last executing test programs: 4.173185411s ago: executing program 1 (id=6930): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x60, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x3f16, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8800) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x18, 0x30, 0xb, 0x4000005, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x24000000, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="55544f4661848c20dfdbd28891f4", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r8}, 0x10) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 4.019556747s ago: executing program 1 (id=6932): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001040)=0x14, 0x80000) accept$packet(r1, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001100)=0x14) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x2, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500090122bd7008f9ff31"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x24000040) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 3.115444331s ago: executing program 1 (id=6948): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={r1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="effe682e4f18000000000000000000000000d5dc2df35e836dc20000002090b2514e2e4e4e19c3c14538bebcf4ee058010b34749ba313d383db74275d6b7f5bee3920c4fde7d05"], &(0x7f0000000480)='GPL\x00', 0x8, 0x1009, &(0x7f0000002a80)=""/4105, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="effe682e4f18000000000000000000000000d5dc2df35e836dc20000002090b2514e2e4e4e19c3c14538bebcf4ee058010b34749ba313d383db74275d6b7f5bee3920c4fde7d05"], &(0x7f0000000480)='GPL\x00', 0x8, 0x1009, &(0x7f0000002a80)=""/4105, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec0300000000000000000000000000000000000000c9a36b6f0000000000000000000000030c00080005"], 0x7a) (async) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec0300000000000000000000000000000000000000c9a36b6f0000000000000000000000030c00080005"], 0x7a) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0a0001000180c200000000000b248feb976975c869d47382eeff156be95ac66615d86b842fae8db7ec3d35e83a244441b172f7bb287ab8e2474bd43fa2576431e0db0caa9593bc56d1966e18b09838309d6211e20c3cefe5c4e9b132bc025579445821d2946ad2eb8085beecd4bd17f0bf05881a3c0c1ce395e5c1010d84922368236acad134a788e1f19f53f7cb56f69ad0b7322704280e2ae6aff87e4f22e8a4eaabdd953d3d52b9b309b8e7c0ecb332349d843d18eb4fd77f343429a9fa1b1878cc"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="0a0001000180c200000000000b248feb976975c869d47382eeff156be95ac66615d86b842fae8db7ec3d35e83a244441b172f7bb287ab8e2474bd43fa2576431e0db0caa9593bc56d1966e18b09838309d6211e20c3cefe5c4e9b132bc025579445821d2946ad2eb8085beecd4bd17f0bf05881a3c0c1ce395e5c1010d84922368236acad134a788e1f19f53f7cb56f69ad0b7322704280e2ae6aff87e4f22e8a4eaabdd953d3d52b9b309b8e7c0ecb332349d843d18eb4fd77f343429a9fa1b1878cc"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 3.085236775s ago: executing program 0 (id=6949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x7}, 0x6db63122, 0x7, 0x1253}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000240), &(0x7f0000000380)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) socket$kcm(0xa, 0x2, 0x0) (async) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x1, 0x2, 0x2}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x1, 0x2, 0x2}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.595635999s ago: executing program 1 (id=6952): r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x0, 0xa, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000002c0)={0x3, @bcast, r10}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x3, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x300}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x100, 0x4009, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044098}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a"], 0xb4}}, 0x24040810) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) accept4(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0x428, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1a}}]}, 0x1c}}, 0xc1) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r14, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000280)=0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000030303100000000000000000020000080c00020000000003000002ff"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040011) 2.426461788s ago: executing program 0 (id=6955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$tun(r4, &(0x7f0000000540)=ANY=[], 0x8b) read$alg(r3, &(0x7f00000003c0)=""/85, 0x55) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) write(r1, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff020000000000220000000000000001e800c204"], 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x8, 0x10000, 0x73, 0x22, 0x9], 0x1, &(0x7f00000000c0)=[{}, {}, {}], 0x0, [{}]}, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080)=0xa4d, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030102000000000000000000000000090002"], 0x30}}, 0x4) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='batadv_slave_0\x00'}) 2.298123916s ago: executing program 1 (id=6957): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r9 = socket(0x10, 0x3, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000040), 0x10) sendmsg$netlink(r10, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000001380)=ANY=[], 0x38}, {0x0}], 0x2, 0x0, 0x0, 0x20000c4}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r11, {0xb, 0xc}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x7, 0x3, 0xe2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc044}, 0x40) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.919329597s ago: executing program 2 (id=6959): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000000)={r4}) 1.701233652s ago: executing program 0 (id=6963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x20, 0x4, @udp='udp:syz1\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000140)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}}, 0x48040) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000eb03010000000000000000000000000a14000000eab5169811000000000300000aaf8c018f389e73afb5475ec6fee3d7be1787b7f3486e6d2882e5e4ef5d97867c986c2d9f0b2d521439680e1a3db2ff009cc524a3b8709f3f762036d6e85e6802f0e2428884b6fab6c54c2233c9d0cdf5826045cef482936bdbadd6c1e42d29b3d579ad0a4c5e47823f870a7fa03ef28d2d933d522971d2403660b90815244bea881e33e7a7be7b6afb21c8fe3c5778d632343cbeec764bfcfe689ceab627ecf6c8565101000000151c03ef05d86855e4922618ee7f66d9e17fc22076aba4e20c1e25e2b48b31968fd0"], 0x28}}, 0x20008040) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000100)={r4, &(0x7f0000000000)='@@', 0x200, &(0x7f0000000040)={@_ha_fsid={[0x2da, 0x5]}, {0x4, 0xffff, 0x9, 0x4}}, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x10}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r6) socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x48}}, 0x800) 1.698770523s ago: executing program 2 (id=6964): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x50) socketpair(0x1d, 0xa, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4e21, 0x1, 0x4e20, 0x0, 0x2, 0x20, 0x0, 0x2c, r2, r3}, {0xe9ea, 0x827, 0x7, 0x3, 0x4, 0x2, 0x7, 0x3}, {0x2, 0x8, 0x4f7, 0x7}, 0x8, 0x6e6bba, 0x1, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x34ff, 0x1, 0x0, 0x2, 0x8001, 0xa5, 0x10000}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x50) (async) socketpair(0x1d, 0xa, 0x5, &(0x7f0000000100)) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@empty}, &(0x7f0000000180)=0x14) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in6=@dev}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4e21, 0x1, 0x4e20, 0x0, 0x2, 0x20, 0x0, 0x2c, r2, r3}, {0xe9ea, 0x827, 0x7, 0x3, 0x4, 0x2, 0x7, 0x3}, {0x2, 0x8, 0x4f7, 0x7}, 0x8, 0x6e6bba, 0x1, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0x2, @in=@multicast1, 0x34ff, 0x1, 0x0, 0x2, 0x8001, 0xa5, 0x10000}}, 0xe8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000f40)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="000000000000000085000000c000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) 1.68327327s ago: executing program 1 (id=6965): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000011140102"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) 1.537838161s ago: executing program 0 (id=6966): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x701, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000007c0)="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", 0x3f60a3f8e62bfa15) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c844) r4 = accept4$unix(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x0, 0x10000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="100025bd7000ffdbdf256581fb0308fc379cad00000008000300ae4d74aaf4c20492a9454b4827567fb53e42191848dc9c413f76dd421196c9b3bdcd8279e941a1215cb04a1acb97f6c6af0cd625d62359ac758d763c9d9eccb120c89feb6144d040fcb1a685788effb76c5773e9184bd97a800db47a739166341efdc32e991c71b6be6a8e202eaf98a790d16c68861502f03c70e3811ea7c3b58afe", @ANYRES32=r8, @ANYBLOB="0c009900599b00000b0000000800020000000000"], 0x30}}, 0x40000) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5ed}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x764}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x36, 0x1}, {0x5, 0x1}, {0xc, 0x1}, {0x1}, {0x1, 0x1}, {0x36, 0x1}, {0xfe0ffcefbeb8bb45, 0x1}, {0x1b, 0x1}, {0xc, 0x1}, {0xc}, {0x48, 0x1}, {0x6}, {0x6c}, {0x18}, {0x24, 0x1}, {0x24}, {0xc, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 1.537520531s ago: executing program 4 (id=6967): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x44800, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0x24) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000480)=@int=0x7, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r4, &(0x7f0000000a80)=[{{&(0x7f0000000240)=@hci={0x1f, 0x3, 0x2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}], 0x1, 0x4008801) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_MTU={0x8, 0x4, 0x9fd}]}, 0x44}}, 0x0) 1.475949336s ago: executing program 3 (id=6968): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r4, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000002c0)=[{&(0x7f0000001840)="0022442a143a552438731d44e9f7f466df5fbf6a", 0x14}, {0x0}], 0x2, 0xc) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x17) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x80) 1.251428021s ago: executing program 3 (id=6969): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180200000000000028000000280000000400000002000000b4050b65a9c38984cc54d70479410000001103000000ffffffff00000000000000040000000002000000000000080200000000"], 0x0, 0x44}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000009fa6000000000000000000000000000000e269a60bae3e7d93feeb908af52c6b5014a52c27a31be62da512b721d9e7b7ed263ef10a786efff95f45ab0c5c126fe31f9c966710bed040a69f0cb1", @ANYRES32], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f0000000100)) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast]}, 0x40) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$rose(r7, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x2e, 0x0, 0x0) socket(0x1e, 0x4, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) bind$xdp(r8, &(0x7f0000000140)={0x2c, 0xa, r3, 0x22}, 0x10) recvfrom(r8, &(0x7f0000000540)=""/14, 0xd, 0x40010001, 0x0, 0x0) (async) recvfrom(r8, &(0x7f0000000540)=""/14, 0xd, 0x40010001, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newsa={0x260, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x147, 0x12, {{'gcm(aes)\x00'}, 0x7d8, 0xa0, "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"}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x260}}, 0x4000810) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newsa={0x260, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x147, 0x12, {{'gcm(aes)\x00'}, 0x7d8, 0xa0, "8d8e33266d97ce15cf6796a05142d49c849449f0653a632e184946605a0fae94f6e3814891fad905f911fc30e14d81f555dcbd2045bccc534844ca8ca6c12cc55e6aac37d83a813d4ec782da3d47c93bbfb08fec77115c9968ca7cee5ce06ac4c3db01aee459dd7648aae643ff5672fcbc778fd31b980cf578050a70059625f629759bc0ac1ed1b107a9a37fe9ca8e7f694094a75dafa0a279fea148dcca2e9281c73f4a60aa8ff07628a5482f6c8068e61878115bff8a895a8cc1b5ed1f4eca2bbc2083e6452a23b602de5308f1dd24ec55421a092f684f5e9961be1d2f87805a51081922752dc5770a38a189f62c14bf36c9e89b20174a77d85f"}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x260}}, 0x4000810) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="44ed36bdae1769eb45c0d322d295f13647b584719757dbe30ea41a055ebe7a212e34e34d2f49d59a14715ea618d8c901dbc9c121f90ba25f5b58c020ddd7266230c4117c61dc11dbdc7fc8658b57b89a40a9ea391478922ddac36e53ab703b047dc302907b050e1671a13a6d5e6f23a4b407d0d25ec1b1a6f4f3ae2ecb"], 0x141) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)=@ipv4_newroute={0x30, 0x18, 0x100, 0x0, 0x25dfdbff, {0x2, 0x10, 0x0, 0x5, 0xfe, 0x0, 0x0, 0xa8325e6148db9e00, 0x3500}, [@RTA_ENCAP_TYPE={0xfffffdba}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x4}}]}, 0x30}}, 0x20000050) 1.231496727s ago: executing program 2 (id=6970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)="0bc3ff", 0x3}, {&(0x7f0000000040)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000240)="6200bd750a5c", 0x6}], 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @local}, {0x6, @local}, 0x4, {0x2, 0x4e22, @rand_addr=0x64010100}, 'wg2\x00'}) 1.171089733s ago: executing program 0 (id=6971): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r2, 0xe3036000) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x28, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000002070250000000000202020631af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.106750215s ago: executing program 4 (id=6972): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x16, &(0x7f0000001300)={@multicast, @local, @void, {@generic={0x8864, "117a30dee9376a27"}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) pipe(&(0x7f0000001440)) (async) pipe(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000015c0)=[{&(0x7f0000000340)="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", 0xfff}, {&(0x7f0000001340)='(', 0x1}], 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000240)='syzkaller\x00', 0x1e, 0x11, &(0x7f0000000340)=""/17, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x1, r3, r4, r2, r2, r2], &(0x7f0000000500)=[{0x0, 0x3, 0x3, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r2, r1, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r5, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r1, r2, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r6}, 0x20) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0xf, 0x7, 0xc6f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x700, 0x1, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0xf, 0x7, 0xc6f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x700, 0x1, 0x7}}) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000200)={0x2c, 0x9, r8, 0x38, r9}, 0x10) (async) bind$xdp(r7, &(0x7f0000000200)={0x2c, 0x9, r8, 0x38, r9}, 0x10) getpeername$l2tp6(r4, &(0x7f0000001380), &(0x7f00000013c0)=0x20) 1.059303785s ago: executing program 0 (id=6973): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async, rerun: 32) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9e5fd7152d0ee382, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) unshare(0x6a040000) (rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xb, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x40) (async) close(r6) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00cb000000000000000000182fc4db785a5fec00000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r9, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000868940c218751705c001942d080000000000000000000002000000000000000000f0dc61f0fd3f22455c7d123bdc139142c70a4d1cb89b937038ffc5a2ed8c1a0220aa25fae757ff1d4220e79196d27006e229af2efab4e97e51421d"], 0x48) 887.298154ms ago: executing program 2 (id=6974): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x5, [@struct={0x5, 0x6, 0x0, 0x4, 0x0, 0x9, [{0xe, 0x4, 0x8}, {0x0, 0x2, 0x80000001}, {0x0, 0x1, 0xffff}, {0x7, 0x3, 0x5}, {0x0, 0x3, 0x2}, {0x3, 0x1, 0x4}]}, @struct={0xf, 0x5, 0x0, 0x4, 0x1, 0x8, [{0xb, 0x2, 0x101}, {0xe, 0x5}, {0x0, 0x0, 0xffff}, {0x2, 0x5, 0x7}, {0xd, 0x3, 0x8000}]}, @volatile={0x9, 0x0, 0x0, 0x9, 0x1}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x9d6e}}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x30, 0x30, 0x0]}}, &(0x7f00000001c0)=""/129, 0x11d, 0x81, 0x0, 0x8, 0x10000}, 0x28) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x83, 0x1, 0x518000}, {0x7, 0x5, 0x0, 0xfffefc}]}, 0xfffffffffffffedb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r4}, 0x18) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) clock_gettime(0x3, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x9, 0x1, 0x3, 0x7, 0x0, 0xd}, 0xc) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) 886.938884ms ago: executing program 3 (id=6975): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x5}, 0x8) socket(0x8, 0x2, 0x401) r5 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r5, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'ip6gretap0\x00', 0x78e2}) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) 884.368446ms ago: executing program 4 (id=6976): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000080)=@ethtool_stats={0x15}}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 747.062521ms ago: executing program 3 (id=6977): unshare(0x28000600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x86, 0x0, 0x1, 0x4f1, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 635.351988ms ago: executing program 4 (id=6978): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x10, 0x1, 0x4, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x80, 0x8000, 0x3, 0x101}}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000540)={0x1d, r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000180)=0xa, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x260, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e22], [], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 622.850896ms ago: executing program 3 (id=6979): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) (async, rerun: 64) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1004, @multicast, 'ip6gre0\x00'}}, 0x1e) (async, rerun: 64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040000}}], 0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r5, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 488.274515ms ago: executing program 2 (id=6980): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x808410}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x8f13186983b9f6b4) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x7e, 0x4, 0x2121, 0x49, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x0, 0x82f}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2c, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @call={0x85, 0x0, 0x0, 0x8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @generic={0x2, 0x1, 0x9, 0x2, 0x5}, @tail_call, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffa81e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f00000005c0)='GPL\x00', 0x41, 0x8f, &(0x7f0000000600)=""/143, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xa, 0x4, 0x10000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x2, 0x5, 0xa, 0x5}, {0x4, 0x1, 0x3, 0x9}, {0x3, 0x4, 0x10}, {0x0, 