust_tail+0x1d6/0x220 [ 168.893828][ T9358] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 168.893837][ T9358] bpf_prog_run_generic_xdp+0x606/0x13d0 [ 168.893857][ T9358] do_xdp_generic+0x9f7/0x11a0 [ 168.893879][ T9358] ? __pfx_do_xdp_generic+0x10/0x10 [ 168.893891][ T9358] ? __skb_flow_dissect+0x5ef8/0x68b0 [ 168.893910][ T9358] __netif_receive_skb_core+0x10c6/0x2f90 [ 168.893921][ T9358] ? __pfx___skb_flow_dissect+0x10/0x10 [ 168.893932][ T9358] ? __pfx___up_read+0x10/0x10 [ 168.893945][ T9358] ? do_user_addr_fault+0xbbc/0x1380 [ 168.893956][ T9358] ? do_user_addr_fault+0xc85/0x1380 [ 168.893966][ T9358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 168.893976][ T9358] ? irqentry_exit+0x74/0x90 [ 168.893988][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.894000][ T9358] ? __lock_acquire+0xab9/0xd20 [ 168.894011][ T9358] ? netif_receive_skb+0x115/0x790 [ 168.894024][ T9358] ? netif_receive_skb+0x115/0x790 [ 168.894038][ T9358] __netif_receive_skb+0x72/0x380 [ 168.894047][ T9358] ? _copy_from_iter+0x24f/0x1790 [ 168.894059][ T9358] ? netif_receive_skb+0x115/0x790 [ 168.894072][ T9358] netif_receive_skb+0x1cb/0x790 [ 168.894085][ T9358] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 168.894096][ T9358] ? __pfx_netif_receive_skb+0x10/0x10 [ 168.894111][ T9358] ? tun_rx_batched+0x160/0x730 [ 168.894123][ T9358] tun_rx_batched+0x1b9/0x730 [ 168.894135][ T9358] ? __lock_acquire+0xab9/0xd20 [ 168.894146][ T9358] ? __pfx_tun_rx_batched+0x10/0x10 [ 168.894158][ T9358] ? tun_get_user+0x272f/0x3e90 [ 168.894172][ T9358] tun_get_user+0x2b65/0x3e90 [ 168.894186][ T9358] ? tun_get_user+0x272f/0x3e90 [ 168.894198][ T9358] ? aa_file_perm+0x44d/0x1550 [ 168.894207][ T9358] ? __pfx_tun_get_user+0x10/0x10 [ 168.894218][ T9358] ? __futex_wait+0x34a/0x3d0 [ 168.894230][ T9358] ? __pfx___futex_wait+0x10/0x10 [ 168.894239][ T9358] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 168.894251][ T9358] ? ref_tracker_alloc+0x318/0x460 [ 168.894261][ T9358] ? __lock_acquire+0xab9/0xd20 [ 168.894270][ T9358] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 168.894280][ T9358] ? tun_get+0x1c/0x2f0 [ 168.894292][ T9358] ? tun_get+0x1c/0x2f0 [ 168.894302][ T9358] ? tun_get+0x1c/0x2f0 [ 168.894314][ T9358] tun_chr_write_iter+0x113/0x200 [ 168.894327][ T9358] vfs_write+0x5c9/0xb30 [ 168.894340][ T9358] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 168.894352][ T9358] ? __pfx_vfs_write+0x10/0x10 [ 168.894366][ T9358] ? __fget_files+0x2a/0x420 [ 168.894377][ T9358] ksys_write+0x145/0x250 [ 168.894390][ T9358] ? __pfx_ksys_write+0x10/0x10 [ 168.894403][ T9358] ? do_syscall_64+0xbe/0xfa0 [ 168.894416][ T9358] do_syscall_64+0xfa/0xfa0 [ 168.894427][ T9358] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.894438][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.894447][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 168.894458][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.894467][ T9358] RIP: 0033:0x7fe67c78e1ff [ 168.894478][ T9358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 168.894487][ T9358] RSP: 002b:00007fe67a9f6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 168.894499][ T9358] RAX: ffffffffffffffda RBX: 00007fe67c9e5fa0 RCX: 00007fe67c78e1ff [ 168.894506][ T9358] RDX: 0000000000011dc0 RSI: 0000200000002940 RDI: 00000000000000c8 [ 168.894513][ T9358] RBP: 00007fe67c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.894519][ T9358] R10: 0000000000011dc0 R11: 0000000000000293 R12: 0000000000000000 [ 168.894525][ T9358] R13: 00007fe67c9e6038 R14: 00007fe67c9e5fa0 R15: 00007fff20632298 [ 168.894537][ T9358] [ 169.303938][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057121c00: rx timeout, send abort [ 169.812177][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057121c00: abort rx timeout. Force session deactivation