0x5, 0x1, 0x1}, {0x4, 0x5, 0x4, 0x1}, {0x2, 0x5, 0x3, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0x20, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x70, '\x00', r2, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x7, 0x8, 0x7}, 0x10, r3, r4, 0x2, &(0x7f0000000900)=[r5], &(0x7f0000000940)=[{0x2, 0x5, 0x6, 0x3}, {0x3, 0x5, 0x3, 0x8}], 0x10, 0xff}, 0x94) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000a40)={0x0, 0x9, 0x2, 0x5}, 0x10) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000a80)=0x5, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000ac0)=[@sack_perm, @timestamp, @mss={0x2, 0xa}, @sack_perm, @window={0x3, 0x47, 0x2}], 0x5) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r8 = socket$inet6(0xa, 0x80800, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f0000000c00)={'NETMAP\x00'}, &(0x7f0000000c40)=0x1e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000f40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000cc0)=@newtaction={0x210, 0x30, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{0x7c, 0x1, [@m_ipt={0x78, 0x4, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x46, 0x6, "58e7ac0771ff6f2bd3b5ff76256609acc4bf120f74397257c0260f350f2eb519f25f2095b6a7e3f05e3cea36b424d2b072ea5f2ae76e12b1e6de1858adad10b13916"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x180, 0x1, [@m_ipt={0x17c, 0x12, 0x0, 0x0, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x0, 'filter\x00', 0x7, 0x37b}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x2d, 0x6, {0x3a8, 'raw\x00', 0x1, 0x2e, "d3b9e1"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x7c, 0x6, "c8606d4e6dfd1b7466d661097a986ccacb345009b4ce87c7f6c2eea9868e3c7b739d00bf05362403615459042a0a79b4410539b9f55b4819bcc9a25c80ecea566fcaab196c1c360d5dfea0ce3f2e30cd72de8e55954cb5a8baed663090ca013c0e38cd0226a9dfc0b5e04c7d1fd9fb2cc6425eeb73519b11"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x48004}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001000)={r5, 0x58, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0xfa, 0x0}, @in=@local, 0x4e20, 0x1ff, 0x4e20, 0x0, 0xa, 0xc0, 0x20, 0x6, r10, 0xee00}, {0xb, 0xffff, 0x10, 0xb82, 0x6000, 0x6, 0x80000000, 0x5}, {0x6, 0xd, 0x7, 0xfffffffffffffff7}, 0x6, 0x6e6bb3, 0x0, 0x1, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x2, 0x3, 0xa, 0x0, 0x9, 0x2}}, 0xe8) bind$rds(0xffffffffffffffff, &(0x7f0000001140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001180)={'ip6tnl0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r6, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0, 0x0], 0x0, 0x91, &(0x7f0000001280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000014c0)=r11, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000016c0)={r5, &(0x7f0000001500)="8278d5b004d6ff292d6472fbaa211c5a3a7e87352c836da61b3d7ee7233964130886c2b52cf99b776e118084965fa026b7555de32fbe97f5e1c061e7a4832f9e54c6a77b1a6fe51a3d71731e99f345fe675b6441c3fe7e15f8ec2942efd69973e228da6a966f639c66f1b57389125237cf4637c4d18aaf4d85971a4e3f0aef5517c729ea2b12474959db1ee4333202fcc58049ecb9728727660fba0a", &(0x7f00000015c0)=""/224}, 0x20) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000001700)=0xa04, 0x4) r13 = socket$inet6(0xa, 0x1, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x5, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000001780)='GPL\x00', 0x6, 0x75, &(0x7f00000017c0)=""/117, 0x41000, 0x0, '\x00', r2, 0x0, r12, 0x8, &(0x7f0000001840)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x1, 0x8, 0x6, 0xbb2d}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000018c0)=[r1, r5, r5], &(0x7f0000001900)=[{0x5, 0x2, 0x4, 0x5}], 0x10, 0x800}, 0x94) r14 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000001a40)={0x0}, &(0x7f0000001a80)=0xc) sendmsg$AUDIT_SET(r14, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x3c, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbfe, {0x1, 0x1, 0x0, r15, 0x8000, 0x5, 0x3, 0x9, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x3c}}, 0x4000014) 375.79612ms ago: executing program 4 (id=6981): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="50030000", @ANYRES16=r1, @ANYBLOB="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"], 0x350}, 0x1, 0x0, 0x0, 0x800}, 0x4004014) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="54e510da088487110817b281b041dcf4662e14b0abc883089229f9cc4bc2", @ANYRES16=r3, @ANYBLOB="01002dbd7000fb43d9257000010008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a0006000802110000010000"], 0x58}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d000000002400028005000300010000000800044000000006080001400000001508000240000000010900010073797a30"], 0xd4}}, 0x4000040) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) (async) unshare(0x600) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0004000000028008001c00", @ANYRES32=r9], 0x3c}}, 0x0) 321.710399ms ago: executing program 3 (id=6982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001400b59500000000fedbdf250a400000", @ANYRES32=r2, @ANYBLOB="14000200fe5b66"], 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd00031100cd000000a60c6eec00be002c11"], 0xfdef) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r11, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 215.809674ms ago: executing program 4 (id=6983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x7, 0xc, {{0x6, 0x4, 0x2, 0x4, 0x18, 0x66, 0x0, 0x0, 0x4, 0x0, @local, @multicast2, {[@noop]}}}}}) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x98, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x5, 0x5, 0x2, 0x7fffffff, 0x7a, 0x4}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x7, 0x7634, 0x2, 0x9, 0x3}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0xf3, 0x4, 0x6}}]}]}}}]}, 0x98}}, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0xb7, 0xb, 0x8ee, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x8}, 0x10, 0x10, 0xc7725ed, 0x53d7}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x700, 0x80, 0x3, 0x3, {{0x10, 0x4, 0x1, 0x1, 0x40, 0x68, 0x0, 0x7c, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x61, 0x0, 0xa}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x8b, 0x0, 0x4, [0xf, 0xa, 0x5527, 0xa, 0xd4]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'ip_vti0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x0, 0x7800, 0x8, 0x9, {{0x2e, 0x4, 0x2, 0x31, 0xb8, 0x64, 0x0, 0x6e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop, @timestamp_addr={0x44, 0x34, 0x5c, 0x1, 0x1, [{@broadcast, 0x9}, {@private=0xa010101, 0x2}, {@empty, 0x6}, {@multicast2, 0xbe6}, {@local, 0xffffff87}, {@broadcast, 0x3}]}, @generic={0x7, 0x5, "a72ac3"}, @generic={0x94, 0x4, 'hg'}, @timestamp_addr={0x44, 0x44, 0x89, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x1}, {@local, 0x3ff}, {@loopback, 0x27c9}, {@multicast2, 0x6}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x1734}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @ssrr={0x89, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast1, @remote, @loopback, @private=0xa010100]}]}}}}}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r12, 0x25, 0x4, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000a80)={'ip_vti0\x00', 0x0, 0x8, 0x1, 0x9, 0x8, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x66, 0x0, 0xa, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@end, @lsrr={0x83, 0x7, 0xbf, [@dev={0xac, 0x14, 0x14, 0x34}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000b80)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x0, 0xbe93, 0x4a, @mcast1, @mcast1, 0x7, 0x7800, 0xb8a2, 0x100}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000000c00)={0x830, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x5, 0xd7, 0x7ff}, {0xc, 0x6, 0x0, 0x3}, {0x1, 0x6, 0x7, 0xd}, {0xff80, 0x8, 0xfa, 0x7}, {0x2, 0x0, 0x0, 0xf}]}}}]}}, {{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3800}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f33147d}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}]}}]}, 0x830}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004004) r15 = accept4(r0, 0x0, 0x0, 0x1000) sendmmsg$alg(r15, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r15, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000700)=""/192, 0xc0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) r16 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6745208e00183aff00000000000000000000ffffac1414aaff0200000000000000000000f2ffff008400907800080100"/78], 0x0) sendmsg$nl_generic(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003e80)={0x2cec, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c4264"]}]}, @nested={0x2c88, 0x6, 0x0, 0x1, [@nested={0x2c84, 0xa9, 0x0, 0x1, [@nested={0x2c80, 0x13e, 0x0, 0x1, [@nested={0x2c7c, 0xa0, 0x0, 0x1, [@nested={0x2c78, 0x61, 0x0, 0x1, [@nested={0x2c74, 0x6d, 0x0, 0x1, [@nested={0x2c70, 0xd1, 0x0, 0x1, [@nested={0x2c6c, 0x112, 0x0, 0x1, [@nested={0x2c68, 0xcd, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x1ff}, @nested={0x2c59, 0x28, 0x0, 0x1, [@generic="d207939c67b25bffc41d4d695c82836b5ea29b00e57810da8d14b51231b5426968d9ee3a680b7c1fadd2de690670e6c281b5dcb762405af75922551d9a5d3a5640d65eb339f42e9fa7f4fc3ad41f650fbdb96174ab879d5e1be96370dae3a416c72e30d0b7eaf339b617096f8597f3126cf741b8f2219c85711bf6a22b89e110d916625846d10c31e8e749bdcdfae751921f5156b1d5560bbbca13eb020f9080163775eebc5592056d1787e943411144eb6440d9c68ed0", @generic="0051906ea3f768578c3e11d39e0b7695038d441951d6ecda508cb547cc22996d3b4355409b6fc17886654d1cc0d5437c0be9fdb839e944ee1a394ca85731a5842c329cd99a7e8532de2a7fd9d232d7e2e2053fa3ce03b15ce4a31f7065dd2f5cc2b0d9878576ab9abde1dd37f26de2c6154904e9805b14e2afd85f47a559", @typed={0xc, 0x80, 0x0, 0x0, @u64=0x2}, @nested={0xf9, 0xe0, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @pid}, @generic="846d397a15000ea88911c51d0e2558c4def5885c25cca0125dbbb9b2621c6d9f9e91a4046f5ebd026f38a96716a0bc5fda1ee497886d42ba4225801022eeeacbe8bb25e3e4a6a8e60eae72ceac480f5bbd42df70995ee10b355132568a1e25cbd1d17a80fbb76f10ec579955982bb71cabc0829a8b8d2c17b36f5dd4d75e0513d5604fa5e8a67b40a7391e9f01480c638c3bb9a7cfd3255a01745a9d2b3734d89e6b6abbb02c10a16b8140f8258dc7726c69b4ada7c5ba7870c8a89c4b0c787b475b0988b677eda0cd2f99f339aab0fe73a1ae79b3724079e455113e486431d20b9c16e49e5cc2a5f7", @nested={0x4, 0x61}]}, @nested={0x4, 0x41}, @nested={0x2a14, 0xc6, 0x0, 0x1, [@nested={0x2982, 0xcb, 0x0, 0x1, [@typed={0x8, 0x13e, 0x0, 0x0, @pid}, @generic="40216ada53dd18359096369b5656c79f9133aa58345d7d87f30d5269f21bd6a826157da65e675ee17cc83cad37157db2b0a1307975a2a0fb2ce5b1bb431ec6e2b71bf154f349029b462b29759e275093fd2ddb93f1e81eb949acdf9ee191daf6df1c0a3c481c9bdba0eef867e6de8624e7bcf8392235e7e61cae437ac4fa900b81b23501ccaff27392a2dfe5e9f3488496af460dbd8a7bb417ce3a3d2f68348ead5da3b605361cd355ecf803da6d4d54f0f46f08af7cf7726998bcbb60084a9c6c4a65163dbc9162bac759790e587f378917770a3d32", @nested={0x289e, 0x55, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @u32=0x1000}, @typed={0x8, 0x155, 0x0, 0x0, @u32}, @generic="703e9b5d92944ff11fdbfd1837400f8936ef40fd7f162fa3d33ddc11b76b71c889bad9e6ce969823cfeb45cd75130fd4e3891caaeb01349f3919e48f77a892c82ae6a2ca2ee944cf38a9b14ed121b03a37544d6d1f24d2152640d1b53bf4af40974efca79825f4fd75b4f4cd11e6be08cca0412d583aaecffc59ba524e0d4d012534b0dc2967bfccd4ede5d97d8f992f15e28b823f12a4dc611ef83a8242e168aef8fdb45dedaa89e39ec00de9e58c6b6b041a257495f3e9ab86a2b7bdc6dbb4394fb4eb55fef9cbca6ec4bb96bad49da87462ba21ad3f6f8d55af5f593485cf490e7f09ea04cf196a9e", @nested={0x2719, 0xe1, 0x0, 0x1, [@nested={0x1199, 0xe6, 0x0, 0x1, [@generic="7246d01e5339cebf3bdf8a8b5bb958060288724ce95ac79a89f2104321c6dc0def5200fd28d13747ccd4af9a494e5fbdab5f2f3ba7d1e071351eb71724fe374f904ef164ee93363ae5b4ef6d8ae694ac9768684b92e04f068aa21d037fbca6a8fd407e43477064a3476d4547decc7623ca6bffbf91955931cb3b2f1763d2eb5380677d0fef8c9ed7e72f149c7819c1c515ec6c483a825d1d668078de13099bcb8f1d8e5a8a4b8506e4300ccc099e77cc3d6082d36fae53a806fe8aa97c0348f140ec70bfa12051d760aa15b09174400a50c68a0b91a21ad49aa849", @generic="153c6a7f87c048095c176a1ed7590c55081c1d8eb7a18d4d89d39534dd0f7d0c1b836b5e3dbf0d8ea000222a38f0f7b8fe446db0e70fdfbab7bfed2e07717787c228232b1e0a1640e7", @generic="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", @nested={0x4, 0xc2}, @nested={0x4, 0x90}, @generic="06f35efdc255a33c53e6436410f18016240a9d2e96ad3e165e04d4aec8f7afeca3fa524a27a70dbf435ade41a215e9fb0b863de29e085ee23645", @generic="42db1bba7066f4bc2375cb9fa8bb6a746320bd33248839e0ce4a5fbe4adafeddf3855ea93b4114f4beec85cb6817bb"]}, @typed={0x51, 0xa2, 0x0, 0x0, @binary="8bc4c9d63405cfb2fbd537cc06111afcfa969802e52773ae06a56f7cb338ed86a81642b68a726d48945f306f1e75d6bf50b05660d587cd9f78b57994ffad9723e7c75952a4e2e7c693d72c85db"}, @typed={0x8, 0x6c, 0x0, 0x0, @pid}, @generic="716c66aeb5602f9ed5cfdc6e6ffb59f164d31fc988899f8dd55bfd79b7fa5bf22c9101f88cb82e14584f4c9f74fb71a820c2a640e099019c86a14c924c484a841caa7a501a49fdc59ea3e90c48446bf89ac99ea8656017a4cfe7efd286f92c60bf8f50e33f38258ecfe38933faedfd3cc23be4b3ca007ae023c252f6ae6a897159d1f3bbeb1768e60d9e73fd3b815b775eb3d75a849903253808924b984c1d665ab69b511de24c006ef0be3e23ca4da48a1c3097919b54757ed44b738bb58a9c7911a2e3271a146916f33d7150de706d80cb909d9b246c96bd925f907926c86fadfc980e920269e3596c295847c5abd1c024783fc82e56d94c498d3e70f94ef5ede0e81bf014e7832ab81f954992b512c3876b4e92e4cb9d5447e1f311dcddc2040036e3adc253a313e799edb87e491ba41f18ddd1623546771127e666cbb0b449b2d1ea1a6196138436b173d819ed669dafad5c89f821fa547b221b0a3e6f87a9eedc8e72defa79e68da3f2df3ba9f23f4ed2ff5466ca8637321d8f2759eac0926677379a0e648ad1a3d876004b98201f97e751c0c0c531ddbc8b16f78ecb831e6b731ab462dba63b22049dd2d62ebc6fb999d19639ad7b434a0c78ae89bf09c7ffe7cf3f4d06c8d99f917e9813ef6a6ac371612d0218f15d9b52e6ac91f3652b6d515c06b3df61af5f340f9363aed0fea4b36229e08d2dad2fa12f27f9c180098c2b8a59c429ed714f2eb5b11ffff3646993210877bdfec6e14291039226144233a5e02552347cf3b41c69c0b154933c98ffe37bd1aa1bfc658c7bd47e1120482afa42e0b7fcaf058a2b40ea610753f733ac032397a8c9538c02743c4eea5fd2045d62bdb997f6ca30ea91166430d45bc8b76518116bcfd4e3065aed3b2ed58340475fb7837b22d583d2928b99010b8239a757d19cabeb2b1d3625be4bd0b4cb99e8029bbe8563d4c6c9d35b6386664cbd14d87acc07aa8d2af48b97fe36ee4bbf9dd909bcc77c5ecc7e0665acc68144abb3b2d0b92d2a8b2b953fe92285483c5d7e5c7896e8258fd0988d680809521803c7d6f60ad8186941abcc5bb0ca098799f5d14475e1fc1e6b6dc4fa749e4b9c3923bc26ae3aa7c1bcc3b96a3bbc7805064dbb3b1ce0d3f20352927073ffa7dfd3d1410491e9f10e5245969089200290d5a792e5e4b4048826bed4417f50d245c069c370379149f892c89b393856f433e04f9d180b1bd28172224b06f161aee63d53f0468956eb3dac24fc6ef42734d591ab64286cb47fb76ed1bfd83656d3f49b1d18c1edcaf234fd69385d3c4d4abe5423c1b967b02f22dc910e3facb16e6378f671fbbcb8dadff7e2d412cbeb3054294c86b77545ee38301dd4c740f0763c1ebff140d442ffaf7c5ba560506c58e8bbe24ec13544ffcd64a1968b8142a5e024af3f1c3ec8c6e21ae7901c338b28be8c1d7c38d1b0133a6edf7da38a6c39c2206b8c0af1f124472ae41c4eb97e654b8409630a2c761447523b5ccd5aa6263c76677abd530e3d6e44e9ff2464d92b14312fd8f5e4f298514362d8fa3e591fa64337d072731162332956e5ce0200595f704bc3889a240299274879bb392cbb5ec7025814d50ae1b4c30425de2c05a3e28c1e78427b0549a05a16e4aec28764cdd4752735d387b1e544e9a53dea579efdefdefed0be9dcf7d5f3d539a658f457e6a584659613103bc2450cd5d2a0b8473c1dbb32a92b2830bca89f838429f46f80c8e649822451ad23f8a0a10f51674b7847d7675bbf71882820fe63e615bef918f13b4ea6c216f1d038960e15c350d3fc8264afda2a29c8dacee43f4a39ad8e6d2659849407c3e3e2ff9777cda78b8f95ff97548d26e50f0c53149c8143bc310fe37d91d3856023fdc92247e53a3e284bbd3e011a6799e0e07d251072eb6f22edc0725e2cefd5cdafd10bd88c447e0b99b147c46536f30cda1ee505a6c4d9d93832d7171c341e6bf5ce1b3b577b131c2ab833d75f4a9fce506567599ddd3e576b4cd22092b6d149ce5f1a66dcec4183974675b0bead70fd8a3182b258dbc9c5f67b34f356107956245fb778cf159c325ce0770527433b376df7056bebed8f1c2c6b1213d817ef02f2fc6f7ed607774d8a471b7d04da2fc88a3fe634167c80b10d49c3f643fad2c15ecba6c228bab1944b551cc1c9a9c434cae12c80c93ca9985353a2207b57c81946f80000edfd3ee0232591c0e8e2eb46e5b04c0b86d50b5d6b8503a498ad11ecc4b6a919a356d247ef34cf80e61382466e1731ea6c0f8830633faef1ed96d5bb9f598ef859356747e4b593ff792e237caba7bb347f5fd090124271f6e3778b75ab1bd3c09d8d199219ce6389de8d78838fbb8af0d5b9eeea82926419184321741cf057bd97208e816a68cc307fcc4be57febdebe5c7ee6b5c7045dace1d4c0b392e89e62d25e71b0caa2a3be95a64a0bdaabfb7b0b8acb78b28261c465c56e8777b044e83c461bb7de03ef39d43ca1e4b451374b974c445494dcba78a58ff884172483b4d9806c5faeed26cfd010e2a8c523f54d1b2d02a849cfcaa2d4d9e58689c7c6ff217183d5a60e965b4b938874b1d68b943ae26cbfb9197f23f53a900f3f96614b6cee1073a532fc6f540a253a0db32a9f2f625ffb392a7376530d05528ef41547adccd374c2d7ef791c076fa07a7388d92206b3c47e3e4a28073d02067c431f78dc0adf768fb996ff1dd88687c8cfb8651459ce29758750370f4eb1765cb203602b03e22a97b0a37e70a22401f14210da9906536c51dcb6e9104589ebc67bc46af2ca8a70770ec8b2e3e4d1aac277ee3527bc27a9e3a1b9cfe2a4023fd9e5d752f62e96e630e659b10ef593beecdf09d2c57aad86f4b03481f0a5767043ceb81437e8dfdbab1a8d6916168d72b599d6ec90a34652cad3d08ce0597717088cacb452b75f6f88c0d4e1e61001437d9f33a2dcb08da040c8226e632aa68b712145519ba23ff706c48673fe15032a3f25da77c7ed9f1dcd6939405a36db7405b4854349e1069b4045ec3d201731c043ab84de84575526d864f85ad0e420a6a87a8476d660e6e6fa000f231af283f7c6c85e965dd7683b0b935e3fac2fb54b4e71d95bbbe691bd5e4518464a81851f9d8e9c6f7fb334556a36a28115466db36b703a7a0ff04e3821e5dc301733c2359371a043cad36a9cb2f905bc3a6f5a8cc6a6388bc2414e4168572b985d5b3791fb54d6ad1cd509298894ff72043079a0bf448ca103540c07efb0e0a45e4c9ae65c127d14831e9e96eff8b77f4de6ca105b43fcb94b026411057e9266332a5541b303f7a84f2e3011e1ea853ab754977903c2877ff8f8686bb43001f69b151f5adca86cecaddff6d4c3b13d2c03e6991a4ec2eab3f8244d4e0af43919614cdf90a80b01a0705c89406b0af8c11705adcb980aaab650083d0b356ec043fe5968d27d241ecf693320aff06933f46dab01c39e2813cb846e5b0d7df802b249c169c30e690108be1be1dad7d1bb6b435fe41413a2d64a3c4338072d49bfce8874f6d836e4595c70c3c4bc767c0de37d193a4e88a2fa7c4e9a59fa5659f81384c0f7135c8f0b5ce5806ac3d8c89e2ad70ed19443fec501b0ff0f90da2c03702428326af2c01f25b756c05de4a6a9f0f9e8285162108d7fdf0d9f1595a8bbab542f919c884989247572bc57b2cf4e751a355a2f379a66fdc6e60460f84bab94204b1384581da54cfa967f6d2bf8c1f29c1185531994cc94c57dbb91ef512a534281695ea425bf7b574e871821db712962d863e81d44cf6457cfcc02113feceed128592b6adbbd7776edb88dd357cd237e94e4da03c275aa61992a276486ed221960c540e968afdba9138c1876b7486ce915356f8793bc5af9c4b72220c40eeb82852037bfa8815aa1917a007c15a480b2a91b9f52cb6b2fbd67aabecc85af18d601110106e7494853b6d5559db48994333a1c359535dac743773db908f11ed8bc6c1e6f12e06e34b4f54469d78cad18c681eb9deb2d3a2f15f59ef233c0d6b134bc1dcbd31254485349aa420eab54f61aaebc5832c0d55b65b3b424aede579bd051c755840e4773c2c00f9cf5f7cdafd499fbc2d8e4bea8a0f6ae5f1e1cad104f26f7e17596a94fb364049b9aa6c0684a0c91c4a2a0eefa8dcb5f8c86b441a443c82a16fc04ed0e8297d1adfca66aa43378915cede25ba67fdf596cbdd54e68388dffb18260af238a686dfdd8a1b2e118b27b1413d42ca7fff661870cbfc0a9a9c8a5dd6a89442ca77305123d198525f12050c8325a5ed152deacaf6f3c5992ea1b8b98c3618ac462ee079b17f07a0cc3d7c4bf291aa2cdb6aec4535d9066c3559d0d1aae963e98e32552158ac45c6238a0703211e92aaa87fcfc71b3975b359dcd6a12823489aae2eab2156e41a453da6efaa66ecd9ea2e2ad33f0abf6bee9b701c208d74e1dbadbc0779cfd3d093eaaa1e61b54591ff872d260d9b90977e1d80704ee82f80a660f61548305b80d96f867886a020316885d4279aa4446421497db992a0e2bc5547d4a13125bd5396be9adf751b152f2b3e496f8d9f9a84a9aef46fcf96a833f464cef4c75557fd7ea79cde109564f057491360a4d4ef2f4f56282012f49c34f73e6770e83628dd923821da0b31229fdabfc7385264219f8664e4a4bbb93ffd1c5cf0b5c70073c5fc837cee58f6b491bfc5d8d056c21f522837d9928be27d8e64be132c74b0a95fd4fd88b0c94be5ae1285d9a5772d999bfdef768d82fda9333cc3bf1fd688758180deeb95ccceded5447128da97e9b1d6a8a54eb60018db815e269c7f2c1a5358ae223c337573eb21561321989808e0c15c59ac910f8fbb28dc4fdb74c485666223e73b3a4f01bcd17206bae539843ec69325316235b7c664b69d1f7948845a93c5cc34433dbead3872b18216eb1e0a36119bdb0f38b6ff8c6c573e423fec1b7481f34eb19d5de293bd04ceb4e5a820280171171af66a00f8ec8d895d194e41f6b4f020446b3c028cddd4f46039547b4321cfbac34acc80f387033de1181dcbcce3bdeef97399dffa641a518681a4545a49856278067f00a6c9664bb8aee1dd4e64b35e8ad3c924470e64252c9d3facb3fa7088e68672df28798ab62bc848c5ebfa10f58211a8a397486aad8a16c94e0fb02196a52103e78b1b7251a28b17f152a2e62299a991c2085cc913e1b40520bf8d08f20edd5ed7d5af886842f0454da7e5e660afb22e2266d05b1ea290fdfb19bcffbddd637249567fa0b1dc3c1d9e83043a15dbc92290b193e1705f8307ef482f35e955d1b2a089e52fb9fbe5bfef9e20bcb93cc47d47ff149a7e4cded0839a9202639c9accde89f4b31916e44129f99888e99dbb169b697dc0b523015eb3623f31aab2e44df958d3b1752585f6a81101bcae30de60fcab31d173ca81b2a1747ad82dbd901cccd35e320e18dcd8a2d301e564730e6a6f57efddc6f08d9e112ca58cd4707f70fd1c8576d50d62c51c3feb1b4b9317a911b9e740c2098feae84c50deb4b03c51a5bff43920758a8a8f4b922d0fef9bd694a650f442a864ab6a19897c78ae7b262027c770f687925e64f5bd16b8bc59c30de95b892ddf708ae04b965b74e3ac5c615e29907bf52b057f7bf7a7958aac41488ec7a87a49c5edf4462852f115f4a5a4efd72f619d79d7609e6a6b695ec8bcd3f69c07c75103c6814bf7cc4dc9cb80a6244ef00e42d24433a781cd3db29e569d5090af99529b2208bd1fcaeb1f55817b52069d3afda85bf2782f7474e77092866c0956", @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4de, 0xb3, 0x0, 0x1, [@generic="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"]}, @typed={0x8, 0x19, 0x0, 0x0, @fd=r16}, @nested={0x30, 0x133, 0x0, 0x1, [@typed={0xc, 0xcc, 0x0, 0x0, @u64=0x101}, @nested={0x4, 0xf7}, @nested={0x4, 0xf4}, @typed={0xc, 0x44, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x85}, @typed={0x4, 0x7d}, @typed={0x4, 0x14}]}]}, @nested={0x21, 0x152, 0x0, 0x1, [@generic="fda91499707db67c4dbdb7b79eb19deec84f82f16241ef2c82ec0eeb2d"]}, @nested={0x18, 0x5f, 0x0, 0x1, [@typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x39, 0xe7, 0x0, 0x1, [@generic="f1089cefa4000aeb674d3affdf032478433edb39d54dcffcb787852e222e293ac76d13fabdeefb8fab89b1be385598ff3252d231f7"]}, @typed={0x9, 0x5f, 0x0, 0x0, @binary="8258f39ba0"}]}]}, @nested={0x8c, 0x30, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xa5}, @nested={0x79, 0xd0, 0x0, 0x1, [@generic="5e58f65d9aac8af9398b0c315f07abce070c736207ceedd3cf1b35ead5b289d5bb5066fd7c1aebe96e196265d4806ca57bacbbe377fe8e0ddab77a2e9c8d3a57a64c1bdbcfddda9b6eb25b68ccd7135e8ee8afd7fa9182a9adfbd4964e45a922836284047bca3e9a591636e3a3c24acacb4a2dd49d"]}]}]}]}]}]}]}]}]}]}]}]}]}]}, 0x2cec}, 0x1, 0x0, 0x0, 0x5}, 0x0) 0s ago: executing program 2 (id=6984): r0 = socket(0x10, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x73, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x4, 'none\x00', 0x26, 0x2, 0x7}, 0x2c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x8c90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) kernel console output (not intermixed with test programs): netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.945956][T21210] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.962377][T21210] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 877.977298][T21210] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 878.031425][T21210] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.049983][T21210] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 878.065810][T21210] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 878.152063][T29265] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.181515][T29265] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.201306][T25265] Bluetooth: hci3: command tx timeout [ 878.242651][T29374] lo speed is unknown, defaulting to 1000 [ 878.280252][T29265] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.302467][T29265] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.375364][T29265] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.401713][T29265] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.669546][ T6867] lec:lec_start_xmit: lec0:No lecd attached [ 879.012180][T29408] bond27: entered promiscuous mode [ 879.018822][T29265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 879.077176][T29265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 879.097932][T29265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 879.145000][T29265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 879.454001][T29265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.480504][T29265] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.513171][T21203] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.520367][T21203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.563001][T16606] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.570202][T16606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.838565][T29450] geneve3: entered promiscuous mode [ 879.846220][T21203] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.867181][T21203] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.892426][T21203] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.921985][T21203] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.997903][T29457] __nla_validate_parse: 7 callbacks suppressed [ 879.997923][T29457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6000'. [ 880.065118][T29265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.170016][T29265] veth0_vlan: entered promiscuous mode [ 880.179138][T29467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6001'. [ 880.247581][T29466] netlink: 'syz.0.6002': attribute type 2 has an invalid length. [ 880.263686][T29265] veth1_vlan: entered promiscuous mode [ 880.271828][T25265] Bluetooth: hci3: command tx timeout [ 880.295364][T29466] !©9: entered promiscuous mode [ 880.368719][T29265] veth0_macvtap: entered promiscuous mode [ 880.397516][T29265] veth1_macvtap: entered promiscuous mode [ 880.448011][T29468] netlink: 'syz.0.6002': attribute type 2 has an invalid length. [ 880.477561][T29468] !©9: left promiscuous mode [ 880.524917][T29265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.554821][T29486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6005'. [ 880.611976][T29265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.738194][T29481] tipc: Resetting bearer [ 880.845246][T21202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.875592][T21202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.910616][T21202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.934006][T21202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.163176][T29498] mac80211_hwsim hwsim44 syzkaller0: Caught tx_queue_len zero misconfig [ 881.188539][T21206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.210257][T21206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.236498][T29498] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 881.261459][T29498] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 881.291367][T21206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.299668][T21206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.372469][T29503] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6011'. [ 881.692661][T29522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6015'. [ 881.838796][T29528] sysfs: cannot create duplicate filename '/class/ieee80211/Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥”!' [ 881.851232][T29528] CPU: 1 UID: 0 PID: 29528 Comm: syz.1.6017 Not tainted syzkaller #0 PREEMPT(full) [ 881.851264][T29528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 881.851286][T29528] Call Trace: [ 881.851296][T29528] [ 881.851306][T29528] dump_stack_lvl+0xe8/0x150 [ 881.851398][T29528] sysfs_warn_dup+0x8e/0xa0 [ 881.851431][T29528] sysfs_do_create_link_sd+0xc0/0x110 [ 881.851466][T29528] device_add_class_symlinks+0x1cf/0x240 [ 881.851570][T29528] device_add+0x475/0xb70 [ 881.851600][T29528] wiphy_register+0x1d73/0x2d50 [ 881.851678][T29528] ? __pfx_wiphy_register+0x10/0x10 [ 881.851708][T29528] ? __pfx_netdev_run_todo+0x10/0x10 [ 881.851764][T29528] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 881.851944][T29528] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 881.852082][T29528] ieee80211_register_hw+0x35f0/0x42c0 [ 881.852172][T29528] ? ieee80211_register_hw+0x14d1/0x42c0 [ 881.852207][T29528] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 881.852250][T29528] ? __hrtimer_setup+0x181/0x200 [ 881.852281][T29528] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 881.852349][T29528] mac80211_hwsim_new_radio+0x3334/0x5b60 [ 881.852424][T29528] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 881.852448][T29528] ? kstrndup+0xbf/0x160 [ 881.852489][T29528] hwsim_new_radio_nl+0xf6a/0x1c00 [ 881.852542][T29528] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 881.852579][T29528] ? rcu_is_watching+0x15/0xb0 [ 881.852612][T29528] ? trace_kmalloc+0x2a/0x110 [ 881.852649][T29528] ? __nla_parse+0x40/0x60 [ 881.852741][T29528] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 881.852811][T29528] genl_family_rcv_msg_doit+0x22a/0x330 [ 881.852849][T29528] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 881.852886][T29528] ? bpf_lsm_capable+0x9/0x20 [ 881.852919][T29528] ? security_capable+0x7e/0x2c0 [ 881.853008][T29528] genl_rcv_msg+0x61c/0x7a0 [ 881.853041][T29528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 881.853065][T29528] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 881.853090][T29528] ? __lock_acquire+0x6b5/0x2cf0 [ 881.853134][T29528] netlink_rcv_skb+0x232/0x4b0 [ 881.853168][T29528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 881.853193][T29528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 881.853245][T29528] ? down_read+0x272/0x2e0 [ 881.853303][T29528] ? genl_rcv+0xd/0x40 [ 881.853328][T29528] genl_rcv+0x28/0x40 [ 881.853350][T29528] netlink_unicast+0x80f/0x9b0 [ 881.853389][T29528] ? __pfx_netlink_unicast+0x10/0x10 [ 881.853430][T29528] ? netlink_sendmsg+0x650/0xb40 [ 881.853462][T29528] ? skb_put+0x11b/0x210 [ 881.853555][T29528] netlink_sendmsg+0x813/0xb40 [ 881.853600][T29528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.853638][T29528] ? aa_sock_msg_perm+0xf1/0x1b0 [ 881.853698][T29528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 881.853729][T29528] ____sys_sendmsg+0x972/0x9f0 [ 881.853796][T29528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.853831][T29528] ? import_iovec+0x73/0xa0 [ 881.853921][T29528] ___sys_sendmsg+0x2a5/0x360 [ 881.853954][T29528] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.853987][T29528] ? futex_wake+0x4ac/0x580 [ 881.854053][T29528] ? __fget_files+0x2a/0x420 [ 881.854089][T29528] ? __fget_files+0x3a0/0x420 [ 881.854138][T29528] __x64_sys_sendmsg+0x1bd/0x2a0 [ 881.854164][T29528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 881.854197][T29528] ? rcu_is_watching+0x15/0xb0 [ 881.854244][T29528] do_syscall_64+0x14d/0xf80 [ 881.854304][T29528] ? trace_irq_disable+0x3b/0x150 [ 881.854338][T29528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.854363][T29528] ? clear_bhb_loop+0x40/0x90 [ 881.854393][T29528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.854435][T29528] RIP: 0033:0x7f5cadd9c799 [ 881.854459][T29528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.854482][T29528] RSP: 002b:00007f5caec79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.854515][T29528] RAX: ffffffffffffffda RBX: 00007f5cae016090 RCX: 00007f5cadd9c799 [ 881.854534][T29528] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 881.854551][T29528] RBP: 00007f5cade32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 881.854566][T29528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.854581][T29528] R13: 00007f5cae016128 R14: 00007f5cae016090 R15: 00007ffc626d81f8 [ 881.854623][T29528] [ 882.382051][T25265] Bluetooth: hci3: command tx timeout [ 882.441090][T17069] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 882.462798][T17069] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 882.495773][T17069] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 882.515210][T17069] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 882.539984][T29535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6019'. [ 882.568907][T17069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 882.674082][T29539] batman_adv: batadv0: Removing interface: gretap1 [ 882.787464][T29537] wg1 speed is unknown, defaulting to 1000 [ 882.923424][T29562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6025'. [ 882.935299][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6025'. [ 883.096221][T29565] netlink: 'syz.2.6026': attribute type 7 has an invalid length. [ 883.099005][T29537] lo speed is unknown, defaulting to 1000 [ 883.123791][T29531] wg1 speed is unknown, defaulting to 1000 [ 883.136151][T29565] netlink: 'syz.2.6026': attribute type 8 has an invalid length. [ 883.366428][T29576] netlink: 'syz.0.6030': attribute type 4 has an invalid length. [ 883.431348][T29576] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6030'. [ 883.517894][ T6348] hid-generic 0005:16C0:5508.0001: item fetching failed at offset 3/6 [ 883.528727][ T6348] hid-generic 0005:16C0:5508.0001: probe with driver hid-generic failed with error -22 [ 883.575366][T29585] netlink: 'syz.3.6031': attribute type 21 has an invalid length. [ 883.627340][T29579] 8021q: VLANs not supported on ip6gre0 [ 883.737840][T29531] lo speed is unknown, defaulting to 1000 [ 883.739499][T29577] wg1 speed is unknown, defaulting to 1000 [ 883.802088][T29596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6035'. [ 883.874254][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 883.882398][ C1] lec:lec_tx_timeout: lec0 [ 883.961766][T29607] x_tables: duplicate underflow at hook 1 [ 884.127776][T29614] sctp: [Deprecated]: syz.3.6039 (pid 29614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 884.127776][T29614] Use struct sctp_sack_info instead [ 884.227649][T29531] chnl_net:caif_netlink_parms(): no params data found [ 884.365790][T29626] sctp: [Deprecated]: syz.1.6043 (pid 29626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 884.365790][T29626] Use struct sctp_sack_info instead [ 884.391802][T29627] sctp: [Deprecated]: syz.1.6043 (pid 29627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 884.391802][T29627] Use struct sctp_sack_info instead [ 884.671382][T25265] Bluetooth: hci5: command tx timeout [ 884.738033][T29577] lo speed is unknown, defaulting to 1000 [ 884.858046][T29531] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.866500][T29531] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.874743][T29531] bridge_slave_0: entered allmulticast mode [ 884.884659][T29531] bridge_slave_0: entered promiscuous mode [ 884.927322][T29531] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.940510][T29531] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.948826][T29531] bridge_slave_1: entered allmulticast mode [ 884.957467][T29531] bridge_slave_1: entered promiscuous mode [ 884.974695][T29645] netlink: 'syz.3.6047': attribute type 1 has an invalid length. [ 884.984457][T29645] netlink: 'syz.3.6047': attribute type 2 has an invalid length. [ 885.053712][T29531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.067811][T29531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.103093][T29646] wg1 speed is unknown, defaulting to 1000 [ 885.127264][T29531] team0: Port device team_slave_0 added [ 885.136480][T29531] team0: Port device team_slave_1 added [ 885.178893][T29531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.187502][T29531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.215208][T29531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.229128][T29531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.237766][T29531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.264522][T29531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.337799][T29531] hsr_slave_0: entered promiscuous mode [ 885.345207][T29531] hsr_slave_1: entered promiscuous mode [ 885.352743][T29531] debugfs: 'hsr0' already exists in 'hsr' [ 885.358683][T29531] Cannot create hsr debugfs directory [ 885.459917][T29646] lo speed is unknown, defaulting to 1000 [ 885.909615][T29531] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.036271][T29531] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.182732][T29531] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.251455][T29531] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.331715][T29665] __nla_validate_parse: 7 callbacks suppressed [ 886.331734][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6054'. [ 886.383866][T16606] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.394630][T16606] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.406190][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6054'. [ 886.429174][T16606] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.458988][T16606] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.609868][T29531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 886.656222][T29531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 886.684730][T29682] tipc: Enabling of bearer rejected, failed to enable media [ 886.723803][T29684] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 886.732274][T29684] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 886.748121][T29531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 886.762564][T25265] Bluetooth: hci5: command tx timeout [ 886.809843][T29531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 886.854879][T29691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6059'. [ 887.046614][T29709] netlink: 'syz.1.6063': attribute type 1 has an invalid length. [ 887.120865][T29711] bond16: entered promiscuous mode [ 887.127768][T29711] 8021q: adding VLAN 0 to HW filter on device bond16 [ 887.133315][T29717] netlink: 'syz.0.6064': attribute type 10 has an invalid length. [ 887.180937][T29711] bond17: Unable to set down delay as MII monitoring is disabled [ 887.223262][T29711] bond17 (unregistering): Released all slaves [ 887.339119][T29531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.403356][ T5159] block nbd0: Possible stuck request ffff88803c358000: control (read@0,1024B). Runtime 150 seconds [ 887.415166][ T5159] block nbd0: Possible stuck request ffff88803c358200: control (read@1024,1024B). Runtime 150 seconds [ 887.428815][ T5159] block nbd0: Possible stuck request ffff88803c358400: control (read@2048,1024B). Runtime 150 seconds [ 887.440230][ T5159] block nbd0: Possible stuck request ffff88803c358600: control (read@3072,1024B). Runtime 150 seconds [ 887.466488][T29531] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.498215][T16606] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.505481][T16606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.534152][T29730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6069'. [ 887.557901][T21206] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.565249][T21206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.665684][T29737] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6073'. [ 887.686792][T29739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 887.983784][T29752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6077'. [ 888.016505][T29752] vlan2: entered promiscuous mode [ 888.031034][T29752] veth0_to_team: entered promiscuous mode [ 888.072075][T29752] vlan2: entered allmulticast mode [ 888.090925][T29752] veth0_to_team: entered allmulticast mode [ 888.117958][T29759] bridge0: entered promiscuous mode [ 888.125955][T29759] macvlan2: entered allmulticast mode [ 888.133336][T29759] bridge0: entered allmulticast mode [ 888.140775][T29759] bridge0: port 3(macvlan2) entered blocking state [ 888.147723][T29759] bridge0: port 3(macvlan2) entered disabled state [ 888.161042][T29758] netlink: 'syz.0.6080': attribute type 1 has an invalid length. [ 888.172562][T29759] bridge0: left allmulticast mode [ 888.178179][T29759] bridge0: left promiscuous mode [ 888.288426][T29758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6080'. [ 888.325922][T29763] 8021q: adding VLAN 0 to HW filter on device bond18 [ 888.335074][T29763] bond17: (slave bond18): making interface the new active one [ 888.374228][T29763] bond17: (slave bond18): Enslaving as an active interface with an up link [ 888.414471][T29758] 8021q: adding VLAN 0 to HW filter on device bond17 [ 888.433478][T29772] syzkaller0: left promiscuous mode [ 888.449727][T29772] syzkaller0: left allmulticast mode [ 888.473531][T29772] tipc: Resetting bearer [ 888.493943][T29531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.516672][T29778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6085'. [ 888.549065][T29782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6086'. [ 888.623980][T29782] tipc: Enabling of bearer rejected, failed to enable media [ 888.795268][T29798] openvswitch: netlink: IP tunnel attribute has 32 unknown bytes. [ 888.833718][T25265] Bluetooth: hci5: command tx timeout [ 889.250447][T29531] veth0_vlan: entered promiscuous mode [ 889.292651][T29531] veth1_vlan: entered promiscuous mode [ 889.387275][T29531] veth0_macvtap: entered promiscuous mode [ 889.415004][T29531] veth1_macvtap: entered promiscuous mode [ 889.491905][T29531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.520908][T29531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.575372][T16606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.585505][T16606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.646418][T16606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.655940][T16606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.832376][T21202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.856004][T21202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.887353][T29840] netlink: 'syz.2.6103': attribute type 11 has an invalid length. [ 889.922691][T29840] netlink: 'syz.2.6103': attribute type 25 has an invalid length. [ 889.990067][T21211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.035622][T21211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.617910][T17069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 890.630695][T17069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 890.654734][T17069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 890.677030][T17069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 890.711774][T17069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 890.869282][T29877] wg1 speed is unknown, defaulting to 1000 [ 890.912701][T25265] Bluetooth: hci5: command tx timeout [ 891.158715][T29888] unsupported nla_type 142 [ 891.257198][T29894] syzkaller1: entered promiscuous mode [ 891.313377][T29894] syzkaller1: entered allmulticast mode [ 891.469076][T29877] lo speed is unknown, defaulting to 1000 [ 891.662539][T29919] netlink: 'syz.4.6122': attribute type 10 has an invalid length. [ 891.678161][T29923] xt_TCPMSS: Only works on TCP SYN packets [ 891.727254][T29927] __nla_validate_parse: 7 callbacks suppressed [ 891.727277][T29927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6122'. [ 891.760187][T29919] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 891.960283][T29942] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 892.002375][T29942] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 892.044486][T29942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 892.104634][T29877] chnl_net:caif_netlink_parms(): no params data found [ 892.312001][T29961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6135'. [ 892.403517][T29877] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.410860][T29877] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.418623][T29877] bridge_slave_0: entered allmulticast mode [ 892.426742][T29877] bridge_slave_0: entered promiscuous mode [ 892.440346][T29877] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.448006][T29877] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.455560][T29877] bridge_slave_1: entered allmulticast mode [ 892.496248][T29877] bridge_slave_1: entered promiscuous mode [ 892.578157][T29877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.605115][T29877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.695329][T29877] team0: Port device team_slave_0 added [ 892.716662][T29877] team0: Port device team_slave_1 added [ 892.751862][T25265] Bluetooth: hci2: command tx timeout [ 892.852355][T29877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.884849][T29877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.931287][T29877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.971536][T29877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.973249][T29984] netlink: 'syz.4.6142': attribute type 1 has an invalid length. [ 892.988198][T29877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.040108][T29877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.065610][T29984] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6142'. [ 893.108397][T29987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6143'. [ 893.128995][T29877] hsr_slave_0: entered promiscuous mode [ 893.159053][T29877] hsr_slave_1: entered promiscuous mode [ 893.174819][T29877] debugfs: 'hsr0' already exists in 'hsr' [ 893.186369][T29877] Cannot create hsr debugfs directory [ 893.271500][T29990] openvswitch: netlink: Geneve option length err (len 280, max 255). [ 893.313876][T29994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6146'. [ 893.684831][T29877] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.698612][T29877] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 893.718277][T29877] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 893.834781][T29877] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.861292][T29877] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 893.877278][T29877] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 893.923771][T30020] bridge0: entered allmulticast mode [ 893.972136][T29877] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 893.995308][T29877] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 894.016820][T29877] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 894.078825][T29877] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.111670][T29877] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 894.131231][T29877] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 894.322132][T30045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6160'. [ 894.458399][T29877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 894.483512][T29877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 894.545333][T29877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 894.560774][T29877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 894.736897][T30066] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.751002][T30066] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.832164][T25265] Bluetooth: hci2: command tx timeout [ 894.902556][T30066] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 894.914160][T30066] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.948740][T30074] pimreg: entered allmulticast mode [ 895.018905][T30066] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.032885][T30066] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.086474][T30077] netlink: 'syz.0.6167': attribute type 1 has an invalid length. [ 895.114731][T30080] netlink: 'syz.4.6168': attribute type 1 has an invalid length. [ 895.124623][T30080] netlink: 'syz.4.6168': attribute type 2 has an invalid length. [ 895.133622][T30080] netlink: 'syz.4.6168': attribute type 1 has an invalid length. [ 895.141734][T30080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6168'. [ 895.154349][T30077] 8021q: adding VLAN 0 to HW filter on device bond19 [ 895.166621][T30081] bond19: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 895.238106][T30066] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.258888][T30066] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.288807][T30077] bond19: (slave ip6gretap1): Enslaving as an active interface with an up link [ 895.319791][T29877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.390933][T29877] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.431025][T21206] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 895.491819][T21206] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.499479][T21206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.529509][T21206] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.536745][T21206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.571620][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.594052][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.621703][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.651544][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.686689][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.698440][T21202] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.707736][T21202] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.717952][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.726329][T21202] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 895.736237][T21202] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.745305][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.771306][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.812640][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 895.853420][T30066] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.878345][T30066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.965422][T30066] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.002126][T30066] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.179126][T30118] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6180'. [ 896.294406][T30121] wg2: Caught tx_queue_len zero misconfig [ 896.312742][T30118] netlink: 'syz.4.6180': attribute type 10 has an invalid length. [ 896.315539][T30121] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6181'. [ 896.389165][T30118] team0: Port device dummy0 added [ 896.448101][T29877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.462248][T30128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6182'. [ 896.489583][T30128] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 896.596518][T29877] veth0_vlan: entered promiscuous mode [ 896.626745][T29877] veth1_vlan: entered promiscuous mode [ 896.709902][T29877] veth0_macvtap: entered promiscuous mode [ 896.735476][T29877] veth1_macvtap: entered promiscuous mode [ 896.783216][T29877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.806676][T29877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.858876][T21206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.879639][T21206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.899548][T21206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.912227][T25265] Bluetooth: hci2: command tx timeout [ 896.925162][T21206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.028301][T30157] __nla_validate_parse: 2 callbacks suppressed [ 897.028327][T30157] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6190'. [ 897.840289][T30177] wg1 speed is unknown, defaulting to 1000 [ 897.857012][T21206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.900093][T21206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.020683][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6197'. [ 898.039600][T16606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.061369][T16606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.135771][T30190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6198'. [ 898.421094][T30177] lo speed is unknown, defaulting to 1000 [ 898.624127][T17069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 898.638984][T17069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 898.648263][T17069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 898.665925][T17069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 898.682029][T17069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 898.948251][T30207] wg1 speed is unknown, defaulting to 1000 [ 898.991359][T25265] Bluetooth: hci2: command tx timeout [ 899.272608][T17946] syz_tun (unregistering): left allmulticast mode [ 899.460333][T30207] lo speed is unknown, defaulting to 1000 [ 899.863413][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a8854800: rx timeout, send abort [ 899.900195][T30257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6212'. [ 900.018980][T30259] netlink: 652 bytes leftover after parsing attributes in process `syz.2.6213'. [ 900.171798][T30272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6215'. [ 900.301662][T30207] chnl_net:caif_netlink_parms(): no params data found [ 900.363775][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a8854c00: rx timeout, send abort [ 900.373596][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a8854800: abort rx timeout. Force session deactivation [ 900.432040][T16606] net_ratelimit: 153 callbacks suppressed [ 900.432064][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.487240][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.561326][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.577683][T30285] xt_hashlimit: overflow, rate too high: 0 [ 900.583851][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.592579][T30207] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.599772][T30207] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.607927][T30207] bridge_slave_0: entered allmulticast mode [ 900.617069][T30207] bridge_slave_0: entered promiscuous mode [ 900.626674][T30207] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.631664][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.635094][T30207] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.650956][T30207] bridge_slave_1: entered allmulticast mode [ 900.659268][T30207] bridge_slave_1: entered promiscuous mode [ 900.691442][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.711330][T30288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6219'. [ 900.726112][T30207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.742982][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.752041][T25265] Bluetooth: hci0: command tx timeout [ 900.775902][T30207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.793902][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.821404][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.848044][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 900.864751][T30207] team0: Port device team_slave_0 added [ 900.872093][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880a8854c00: abort rx timeout. Force session deactivation [ 900.896645][T30207] team0: Port device team_slave_1 added [ 901.015704][T30207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.032065][T30207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.090917][T30207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.113520][T30207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.120523][T30207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.181397][T30207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.206475][T30296] syzkaller1: entered promiscuous mode [ 901.221503][T30296] syzkaller1: entered allmulticast mode [ 901.370279][T30207] hsr_slave_0: entered promiscuous mode [ 901.390000][T30207] hsr_slave_1: entered promiscuous mode [ 901.399753][T30207] debugfs: 'hsr0' already exists in 'hsr' [ 901.418735][T30207] Cannot create hsr debugfs directory [ 901.429776][T30309] netlink: 'syz.3.6225': attribute type 4 has an invalid length. [ 901.550408][T30314] rdma_op ffff8880283c11f0 conn xmit_rdma 0000000000000000 [ 901.570198][T30264] lec:lec_atm_close: lec0: Shut down! [ 901.606994][T30314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6226'. [ 901.629904][T30314] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.638594][T30314] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.676474][T30318] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6227'. [ 901.688331][T30317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6227'. [ 901.862723][T30207] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.881912][T30207] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.945776][T30207] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.968522][T30207] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.048892][T30207] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.080432][T30207] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.097149][T30329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6230'. [ 902.128807][T30333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6231'. [ 902.159510][T30207] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.179982][T30207] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.237772][T30335] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 902.256035][T30335] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6232'. [ 902.487917][T30207] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 902.505924][T30207] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 902.525762][T30207] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 902.551248][T30207] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 902.675872][T30356] netlink: 'syz.2.6236': attribute type 10 has an invalid length. [ 902.723015][T30356] team0: Device vxcan1 is of different type [ 902.832079][T25265] Bluetooth: hci0: command tx timeout [ 902.858526][T30207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.880511][T30207] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.904047][T16606] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.911274][T16606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.956153][T16606] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.963490][T16606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.026077][T30361] geneve2: entered promiscuous mode [ 903.040002][T30361] geneve2: entered allmulticast mode [ 903.071670][T30363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6237'. [ 903.113786][T30363] ip6gretap1: entered promiscuous mode [ 903.133721][T30363] ip6gretap1: entered allmulticast mode [ 903.393898][ T1760] block nbd5: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 30 seconds [ 903.404720][ T1760] block nbd5: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 30 seconds [ 903.416907][ T1760] block nbd5: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 30 seconds [ 903.428806][ T1760] block nbd5: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 30 seconds [ 903.754442][T30207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.889004][T30391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6245'. [ 903.902696][T30207] veth0_vlan: entered promiscuous mode [ 903.924074][T30207] veth1_vlan: entered promiscuous mode [ 903.935083][T30391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6245'. [ 903.999061][T30207] veth0_macvtap: entered promiscuous mode [ 904.023762][T30207] veth1_macvtap: entered promiscuous mode [ 904.089693][T30207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.117582][T30207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.143644][T16606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.158205][T30394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6246'. [ 904.158621][T16606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.242264][T16606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.278559][T16606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.453170][T21210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.474247][T21210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.620258][T16606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.643068][T30409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6251'. [ 904.663962][T16606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.834508][T30422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6254'. [ 904.913456][T25265] Bluetooth: hci0: command tx timeout [ 904.965646][T30418] wg1 speed is unknown, defaulting to 1000 [ 905.209150][T30418] lo speed is unknown, defaulting to 1000 [ 905.260589][T30436] pim6reg1: entered promiscuous mode [ 905.266346][T30436] pim6reg1: entered allmulticast mode [ 905.464102][T16606] net_ratelimit: 138 callbacks suppressed [ 905.464128][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.540410][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.583772][T16606] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 905.720907][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.744708][T16606] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 905.756490][T30451] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6261'. [ 905.881901][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.912345][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.932875][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 905.955689][T21210] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 906.081660][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 906.216513][ T29] audit: type=1804 audit(1773008649.757:56): pid=30459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6264" name="/newroot/60/memory.events" dev="tmpfs" ino=322 res=1 errno=0 [ 906.273123][ T29] audit: type=1800 audit(1773008649.757:57): pid=30459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6264" name="memory.events" dev="tmpfs" ino=322 res=0 errno=0 [ 906.416748][T30462] wg1 speed is unknown, defaulting to 1000 [ 906.565256][T30474] netlink: 'syz.3.6269': attribute type 5 has an invalid length. [ 906.680016][T30462] lo speed is unknown, defaulting to 1000 [ 906.831226][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 906.839346][ C1] lec:lec_tx_timeout: lec0 [ 906.991381][T25265] Bluetooth: hci0: command tx timeout [ 907.701308][T30508] bridge_slave_1: left allmulticast mode [ 907.707107][T30508] bridge_slave_1: left promiscuous mode [ 907.722484][T30508] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.941719][T30516] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20000 [ 908.179675][T30530] netlink: 'syz.3.6284': attribute type 2 has an invalid length. [ 908.199759][T30530] __nla_validate_parse: 2 callbacks suppressed [ 908.199779][T30530] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6284'. [ 908.250425][T30534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6285'. [ 908.293967][T30529] wg1 speed is unknown, defaulting to 1000 [ 908.468960][T30540] Cannot find set identified by id 1 to match [ 908.484943][T30542] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6289'. [ 908.495384][T30544] netlink: 324 bytes leftover after parsing attributes in process `syz.0.6287'. [ 908.626988][T30548] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 908.883654][T30556] netlink: 'syz.3.6294': attribute type 1 has an invalid length. [ 908.974743][T30529] lo speed is unknown, defaulting to 1000 [ 909.268669][T30567] tipc: Started in network mode [ 909.276242][T30567] tipc: Node identity bea7911a8e8, cluster identity 4711 [ 909.284754][T30567] tipc: Enabled bearer , priority 0 [ 909.303165][T30564] syzkaller0: entered promiscuous mode [ 909.364893][T30564] syzkaller0: entered allmulticast mode [ 909.380450][T30569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6297'. [ 909.443437][T30564] tipc: Resetting bearer [ 909.449285][T30564] syzkaller0: tun_net_xmit 90 [ 909.470554][T30560] tipc: Resetting bearer [ 909.895939][T30560] tipc: Disabling bearer [ 910.357430][T30584] netlink: 'syz.0.6302': attribute type 32 has an invalid length. [ 910.389110][T21203] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.410160][T21203] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.430230][T21203] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.471318][T21210] net_ratelimit: 111 callbacks suppressed [ 910.471342][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.501183][T21203] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.531225][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.571657][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.587037][T30593] FAULT_INJECTION: forcing a failure. [ 910.587037][T30593] name failslab, interval 1, probability 0, space 0, times 1 [ 910.601011][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.610001][T30593] CPU: 1 UID: 0 PID: 30593 Comm: syz.0.6305 Not tainted syzkaller #0 PREEMPT(full) [ 910.610042][T30593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.610057][T30593] Call Trace: [ 910.610066][T30593] [ 910.610077][T30593] dump_stack_lvl+0xe8/0x150 [ 910.610113][T30593] should_fail_ex+0x412/0x560 [ 910.610149][T30593] should_failslab+0xa8/0x100 [ 910.610179][T30593] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 910.610206][T30593] ? __alloc_skb+0x1d0/0x7d0 [ 910.610235][T30593] ? __local_bh_enable_ip+0xd0/0x130 [ 910.610267][T30593] __alloc_skb+0x1d0/0x7d0 [ 910.610303][T30593] __ip_append_data+0x2ca0/0x3f30 [ 910.610444][T30593] ? __pfx_raw_getfrag+0x10/0x10 [ 910.610523][T30593] ? __pfx___ip_append_data+0x10/0x10 [ 910.610558][T30593] ? ipv4_mtu+0x53b/0x650 [ 910.610611][T30593] ? ipv4_mtu+0x23/0x650 [ 910.610641][T30593] ? __pfx_ipv4_mtu+0x10/0x10 [ 910.610671][T30593] ? ip_setup_cork+0x57e/0xa50 [ 910.610707][T30593] ip_append_data+0x10d/0x190 [ 910.610743][T30593] ? __pfx_raw_getfrag+0x10/0x10 [ 910.610778][T30593] raw_sendmsg+0x14be/0x1a50 [ 910.610828][T30593] ? __pfx_raw_sendmsg+0x10/0x10 [ 910.610878][T30593] ? aa_sk_perm+0x6d5/0x900 [ 910.610947][T30593] ? __pfx_aa_sk_perm+0x10/0x10 [ 910.610972][T30593] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 910.611059][T30593] ? sock_rps_record_flow+0x19/0x350 [ 910.611139][T30593] ? inet_sendmsg+0x2f4/0x370 [ 910.611159][T30593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 910.611187][T30593] ____sys_sendmsg+0x80a/0x9f0 [ 910.611208][T30593] ? irqentry_exit+0x59e/0x620 [ 910.611228][T30593] ? trace_irq_disable+0x3b/0x150 [ 910.611269][T30593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 910.611301][T30593] ? import_iovec+0x73/0xa0 [ 910.611338][T30593] ___sys_sendmsg+0x2a5/0x360 [ 910.611365][T30593] ? __pfx____sys_sendmsg+0x10/0x10 [ 910.611392][T30593] ? kstrtouint+0x6e/0xe0 [ 910.611482][T30593] ? __fget_files+0x2a/0x420 [ 910.611514][T30593] ? __fget_files+0x3a0/0x420 [ 910.611558][T30593] __sys_sendmmsg+0x27c/0x4e0 [ 910.611587][T30593] ? __pfx___sys_sendmmsg+0x10/0x10 [ 910.611607][T30593] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 910.611659][T30593] ? ksys_write+0x242/0x270 [ 910.611687][T30593] ? __pfx_ksys_write+0x10/0x10 [ 910.611718][T30593] __x64_sys_sendmmsg+0xa0/0xc0 [ 910.611744][T30593] do_syscall_64+0x14d/0xf80 [ 910.611765][T30593] ? trace_irq_disable+0x3b/0x150 [ 910.611796][T30593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.611820][T30593] ? clear_bhb_loop+0x40/0x90 [ 910.611847][T30593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.611870][T30593] RIP: 0033:0x7f097799c799 [ 910.611891][T30593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.611911][T30593] RSP: 002b:00007f0978820028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 910.611935][T30593] RAX: ffffffffffffffda RBX: 00007f0977c15fa0 RCX: 00007f097799c799 [ 910.611951][T30593] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 910.611965][T30593] RBP: 00007f0978820090 R08: 0000000000000000 R09: 0000000000000000 [ 910.611979][T30593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.611992][T30593] R13: 00007f0977c16038 R14: 00007f0977c15fa0 R15: 00007ffd199ae938 [ 910.612037][T30593] [ 910.961245][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 910.979550][T30591] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6304'. [ 910.989251][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 911.012319][T30593] netlink: 'syz.0.6305': attribute type 4 has an invalid length. [ 911.041657][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 911.049792][T21210] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 911.135079][T30583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 911.182317][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 911.204893][T16606] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 911.273452][T30600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6307'. [ 911.346742][ T29] audit: type=1800 audit(1773008654.887:58): pid=30589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6301" name="memory.events" dev="tmpfs" ino=370 res=0 errno=0 [ 911.369316][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6307'. [ 911.473341][T30606] wg1 speed is unknown, defaulting to 1000 [ 912.082885][T17069] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 912.094046][T17069] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 912.103966][T17069] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 912.114995][T17069] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 912.142823][T17069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 912.233321][T30618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6312'. [ 912.348398][T30613] wg1 speed is unknown, defaulting to 1000 [ 912.357952][T30606] lo speed is unknown, defaulting to 1000 [ 912.373529][T30618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6312'. [ 912.909100][T30613] lo speed is unknown, defaulting to 1000 [ 912.969314][T30638] netlink: 'syz.3.6317': attribute type 4 has an invalid length. [ 912.984084][T30640] FAULT_INJECTION: forcing a failure. [ 912.984084][T30640] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 913.010067][T30640] CPU: 1 UID: 0 PID: 30640 Comm: syz.2.6318 Not tainted syzkaller #0 PREEMPT(full) [ 913.010100][T30640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.010115][T30640] Call Trace: [ 913.010124][T30640] [ 913.010134][T30640] dump_stack_lvl+0xe8/0x150 [ 913.010171][T30640] should_fail_ex+0x412/0x560 [ 913.010205][T30640] prepare_alloc_pages+0x22a/0x650 [ 913.010242][T30640] __alloc_frozen_pages_noprof+0x12f/0x380 [ 913.010275][T30640] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 913.010309][T30640] ? __pfx_policy_nodemask+0x10/0x10 [ 913.010341][T30640] ? raw_sendmsg+0x15ee/0x1a50 [ 913.010376][T30640] alloc_pages_mpol+0x232/0x4a0 [ 913.010412][T30640] vma_alloc_folio_noprof+0xea/0x210 [ 913.010444][T30640] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 913.010484][T30640] do_wp_page+0x1204/0x5a00 [ 913.010541][T30640] ? __pfx_do_wp_page+0x10/0x10 [ 913.010570][T30640] ? do_raw_spin_lock+0x12b/0x2f0 [ 913.010597][T30640] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 913.010632][T30640] handle_mm_fault+0x1520/0x3310 [ 913.010681][T30640] ? handle_mm_fault+0xee/0x3310 [ 913.010724][T30640] ? __pfx_handle_mm_fault+0x10/0x10 [ 913.010780][T30640] ? lock_mm_and_find_vma+0xa7/0x340 [ 913.010809][T30640] do_user_addr_fault+0x75b/0x1340 [ 913.010867][T30640] exc_page_fault+0x6a/0xc0 [ 913.010903][T30640] asm_exc_page_fault+0x26/0x30 [ 913.010924][T30640] RIP: 0010:__put_user_4+0xd/0x20 [ 913.011049][T30640] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 913.011072][T30640] RSP: 0018:ffffc90005a2fc98 EFLAGS: 00050206 [ 913.011093][T30640] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000005278 [ 913.011108][T30640] RDX: 0000000000000000 RSI: ffffffff8e169e19 RDI: ffffffff8c27b200 [ 913.011124][T30640] RBP: ffffc90005a2feb0 R08: ffffffff8216587f R09: ffff888034038f80 [ 913.011140][T30640] R10: dffffc0000000000 R11: fffffbfff2022837 R12: 1ffff92000b45f9c [ 913.011155][T30640] R13: 0000000000040000 R14: 0000200000005240 R15: 00000000000003ff [ 913.011177][T30640] ? __might_fault+0xaf/0x130 [ 913.011206][T30640] __sys_sendmmsg+0x2b0/0x4e0 [ 913.011233][T30640] ? __pfx___sys_sendmmsg+0x10/0x10 [ 913.011253][T30640] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 913.011302][T30640] ? ksys_write+0x242/0x270 [ 913.011327][T30640] ? __pfx_ksys_write+0x10/0x10 [ 913.011358][T30640] __x64_sys_sendmmsg+0xa0/0xc0 [ 913.011382][T30640] do_syscall_64+0x14d/0xf80 [ 913.011402][T30640] ? trace_irq_disable+0x3b/0x150 [ 913.011434][T30640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.011457][T30640] ? clear_bhb_loop+0x40/0x90 [ 913.011485][T30640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.011507][T30640] RIP: 0033:0x7fcb0699c799 [ 913.011528][T30640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.011547][T30640] RSP: 002b:00007fcb077db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 913.011569][T30640] RAX: ffffffffffffffda RBX: 00007fcb06c15fa0 RCX: 00007fcb0699c799 [ 913.011586][T30640] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 913.011601][T30640] RBP: 00007fcb077db090 R08: 0000000000000000 R09: 0000000000000000 [ 913.011615][T30640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.011628][T30640] R13: 00007fcb06c16038 R14: 00007fcb06c15fa0 R15: 00007fffbd3260b8 [ 913.011664][T30640] [ 913.388515][T30640] netlink: 'syz.2.6318': attribute type 4 has an invalid length. [ 913.689687][T30655] netlink: 'syz.2.6321': attribute type 1 has an invalid length. [ 913.754571][T30656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6321'. [ 913.800522][T30655] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 913.854745][T30669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6324'. [ 913.968416][T30669] bond0: entered promiscuous mode [ 913.973674][T30669] bond_slave_0: entered promiscuous mode [ 913.979739][T30669] bond_slave_1: entered promiscuous mode [ 914.000849][T30669] mac80211_hwsim hwsim86 wlan1: entered promiscuous mode [ 914.020186][T30669] bond0: left promiscuous mode [ 914.041352][T30669] bond_slave_0: left promiscuous mode [ 914.071869][T30669] bond_slave_1: left promiscuous mode [ 914.090173][T30669] mac80211_hwsim hwsim86 wlan1: left promiscuous mode [ 914.138840][T30672] bridge0: entered promiscuous mode [ 914.147606][T30672] macvlan2: entered allmulticast mode [ 914.154699][T30672] bridge0: entered allmulticast mode [ 914.181684][T30672] bridge0: port 2(macvlan2) entered blocking state [ 914.188562][T30672] bridge0: port 2(macvlan2) entered disabled state [ 914.208677][T17069] Bluetooth: hci4: command tx timeout [ 914.215425][T30677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6327'. [ 914.228304][T30672] bridge0: left allmulticast mode [ 914.241823][T30672] bridge0: left promiscuous mode [ 914.278316][T30613] chnl_net:caif_netlink_parms(): no params data found [ 914.352700][T30685] FAULT_INJECTION: forcing a failure. [ 914.352700][T30685] name failslab, interval 1, probability 0, space 0, times 0 [ 914.380082][T30683] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6329'. [ 914.392432][T30685] CPU: 1 UID: 0 PID: 30685 Comm: syz.2.6330 Not tainted syzkaller #0 PREEMPT(full) [ 914.392461][T30685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 914.392476][T30685] Call Trace: [ 914.392486][T30685] [ 914.392495][T30685] dump_stack_lvl+0xe8/0x150 [ 914.392533][T30685] should_fail_ex+0x412/0x560 [ 914.392568][T30685] should_failslab+0xa8/0x100 [ 914.392599][T30685] __kmalloc_noprof+0xe8/0x760 [ 914.392625][T30685] ? ___neigh_create+0x6d5/0x2280 [ 914.392746][T30685] ___neigh_create+0x6d5/0x2280 [ 914.392781][T30685] ? iptable_mangle_hook+0x189/0x4c0 [ 914.392858][T30685] ip_neigh_gw4+0x289/0x3b0 [ 914.392896][T30685] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 914.392942][T30685] ? ip_finish_output2+0x3c2/0x1070 [ 914.392974][T30685] ip_finish_output2+0x4e5/0x1070 [ 914.393006][T30685] ? ip_skb_dst_mtu+0x80b/0xa50 [ 914.393042][T30685] ? ip_finish_output+0x40e/0x530 [ 914.393078][T30685] ip_output+0x29f/0x450 [ 914.393109][T30685] ? ip_output+0x5b/0x450 [ 914.393143][T30685] ip_push_pending_frames+0x8b/0x110 [ 914.393178][T30685] raw_sendmsg+0x1547/0x1a50 [ 914.393235][T30685] ? __pfx_raw_sendmsg+0x10/0x10 [ 914.393285][T30685] ? aa_sk_perm+0x6d5/0x900 [ 914.393322][T30685] ? __pfx_aa_sk_perm+0x10/0x10 [ 914.393347][T30685] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 914.393384][T30685] ? sock_rps_record_flow+0x19/0x350 [ 914.393421][T30685] ? inet_sendmsg+0x2f4/0x370 [ 914.393441][T30685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 914.393470][T30685] ____sys_sendmsg+0x80a/0x9f0 [ 914.393491][T30685] ? irqentry_exit+0x59e/0x620 [ 914.393511][T30685] ? trace_irq_disable+0x3b/0x150 [ 914.393554][T30685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.393587][T30685] ? import_iovec+0x73/0xa0 [ 914.393625][T30685] ___sys_sendmsg+0x2a5/0x360 [ 914.393653][T30685] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.393683][T30685] ? kstrtouint+0x6e/0xe0 [ 914.393741][T30685] ? __fget_files+0x2a/0x420 [ 914.393773][T30685] ? __fget_files+0x3a0/0x420 [ 914.393818][T30685] __sys_sendmmsg+0x27c/0x4e0 [ 914.393846][T30685] ? __pfx___sys_sendmmsg+0x10/0x10 [ 914.393867][T30685] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 914.393920][T30685] ? ksys_write+0x242/0x270 [ 914.393947][T30685] ? __pfx_ksys_write+0x10/0x10 [ 914.393979][T30685] __x64_sys_sendmmsg+0xa0/0xc0 [ 914.394005][T30685] do_syscall_64+0x14d/0xf80 [ 914.394025][T30685] ? trace_irq_disable+0x3b/0x150 [ 914.394056][T30685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.394079][T30685] ? clear_bhb_loop+0x40/0x90 [ 914.394107][T30685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.394130][T30685] RIP: 0033:0x7fcb0699c799 [ 914.394151][T30685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.394171][T30685] RSP: 002b:00007fcb077db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 914.394195][T30685] RAX: ffffffffffffffda RBX: 00007fcb06c15fa0 RCX: 00007fcb0699c799 [ 914.394211][T30685] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 914.394234][T30685] RBP: 00007fcb077db090 R08: 0000000000000000 R09: 0000000000000000 [ 914.394248][T30685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.394261][T30685] R13: 00007fcb06c16038 R14: 00007fcb06c15fa0 R15: 00007fffbd3260b8 [ 914.394297][T30685] [ 914.726221][T30683] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6329'. [ 914.843216][T30697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6333'. [ 914.866324][T30700] netlink: 'syz.2.6330': attribute type 4 has an invalid length. [ 914.908098][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6333'. [ 914.959249][T30613] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.967029][T30613] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.974484][T30613] bridge_slave_0: entered allmulticast mode [ 914.982535][T30613] bridge_slave_0: entered promiscuous mode [ 914.993391][T30613] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.000786][T30613] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.009320][T30613] bridge_slave_1: entered allmulticast mode [ 915.017493][T30613] bridge_slave_1: entered promiscuous mode [ 915.060689][T30613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.073808][T30613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.120424][T30613] team0: Port device team_slave_0 added [ 915.189842][T30613] team0: Port device team_slave_1 added [ 915.267291][T30613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.305683][T30613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.344744][T30613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 915.392646][T30613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 915.418402][T30613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.462711][T30613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.483071][T16606] net_ratelimit: 119 callbacks suppressed [ 915.483091][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.521265][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.558450][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.578749][T30722] bond1: option lp_interval: invalid value (0) [ 915.602365][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.617248][T30722] bond1: option lp_interval: allowed values 1 - 2147483647 [ 915.627962][T30722] bond1 (unregistering): Released all slaves [ 915.631947][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.701368][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.751383][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.771579][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.795957][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.853938][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 915.877234][T30736] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.884490][T30736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.892144][T30736] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.899366][T30736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.914744][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6343'. [ 915.947950][T30613] hsr_slave_0: entered promiscuous mode [ 915.962603][T30613] hsr_slave_1: entered promiscuous mode [ 915.978919][T30613] debugfs: 'hsr0' already exists in 'hsr' [ 915.992708][T30613] Cannot create hsr debugfs directory [ 916.138796][T30751] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 916.272656][T17069] Bluetooth: hci4: command tx timeout [ 916.330603][T30613] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.395988][T30758] netlink: 'syz.0.6347': attribute type 21 has an invalid length. [ 916.414741][T30758] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6347'. [ 916.465687][T30613] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.572584][T30758] netlink: 'syz.0.6347': attribute type 4 has an invalid length. [ 916.580404][T30758] netlink: 'syz.0.6347': attribute type 5 has an invalid length. [ 916.637912][T30758] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6347'. [ 916.670944][T30613] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.743093][T30613] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.817605][ T5194] udevd[5194]: worker [22831] /devices/virtual/block/nbd0 timeout; kill it [ 916.840689][ T5194] udevd[5194]: seq 32393 '/devices/virtual/block/nbd0' killed [ 916.851891][T30777] syzkaller0: entered allmulticast mode [ 916.877819][T30777] syzkaller0: entered promiscuous mode [ 916.906447][T30777] syzkaller0 (unregistering): left promiscuous mode [ 916.914681][T30777] syzkaller0 (unregistering): left allmulticast mode [ 916.958152][T30779] wg1 speed is unknown, defaulting to 1000 [ 917.093096][T30613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 917.114784][T30613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 917.142239][T30613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 917.205265][T30613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 917.213594][T30787] netlink: 'syz.3.6354': attribute type 58 has an invalid length. [ 917.480893][ T5159] block nbd0: Possible stuck request ffff88803c358000: control (read@0,1024B). Runtime 180 seconds [ 917.492762][ T5159] block nbd0: Possible stuck request ffff88803c358200: control (read@1024,1024B). Runtime 180 seconds [ 917.495067][T30779] lo speed is unknown, defaulting to 1000 [ 917.504166][ T5159] block nbd0: Possible stuck request ffff88803c358400: control (read@2048,1024B). Runtime 180 seconds [ 917.504232][ T5159] block nbd0: Possible stuck request ffff88803c358600: control (read@3072,1024B). Runtime 180 seconds [ 917.568255][T30613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.595606][T30613] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.685853][T30813] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 917.698831][T21203] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.706121][T21203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.821562][T21204] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.828795][T21204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.855932][T30816] sch_fq: defrate 4294967293 ignored. [ 918.068065][T30818] syzkaller0: entered promiscuous mode [ 918.074488][T30818] syzkaller0: entered allmulticast mode [ 918.097296][T30820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.125660][T30820] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 918.139116][T30820] bond0: (slave gre0): Error -95 calling set_mac_address [ 918.168865][T30821] batadv0: entered promiscuous mode [ 918.296641][T30828] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 918.313118][T30829] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 918.362451][T17069] Bluetooth: hci4: command tx timeout [ 920.393969][T30850] __nla_validate_parse: 6 callbacks suppressed [ 920.393993][T30850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6368'. [ 920.437612][T17069] Bluetooth: hci4: command tx timeout [ 920.450491][T30852] netlink: 'syz.3.6368': attribute type 1 has an invalid length. [ 920.487049][T30853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6369'. [ 920.507914][T30853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6369'. [ 920.540246][T30852] net_ratelimit: 177 callbacks suppressed [ 920.540269][T30852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.561809][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.576355][T30856] bond1 (unregistering): Released all slaves [ 920.584725][T30858] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6370'. [ 920.595215][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.613563][T30860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6369'. [ 920.623700][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.652102][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.672933][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.688947][T30863] netlink: 'syz.4.6371': attribute type 4 has an invalid length. [ 920.713255][T30863] xt_ecn: cannot match TCP bits for non-tcp packets [ 920.723245][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.762774][T21206] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 920.877567][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.903231][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 920.939907][T30876] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6375'. [ 920.959741][T30613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.988691][T30874] wg1 speed is unknown, defaulting to 1000 [ 921.075392][T30881] netlink: 'syz.0.6376': attribute type 4 has an invalid length. [ 921.092909][T30613] veth0_vlan: entered promiscuous mode [ 921.115964][T30613] veth1_vlan: entered promiscuous mode [ 921.170066][T30613] veth0_macvtap: entered promiscuous mode [ 921.196607][T30613] veth1_macvtap: entered promiscuous mode [ 921.230239][T30613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.248397][T30613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.273747][T21202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.284909][T21202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.297510][T21202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.311017][T21202] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.493092][T30874] lo speed is unknown, defaulting to 1000 [ 921.505865][T21211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.533774][T21211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.721034][T21210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.736132][T21210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.268294][T30914] wg1 speed is unknown, defaulting to 1000 [ 922.418524][T30921] netlink: 'syz.2.6386': attribute type 4 has an invalid length. [ 922.519952][T30923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6388'. [ 922.866696][T30914] lo speed is unknown, defaulting to 1000 [ 923.277297][T30961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6399'. [ 923.656601][T23056] IPVS: starting estimator thread 0... [ 923.772617][T30975] IPVS: using max 26 ests per chain, 62400 per kthread [ 924.141541][T30991] netlink: 'syz.2.6404': attribute type 4 has an invalid length. [ 924.986941][T31009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6411'. [ 925.279063][T31020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6412'. [ 925.561890][T21210] net_ratelimit: 129 callbacks suppressed [ 925.561913][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.618854][T21210] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 925.653213][T23056] IPVS: starting estimator thread 0... [ 925.741326][T31033] IPVS: using max 29 ests per chain, 69600 per kthread [ 925.752044][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.759933][T21210] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 925.783401][T31035] netlink: 'syz.2.6415': attribute type 1 has an invalid length. [ 925.870104][T31038] syzkaller0: entered allmulticast mode [ 925.881967][T21210] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 925.903072][T21210] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 926.011260][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 926.051426][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 926.059322][T21211] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 926.089328][T31053] netlink: 428 bytes leftover after parsing attributes in process `syz.2.6420'. [ 926.128450][T31053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6420'. [ 926.156386][T31055] netlink: 'syz.4.6422': attribute type 4 has an invalid length. [ 926.193219][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 926.523105][T31070] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 926.639897][T31082] netlink: 'syz.2.6430': attribute type 2 has an invalid length. [ 926.912460][T31090] wg1 speed is unknown, defaulting to 1000 [ 927.550365][T31119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6435'. [ 927.648841][T31089] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 927.671357][T31090] lo speed is unknown, defaulting to 1000 [ 927.677493][T31119] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 927.882010][T31126] tipc: Started in network mode [ 927.896516][T31126] tipc: Node identity 92d2eee22f7d, cluster identity 4711 [ 927.904389][T31126] tipc: Enabled bearer , priority 0 [ 927.973272][T31126] syzkaller0: entered promiscuous mode [ 928.064156][T31126] tipc: Resetting bearer [ 928.240616][T31123] tipc: Resetting bearer [ 928.278306][T31123] tipc: Disabling bearer [ 928.471809][T31159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6446'. [ 928.490833][T31159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6446'. [ 928.506145][T31159] netlink: 'syz.0.6446': attribute type 7 has an invalid length. [ 928.606441][T31166] netlink: 'syz.3.6445': attribute type 4 has an invalid length. [ 928.757670][T31155] team_slave_0: entered promiscuous mode [ 928.763467][T31155] team_slave_1: entered promiscuous mode [ 928.770778][T31155] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 928.966512][T31173] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6448'. [ 929.005536][T21211] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.016820][T21211] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.037022][T21211] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.083818][T21211] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.380284][T31186] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.502490][T31186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.530424][T31186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 929.721992][T31194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6454'. [ 929.734225][T16606] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.743599][T16606] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.830297][T16606] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.871898][T16606] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.944757][T31202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6457'. [ 930.010800][T31206] FAULT_INJECTION: forcing a failure. [ 930.010800][T31206] name failslab, interval 1, probability 0, space 0, times 0 [ 930.041779][T31208] netlink: 'syz.3.6460': attribute type 1 has an invalid length. [ 930.071921][T31206] CPU: 0 UID: 0 PID: 31206 Comm: syz.2.6459 Not tainted syzkaller #0 PREEMPT(full) [ 930.071954][T31206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 930.071967][T31206] Call Trace: [ 930.071975][T31206] [ 930.071984][T31206] dump_stack_lvl+0xe8/0x150 [ 930.072019][T31206] should_fail_ex+0x412/0x560 [ 930.072052][T31206] should_failslab+0xa8/0x100 [ 930.072083][T31206] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 930.072109][T31206] ? __alloc_skb+0x1d0/0x7d0 [ 930.072138][T31206] ? __local_bh_enable_ip+0xd0/0x130 [ 930.072171][T31206] __alloc_skb+0x1d0/0x7d0 [ 930.072206][T31206] __ip_append_data+0x2ca0/0x3f30 [ 930.072261][T31206] ? __pfx_raw_getfrag+0x10/0x10 [ 930.072316][T31206] ? __pfx___ip_append_data+0x10/0x10 [ 930.072347][T31206] ? ipv4_mtu+0x53b/0x650 [ 930.072373][T31206] ? ipv4_mtu+0x23/0x650 [ 930.072403][T31206] ? __pfx_ipv4_mtu+0x10/0x10 [ 930.072431][T31206] ? ip_setup_cork+0x57e/0xa50 [ 930.072467][T31206] ip_append_data+0x10d/0x190 [ 930.072503][T31206] ? __pfx_raw_getfrag+0x10/0x10 [ 930.072537][T31206] raw_sendmsg+0x14be/0x1a50 [ 930.072588][T31206] ? __pfx_raw_sendmsg+0x10/0x10 [ 930.072636][T31206] ? aa_sk_perm+0x6d5/0x900 [ 930.072673][T31206] ? __pfx_aa_sk_perm+0x10/0x10 [ 930.072697][T31206] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 930.072733][T31206] ? count_memcg_event_mm+0x21/0x260 [ 930.072764][T31206] ? sock_rps_record_flow+0x19/0x350 [ 930.072802][T31206] ? inet_sendmsg+0x2f4/0x370 [ 930.072829][T31206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 930.072858][T31206] ____sys_sendmsg+0x80a/0x9f0 [ 930.072890][T31206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.072924][T31206] ? import_iovec+0x73/0xa0 [ 930.072961][T31206] ___sys_sendmsg+0x2a5/0x360 [ 930.072990][T31206] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.073035][T31206] ? lockdep_hardirqs_on+0x7a/0x110 [ 930.073099][T31206] __sys_sendmmsg+0x27c/0x4e0 [ 930.073128][T31206] ? __pfx___sys_sendmmsg+0x10/0x10 [ 930.073147][T31206] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 930.073195][T31206] ? ksys_write+0x242/0x270 [ 930.073222][T31206] ? __pfx_ksys_write+0x10/0x10 [ 930.073252][T31206] __x64_sys_sendmmsg+0xa0/0xc0 [ 930.073276][T31206] do_syscall_64+0x14d/0xf80 [ 930.073296][T31206] ? trace_irq_disable+0x3b/0x150 [ 930.073327][T31206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.073349][T31206] ? clear_bhb_loop+0x40/0x90 [ 930.073378][T31206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.073401][T31206] RIP: 0033:0x7fcb0699c799 [ 930.073422][T31206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.073443][T31206] RSP: 002b:00007fcb077db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 930.073467][T31206] RAX: ffffffffffffffda RBX: 00007fcb06c15fa0 RCX: 00007fcb0699c799 [ 930.073483][T31206] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 930.073498][T31206] RBP: 00007fcb077db090 R08: 0000000000000000 R09: 0000000000000000 [ 930.073509][T31206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 930.073521][T31206] R13: 00007fcb06c16038 R14: 00007fcb06c15fa0 R15: 00007fffbd3260b8 [ 930.073555][T31206] [ 930.079103][T31206] netlink: 'syz.2.6459': attribute type 4 has an invalid length. [ 930.457165][T31223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6462'. [ 930.515803][T31224] netlink: 'syz.3.6463': attribute type 4 has an invalid length. [ 930.607151][T31229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6465'. [ 930.621601][T21206] net_ratelimit: 140 callbacks suppressed [ 930.621625][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 930.666903][T21206] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 930.833140][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 930.851911][T21204] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 930.975160][T31250] pim6reg: entered allmulticast mode [ 930.992772][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 931.003138][T31250] pim6reg: left allmulticast mode [ 931.034959][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 931.071843][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 931.104680][T31254] macsec0: entered promiscuous mode [ 931.121847][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 931.153052][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 931.221330][T21206] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 931.287831][T31259] netlink: 'syz.0.6474': attribute type 13 has an invalid length. [ 931.295927][T31259] __nla_validate_parse: 2 callbacks suppressed [ 931.295948][T31259] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.6474'. [ 931.355332][T31264] netlink: 'syz.3.6475': attribute type 4 has an invalid length. [ 931.397802][T31259] netlink: 'syz.0.6474': attribute type 1 has an invalid length. [ 931.504484][T31269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6476'. [ 931.534231][T31267] tipc: Resetting bearer [ 931.562487][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 931.620124][T31269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 931.633097][T31269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6476'. [ 931.667007][T31269] xt_hashlimit: size too large, truncated to 1048576 [ 931.701688][T31269] xt_hashlimit: overflow, try lower: 0/0 [ 931.783297][T31269] vxcan1: entered allmulticast mode [ 931.944070][T31268] vxcan1: left allmulticast mode [ 931.955941][T31291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6479'. [ 932.507533][T31320] netlink: 'syz.1.6483': attribute type 1 has an invalid length. [ 932.523631][T31317] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6484'. [ 932.553742][T31317] netlink: 'syz.4.6484': attribute type 21 has an invalid length. [ 932.573391][T31317] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6484'. [ 932.613555][T31318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.860220][T31333] netlink: 'syz.3.6488': attribute type 2 has an invalid length. [ 933.400668][T31364] wg1 speed is unknown, defaulting to 1000 [ 933.476103][ T1760] block nbd5: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 60 seconds [ 933.487539][ T1760] block nbd5: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 60 seconds [ 933.500329][ T1760] block nbd5: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 60 seconds [ 933.519274][T31374] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6494'. [ 933.529419][ T1760] block nbd5: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 60 seconds [ 933.583210][T31374] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6494'. [ 934.295670][T31364] lo speed is unknown, defaulting to 1000 [ 934.789547][T31431] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6508'. [ 935.093294][T31445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6510'. [ 935.134777][T31448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 935.519524][T31461] netlink: 'syz.2.6513': attribute type 4 has an invalid length. [ 935.633723][T21211] net_ratelimit: 129 callbacks suppressed [ 935.633747][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.681865][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.700684][T21211] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 935.728357][T31465] netlink: 'syz.4.6515': attribute type 13 has an invalid length. [ 935.757057][T31465] netlink: 'syz.4.6515': attribute type 1 has an invalid length. [ 935.790771][T31471] siw: device registration error -23 [ 935.844006][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 935.858035][T21202] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 935.917009][T31476] pim6reg: entered allmulticast mode [ 935.926831][T31475] pim6reg: left allmulticast mode [ 935.999356][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 936.009633][T21202] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 936.141966][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 936.150146][T21202] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 936.281880][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 936.756831][T31487] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.764288][T31487] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.831186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 936.839359][ C1] lec:lec_tx_timeout: lec0 [ 937.105950][T31487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.124051][T31487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.505713][T21204] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.545599][T21204] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.621905][T21204] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.647403][T21204] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.695341][T31525] pimreg: entered allmulticast mode [ 937.860376][T31540] __nla_validate_parse: 3 callbacks suppressed [ 937.860397][T31540] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6534'. [ 937.984765][T31547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6535'. [ 938.033629][T31552] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 938.044220][T31540] wg1 speed is unknown, defaulting to 1000 [ 938.461245][T31540] lo speed is unknown, defaulting to 1000 [ 938.487002][T31543] wg1 speed is unknown, defaulting to 1000 [ 938.984314][T31580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6539'. [ 939.205859][T31582] bridge2: port 1(veth3) entered blocking state [ 939.221438][T31582] bridge2: port 1(veth3) entered disabled state [ 939.272182][T31582] veth3: entered allmulticast mode [ 939.293479][T31582] veth3: entered promiscuous mode [ 939.301311][T31582] bridge2: port 1(veth3) entered blocking state [ 939.308124][T31582] bridge2: port 1(veth3) entered forwarding state [ 939.329781][T31543] lo speed is unknown, defaulting to 1000 [ 939.338057][T31593] netlink: 276 bytes leftover after parsing attributes in process `syz.1.6542'. [ 939.417451][T31597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6543'. [ 939.449455][T31594] netlink: 'syz.4.6543': attribute type 4 has an invalid length. [ 939.662159][T31597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6543'. [ 939.772176][T21210] bridge2: port 1(veth3) entered disabled state [ 939.780271][T21204] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.827607][T21204] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.851307][T21204] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.930717][T21204] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.056961][T31619] gre2: entered allmulticast mode [ 940.087056][T31614] wg1 speed is unknown, defaulting to 1000 [ 940.660160][T31614] lo speed is unknown, defaulting to 1000 [ 940.692724][T21203] net_ratelimit: 152 callbacks suppressed [ 940.692747][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.731350][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.752951][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.791708][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.831646][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 940.854573][T21204] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 940.971933][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 941.001019][T21204] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 941.123052][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 941.171515][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 941.208835][T31660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6561'. [ 941.700882][ T6867] lec:lec_start_xmit: lec0:No lecd attached [ 941.796469][T31677] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6566'. [ 941.815818][T31677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6566'. [ 941.853606][T21204] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.863061][T31677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6566'. [ 941.891381][T21204] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.912640][T21204] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 941.922464][T21203] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.421833][T31697] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 942.763492][T31724] netlink: 'syz.0.6578': attribute type 1 has an invalid length. [ 943.093030][T31737] tipc: Started in network mode [ 943.098099][T31737] tipc: Node identity e2acfed66398, cluster identity 4711 [ 943.155035][T31737] tipc: Enabled bearer , priority 0 [ 943.165725][T31741] syzkaller0: entered promiscuous mode [ 943.181718][T31741] syzkaller0: entered allmulticast mode [ 943.326622][T31736] tipc: Resetting bearer [ 943.386255][T31736] tipc: Disabling bearer [ 943.737328][T31779] bridge2: entered allmulticast mode [ 943.849479][T31785] __nla_validate_parse: 7 callbacks suppressed [ 943.849502][T31785] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6597'. [ 944.032026][ T29] audit: type=1107 audit(1773008687.567:59): pid=31793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='”N‰¡à& [ 944.032026][ T29] u(›´*a0£sÐ3S†8â†DHµ FÙÄ—oÚúŒä˜aðZù¶kÈ(‹-s+\£03¼l*E‚Deñ}ò…baÔáXMâaòKS!gÓÐR•2…ü~"@Ò4}ÇcÖå³=ë*âªk' [ 944.187525][T31798] wg1 speed is unknown, defaulting to 1000 [ 944.257637][T31800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6603'. [ 944.291835][T31800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6603'. [ 944.342560][T31800] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6603'. [ 944.643314][T31818] x_tables: duplicate underflow at hook 2 [ 944.823417][T31825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6607'. [ 944.847902][T31798] lo speed is unknown, defaulting to 1000 [ 944.863990][T31826] netlink: 'syz.2.6606': attribute type 10 has an invalid length. [ 944.914574][T31826] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 945.744973][T21204] net_ratelimit: 113 callbacks suppressed [ 945.744999][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 945.794418][T21204] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 945.993488][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 946.004736][T21211] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 946.134207][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 946.153551][T21203] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 946.239481][T31865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6618'. [ 946.292162][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 946.300079][T21211] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 946.452346][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 946.460696][T21206] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 946.528672][T31884] netlink: 'syz.0.6622': attribute type 1 has an invalid length. [ 946.747213][T31884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.778668][T31891] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 946.792129][T31891] bond1: (slave batadv1): making interface the new active one [ 946.802057][T31891] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 946.841203][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5140 ms [ 946.849369][ C1] lec:lec_tx_timeout: lec0 [ 947.361277][T17069] block nbd6: Receive control failed (result -32) [ 947.588455][ T5159] block nbd0: Possible stuck request ffff88803c358000: control (read@0,1024B). Runtime 210 seconds [ 947.599341][ T5159] block nbd0: Possible stuck request ffff88803c358200: control (read@1024,1024B). Runtime 210 seconds [ 947.610502][ T5159] block nbd0: Possible stuck request ffff88803c358400: control (read@2048,1024B). Runtime 210 seconds [ 947.621743][ T5159] block nbd0: Possible stuck request ffff88803c358600: control (read@3072,1024B). Runtime 210 seconds [ 947.811773][T31928] syzkaller1: entered promiscuous mode [ 947.817598][T31928] syzkaller1: entered allmulticast mode [ 947.935041][T31951] netlink: 'syz.1.6640': attribute type 10 has an invalid length. [ 947.952428][T31951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6640'. [ 947.974944][T31951] team0: entered promiscuous mode [ 947.980046][T31951] team_slave_0: entered promiscuous mode [ 947.997871][T31951] team_slave_1: entered promiscuous mode [ 948.025070][T31951] team0: entered allmulticast mode [ 948.037160][T31951] team_slave_0: entered allmulticast mode [ 948.074639][T31951] team_slave_1: entered allmulticast mode [ 948.096164][T31951] bridge0: port 3(team0) entered blocking state [ 948.112994][T31951] bridge0: port 3(team0) entered disabled state [ 948.135280][T31951] bridge0: port 3(team0) entered blocking state [ 948.141772][T31951] bridge0: port 3(team0) entered forwarding state [ 948.586204][T31985] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 948.636875][T31990] netlink: 'syz.2.6652': attribute type 1 has an invalid length. [ 948.688324][T31985] bond1: (slave lo): Enslaving as an active interface with an up link [ 948.810143][T31990] bond1: entered promiscuous mode [ 948.816186][T31990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 949.344936][T32028] x_tables: unsorted entry at hook 2 [ 949.422833][T32029] SET target dimension over the limit! [ 949.487314][T32003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 949.496367][T32003] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 949.508791][T32003] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 949.529998][T32003] bond1: (slave vcan1): making interface the new active one [ 949.544566][T32003] vcan1: entered promiscuous mode [ 949.553833][T32003] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 949.607893][T32031] syzkaller0: entered allmulticast mode [ 949.653056][T32031] syzkaller0 (unregistering): left allmulticast mode [ 949.716048][T32007] wg1 speed is unknown, defaulting to 1000 [ 949.768222][T32038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6664'. [ 949.807687][T32034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6664'. [ 949.838883][T32037] netlink: 'syz.0.6665': attribute type 1 has an invalid length. [ 949.849666][T32037] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6665'. [ 950.134892][T32007] lo speed is unknown, defaulting to 1000 [ 950.141076][T32056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6669'. [ 950.169587][T32058] netlink: 'syz.4.6670': attribute type 3 has an invalid length. [ 950.254652][T32059] macsec1: entered allmulticast mode [ 950.260404][T32059] veth1: entered allmulticast mode [ 950.273352][T32062] netlink: 'syz.1.6671': attribute type 27 has an invalid length. [ 950.294583][T32062] netlink: 'syz.1.6671': attribute type 1 has an invalid length. [ 950.649619][T32087] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6680'. [ 950.665680][T32087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6680'. [ 950.772109][T21203] net_ratelimit: 131 callbacks suppressed [ 950.772134][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 950.805231][T21203] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 950.886593][T32097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6683'. [ 950.938785][T32097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6683'. [ 950.949219][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 950.997433][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 951.027387][T32097] macvtap1: entered promiscuous mode [ 951.041720][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 951.048013][T32097] veth1_to_hsr: entered promiscuous mode [ 951.066367][T32097] macvtap1: entered allmulticast mode [ 951.073759][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 951.083706][T32097] veth1_to_hsr: entered allmulticast mode [ 951.101745][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 951.122578][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 951.144880][T21204] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 951.281454][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 951.307723][T32111] x_tables: duplicate underflow at hook 2 [ 951.564429][T32131] C: renamed from team_slave_0 (while UP) [ 951.588648][T32131] netlink: 'syz.2.6694': attribute type 4 has an invalid length. [ 951.601194][T32131] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6694'. [ 951.614862][T32128] xt_hashlimit: max too large, truncated to 1048576 [ 951.624146][T32128] xt_bpf: check failed: parse error [ 951.688288][T32137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6695'. [ 951.715504][T32135] wg1 speed is unknown, defaulting to 1000 [ 952.246909][T32157] wg1 speed is unknown, defaulting to 1000 [ 952.246931][T32135] lo speed is unknown, defaulting to 1000 [ 952.644871][T32157] lo speed is unknown, defaulting to 1000 [ 952.687664][T32169] netlink: 'syz.2.6704': attribute type 10 has an invalid length. [ 952.787997][T32169] dummy0: entered promiscuous mode [ 952.805351][T32175] netlink: 'syz.2.6704': attribute type 10 has an invalid length. [ 952.830123][T32177] netlink: 'syz.4.6706': attribute type 1 has an invalid length. [ 952.858340][T32169] team0: Port device dummy0 added [ 952.937885][T32175] team0: Port device dummy0 removed [ 952.953692][T32175] dummy0: left promiscuous mode [ 952.988729][T32175] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 953.034547][T32181] bond4: entered allmulticast mode [ 953.064099][T32183] bond4: (slave geneve3): making interface the new active one [ 953.087343][T32183] geneve3: entered allmulticast mode [ 953.108372][T32183] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 953.214119][T21210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 953.224563][T21210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 953.253172][T21210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 953.267933][T21210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 953.582340][T32197] netlink: 'syz.4.6712': attribute type 4 has an invalid length. [ 954.232976][T32214] nbd8: detected capacity change from 0 to 127 [ 954.240117][T17069] block nbd8: Receive control failed (result -32) [ 954.252407][T22992] block nbd8: Dead connection, failed to find a fallback [ 954.260209][T22992] block nbd8: shutting down sockets [ 954.267373][T22992] blk_print_req_error: 137 callbacks suppressed [ 954.267397][T22992] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.289324][T22992] buffer_io_error: 138 callbacks suppressed [ 954.289347][T22992] Buffer I/O error on dev nbd8, logical block 0, async page read [ 954.303877][T22992] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.314023][T22992] Buffer I/O error on dev nbd8, logical block 1, async page read [ 954.322512][T22992] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.332507][T22992] Buffer I/O error on dev nbd8, logical block 2, async page read [ 954.340797][T22992] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.351598][T22992] Buffer I/O error on dev nbd8, logical block 3, async page read [ 954.388984][T22992] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.419277][T22992] Buffer I/O error on dev nbd8, logical block 0, async page read [ 954.441247][T22992] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.476039][T22992] Buffer I/O error on dev nbd8, logical block 1, async page read [ 954.500729][T22992] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.547020][T22992] Buffer I/O error on dev nbd8, logical block 2, async page read [ 954.572876][T22992] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.605571][T22992] Buffer I/O error on dev nbd8, logical block 3, async page read [ 954.625604][T22992] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.644201][T22992] Buffer I/O error on dev nbd8, logical block 0, async page read [ 954.662302][T22992] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.681447][T22992] Buffer I/O error on dev nbd8, logical block 1, async page read [ 954.740320][T22992] ldm_validate_partition_table(): Disk read failed. [ 954.766235][T22992] Dev nbd8: unable to read RDB block 0 [ 954.783576][T32242] __nla_validate_parse: 10 callbacks suppressed [ 954.783599][T32242] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.6722'. [ 954.800176][T22992] nbd8: unable to read partition table [ 954.851451][T32238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 954.861507][T22992] ldm_validate_partition_table(): Disk read failed. [ 954.894311][T22992] Dev nbd8: unable to read RDB block 0 [ 954.900568][T22992] nbd8: unable to read partition table [ 954.967053][T32246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6722'. [ 954.977853][T32246] nbd: socks must be embedded in a SOCK_ITEM attr [ 955.022217][T32242] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 955.073816][T32248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6723'. [ 955.280337][T32261] wg1 speed is unknown, defaulting to 1000 [ 955.589247][T32261] lo speed is unknown, defaulting to 1000 [ 955.795567][T21206] net_ratelimit: 122 callbacks suppressed [ 955.795588][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.832878][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.862225][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.901237][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.910984][T32283] vcan1: entered promiscuous mode [ 955.941334][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.941594][T32283] vcan1: entered allmulticast mode [ 955.971914][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 955.993246][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 956.028562][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 956.093002][T21204] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 956.202231][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 956.284303][T32302] syzkaller0: entered allmulticast mode [ 956.308903][T32302] syzkaller0: entered promiscuous mode [ 956.334246][T32300] syzkaller0: left promiscuous mode [ 956.373275][T32310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6744'. [ 956.406870][T32300] syzkaller0: left allmulticast mode [ 956.748015][T32325] IPv6: NLM_F_CREATE should be specified when creating new route [ 956.783029][T32323] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6748'. [ 956.811907][T32323] netlink: 245 bytes leftover after parsing attributes in process `syz.4.6748'. [ 956.972149][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6752'. [ 957.010902][T32337] bridge_slave_0: left allmulticast mode [ 957.024333][T32337] bridge_slave_0: left promiscuous mode [ 957.037406][T32337] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.098670][T32338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6752'. [ 957.125741][T32338] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6752'. [ 957.135609][T32338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6752'. [ 957.299828][T32344] netlink: 'syz.1.6754': attribute type 11 has an invalid length. [ 957.560237][T32357] wg1 speed is unknown, defaulting to 1000 [ 957.787258][T32372] netlink: 'syz.4.6762': attribute type 13 has an invalid length. [ 957.868281][T32372] bond0: (slave wlan1): Releasing backup interface [ 958.124076][T32357] lo speed is unknown, defaulting to 1000 [ 958.131040][T32364] wg1 speed is unknown, defaulting to 1000 [ 958.842787][T32377] wg1 speed is unknown, defaulting to 1000 [ 958.851835][T32364] lo speed is unknown, defaulting to 1000 [ 959.366427][T32377] lo speed is unknown, defaulting to 1000 [ 959.730804][T32454] wg1 speed is unknown, defaulting to 1000 [ 960.176973][T32462] __nla_validate_parse: 11 callbacks suppressed [ 960.177089][T32462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6780'. [ 960.195475][T32471] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.297751][T32471] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.398194][T32471] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.509766][T32471] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.538604][T32454] lo speed is unknown, defaulting to 1000 [ 960.559548][T32471] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.589863][T32471] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.612145][T32477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6783'. [ 960.668956][T32471] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.753596][T32471] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.803103][T32471] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.835251][T21202] net_ratelimit: 138 callbacks suppressed [ 960.835273][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.849019][T32471] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.891230][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.911399][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.924923][T32471] bridge12: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 960.936616][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.961244][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 960.994270][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 961.041998][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 961.064362][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 961.086660][T32486] netlink: 'syz.4.6785': attribute type 322 has an invalid length. [ 961.107560][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 961.132418][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 961.587395][T32507] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 961.834603][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6794'. [ 961.993069][T32523] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 962.235490][T32528] netlink: 'syz.2.6797': attribute type 33 has an invalid length. [ 962.245059][T32528] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6797'. [ 962.255480][T32528] `: renamed from team0 (while UP) [ 963.133932][T32576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6812'. [ 963.148289][T32576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6812'. [ 963.559711][ T1760] block nbd5: Possible stuck request ffff888026c38000: control (read@0,1024B). Runtime 90 seconds [ 963.575280][T32597] syzkaller0: entered allmulticast mode [ 963.581942][ T1760] block nbd5: Possible stuck request ffff888026c38200: control (read@1024,1024B). Runtime 90 seconds [ 963.594556][ T1760] block nbd5: Possible stuck request ffff888026c38400: control (read@2048,1024B). Runtime 90 seconds [ 963.606262][ T1760] block nbd5: Possible stuck request ffff888026c38600: control (read@3072,1024B). Runtime 90 seconds [ 963.688785][T32604] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.6820'. [ 963.777306][T32604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6820'. [ 963.922920][T32607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6821'. [ 964.102759][T32611] wg1 speed is unknown, defaulting to 1000 [ 964.122254][T32619] syzkaller0: entered promiscuous mode [ 964.144296][T32607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6821'. [ 964.290243][T32626] bridge_slave_0: left allmulticast mode [ 964.324188][T32626] bridge_slave_0: left promiscuous mode [ 964.330254][T32626] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.385480][T32626] bridge_slave_1: left allmulticast mode [ 964.392094][T32626] bridge_slave_1: left promiscuous mode [ 964.408967][T32626] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.474035][T32626] bond0: (slave bond_slave_0): Releasing backup interface [ 964.520183][T32626] bond0: (slave bond_slave_1): Releasing backup interface [ 964.550099][T32626] team0: Port device team_slave_0 removed [ 964.583454][T32626] team0: Port device team_slave_1 removed [ 964.613513][T32626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.620981][T32626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.667481][T32626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.677690][T32645] netlink: 'syz.3.6828': attribute type 13 has an invalid length. [ 964.698159][T32626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.860911][T32651] syzkaller0: entered promiscuous mode [ 964.866577][T32651] syzkaller0: entered allmulticast mode [ 965.025131][T32664] x_tables: duplicate underflow at hook 2 [ 965.851258][T21203] net_ratelimit: 147 callbacks suppressed [ 965.851283][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.896357][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.926721][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.935844][T32676] netlink: 'syz.0.6833': attribute type 3 has an invalid length. [ 965.954346][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 965.986243][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 966.007006][T32678] __nla_validate_parse: 3 callbacks suppressed [ 966.007027][T32678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6834'. [ 966.025831][T32678] netlink: 560 bytes leftover after parsing attributes in process `syz.0.6834'. [ 966.032026][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 966.065208][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 966.101277][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 966.131279][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 966.151690][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 967.295181][T32654] dvmrp1: entered allmulticast mode [ 967.301014][T32611] lo speed is unknown, defaulting to 1000 [ 967.347015][ T5194] udevd[5194]: worker [22976] /devices/virtual/block/nbd5 is taking a long time [ 967.536378][T32690] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6835'. [ 967.644494][T32695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6838'. [ 968.228584][T32727] ip6tnl1: entered allmulticast mode [ 968.249159][T32731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6847'. [ 968.557673][T32744] wg1 speed is unknown, defaulting to 1000 [ 968.723662][T32751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6852'. [ 968.761333][T32751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6852'. [ 968.773174][T32751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6852'. [ 968.803253][T32751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6852'. [ 968.829128][T32751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6852'. [ 968.849782][T32751] macsec0: left promiscuous mode [ 968.893893][ T1152] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.907170][ T1152] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.922022][ T1152] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 968.949553][ T1152] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 969.246635][T32744] lo speed is unknown, defaulting to 1000 [ 969.321389][T32766] Bluetooth: MGMT ver 1.23 [ 969.967532][ T317] netlink: 'syz.3.6862': attribute type 2 has an invalid length. [ 970.126083][ T325] sctp: [Deprecated]: syz.3.6866 (pid 325) Use of int in maxseg socket option. [ 970.126083][ T325] Use struct sctp_assoc_value instead [ 970.265849][ T326] wg1 speed is unknown, defaulting to 1000 [ 970.655278][ T343] dummy0: entered allmulticast mode [ 970.664447][ T342] dummy0: left allmulticast mode [ 970.721580][ T345] x_tables: duplicate underflow at hook 3 [ 970.932593][T21203] net_ratelimit: 141 callbacks suppressed [ 970.932617][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 970.969211][T21203] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 971.011529][ T326] lo speed is unknown, defaulting to 1000 [ 971.122712][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.141323][ T1152] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.161812][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.194669][ T373] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 971.210999][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.235563][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.244126][T21202] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 971.260747][ T376] __nla_validate_parse: 214 callbacks suppressed [ 971.260769][ T376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6879'. [ 971.363138][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.720094][ T398] xt_ecn: cannot match TCP bits for non-tcp packets [ 971.865481][ T408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6888'. [ 971.937452][ T414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6891'. [ 972.157996][ T431] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6894'. [ 972.275798][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6895'. [ 972.309708][ T437] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6896'. [ 972.489260][ T444] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6898'. [ 972.546156][ T450] netlink: 'syz.0.6901': attribute type 21 has an invalid length. [ 972.602270][ T450] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6901'. [ 972.695298][ T458] netlink: 'syz.4.6904': attribute type 1 has an invalid length. [ 972.716916][ T458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6904'. [ 972.785582][ T460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 972.832879][ T460] Cannot find set identified by id 3 to match [ 972.860354][ T460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6903'. [ 972.970225][ T470] veth4: entered allmulticast mode [ 973.036877][ T478] netlink: 'syz.2.6909': attribute type 11 has an invalid length. [ 973.052461][ T478] netlink: 'syz.2.6909': attribute type 4 has an invalid length. [ 973.448789][ T506] tipc: Enabled bearer , priority 10 [ 973.525401][ T509] tipc: Enabled bearer , priority 0 [ 973.884609][ T530] gtp0: entered promiscuous mode [ 973.905689][ T530] gtp0: entered allmulticast mode [ 974.474634][T18601] tipc: Node number set to 2167733974 [ 974.683792][ T6356] tipc: Node number set to 3182423778 [ 974.836880][ T590] netlink: 'syz.4.6940': attribute type 15 has an invalid length. [ 975.057524][ T604] batadv_slave_0: entered promiscuous mode [ 975.065751][ T603] wg1 speed is unknown, defaulting to 1000 [ 975.076557][ T604] batadv_slave_0: left promiscuous mode [ 975.234973][ T616] syzkaller0: entered promiscuous mode [ 975.250192][ T616] syzkaller0: entered allmulticast mode [ 975.456325][ T601] delete_channel: no stack [ 975.498126][ T603] lo speed is unknown, defaulting to 1000 [ 975.769595][ T632] vlan2: entered allmulticast mode [ 975.811622][ T632] bond0: entered allmulticast mode [ 975.827491][ T632] bond_slave_0: entered allmulticast mode [ 975.839019][ T632] bond_slave_1: entered allmulticast mode [ 975.879798][ T637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.892365][ T637] bond_slave_0: left allmulticast mode [ 975.900617][ T637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.912882][ T637] bond_slave_1: left allmulticast mode [ 975.919014][ T637] bond0 (unregistering): Released all slaves [ 975.941228][ T1152] net_ratelimit: 125 callbacks suppressed [ 975.941251][ T1152] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.971823][ T1152] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.980471][ T646] bridge0: port 3(team0) entered disabled state [ 975.990834][ T646] bridge0: port 3(team0) entered disabled state [ 976.002252][ T646] team_slave_0: left promiscuous mode [ 976.005492][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.009745][ T646] team_slave_0: left allmulticast mode [ 976.041565][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.064392][ T646] team0 (unregistering): Failed to send options change via netlink (err -105) [ 976.075724][ T646] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 976.082654][ T1152] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.096321][ T646] team0 (unregistering): Port device team_slave_0 removed [ 976.112862][ T646] team_slave_1: left promiscuous mode [ 976.125773][ T1152] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.138846][ T646] team_slave_1: left allmulticast mode [ 976.151529][ T1152] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.186699][ T646] team0 (unregistering): Failed to send options change via netlink (err -105) [ 976.196659][T21204] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.206543][ T646] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 976.219339][ T646] team0 (unregistering): Port device team_slave_1 removed [ 976.222406][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.251248][T16606] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.362370][ T639] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 976.375750][ T661] €Â: renamed from bond_slave_0 (while UP) [ 976.414542][ T663] __nla_validate_parse: 12 callbacks suppressed [ 976.414566][ T663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6960'. [ 976.537427][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'. [ 976.546663][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6962'. [ 976.597557][ T663] lo: Caught tx_queue_len zero misconfig [ 976.612009][ T670] tipc: Enabling of bearer rejected, failed to enable media [ 976.805893][ T673] can: request_module (can-proto-5) failed. [ 976.828638][ T687] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 976.854293][ T687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6965'. [ 976.872726][ T686] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6968'. [ 976.887182][ T688] sctp: [Deprecated]: syz.4.6967 (pid 688) Use of int in max_burst socket option deprecated. [ 976.887182][ T688] Use struct sctp_assoc_value instead [ 976.906419][ T679] can: request_module (can-proto-5) failed. [ 976.966786][ T688] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 976.986500][ T682] wg1 speed is unknown, defaulting to 1000 [ 977.184435][ T692] bond0: (slave rose0): Enslaving as an active interface with an up link [ 977.252337][ T703] netlink: 'syz.4.6972': attribute type 33 has an invalid length. [ 977.260558][ T703] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6972'. [ 977.270100][ T703] `: renamed from team0 [ 977.419438][ T711] netlink: 'syz.2.6974': attribute type 10 has an invalid length. [ 977.477279][ T711] bond0: (slave dummy0): Releasing backup interface [ 977.542327][ T711] dummy0: entered promiscuous mode [ 977.548974][ T711] `: Port device dummy0 added [ 977.627170][ T707] wg1 speed is unknown, defaulting to 1000 [ 977.647503][ T5159] block nbd0: Possible stuck request ffff88803c358000: control (read@0,1024B). Runtime 240 seconds [ 977.659996][ T5159] block nbd0: Possible stuck request ffff88803c358200: control (read@1024,1024B). Runtime 240 seconds [ 977.662701][ T682] lo speed is unknown, defaulting to 1000 [ 977.671702][ T5159] block nbd0: Possible stuck request ffff88803c358400: control (read@2048,1024B). Runtime 240 seconds [ 977.688540][ T5159] block nbd0: Possible stuck request ffff88803c358600: control (read@3072,1024B). Runtime 240 seconds [ 977.757667][ T720] xt_CT: No such helper "netbios-ns" [ 978.084376][ T745] macvtap0: entered promiscuous mode [ 978.094084][ T745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6983'. [ 978.119979][ T741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6982'. [ 978.199863][ T745] macvtap0 (unregistering): left promiscuous mode [ 978.232613][ T707] lo speed is unknown, defaulting to 1000 [ 978.240185][ T746] BUG: Bad page state in process syz.4.6983 pfn:20aa7 [ 978.247262][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x20aa7 [ 978.257554][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 978.265255][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 978.274135][ T746] raw: ffff888000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 978.282822][ T746] page dumped because: page_pool leak [ 978.288261][ T746] page_owner tracks the page as allocated [ 978.294523][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978240025043, free_ts 978208244834 [ 978.311586][ T746] post_alloc_hook+0x231/0x280 [ 978.316405][ T746] get_page_from_freelist+0x24dc/0x2580 [ 978.322058][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 978.327924][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 978.333517][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 978.339701][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 978.344653][ T746] do_xdp_generic+0x76b/0x12e0 [ 978.349521][ T746] tun_get_user+0x247d/0x3dd0 [ 978.354362][ T746] tun_chr_write_iter+0x113/0x200 [ 978.359441][ T746] vfs_write+0x61d/0xb90 [ 978.363800][ T746] ksys_write+0x150/0x270 [ 978.368174][ T746] do_syscall_64+0x14d/0xf80 [ 978.372855][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.378912][ T746] page last free pid 23 tgid 23 stack trace: [ 978.384970][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 978.390133][ T746] tlb_remove_table_rcu+0x85/0x100 [ 978.395340][ T746] rcu_core+0x7cd/0x1070 [ 978.399683][ T746] handle_softirqs+0x22a/0x870 [ 978.404539][ T746] run_ksoftirqd+0x36/0x60 [ 978.409014][ T746] smpboot_thread_fn+0x541/0xa50 [ 978.414067][ T746] kthread+0x388/0x470 [ 978.418186][ T746] ret_from_fork+0x51e/0xb90 [ 978.422856][ T746] ret_from_fork_asm+0x1a/0x30 [ 978.427694][ T746] Modules linked in: [ 978.431687][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Not tainted syzkaller #0 PREEMPT(full) [ 978.431714][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.431728][ T746] Call Trace: [ 978.431739][ T746] [ 978.431750][ T746] dump_stack_lvl+0xe8/0x150 [ 978.431784][ T746] bad_page+0x17f/0x1c0 [ 978.431820][ T746] __free_frozen_pages+0xd62/0xdb0 [ 978.431857][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 978.431971][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 978.432046][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 978.432078][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 978.432138][ T746] do_xdp_generic+0xac5/0x12e0 [ 978.432177][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 978.432236][ T746] ? tun_get_user+0x2354/0x3dd0 [ 978.432268][ T746] tun_get_user+0x247d/0x3dd0 [ 978.432314][ T746] ? aa_file_perm+0x192/0x15e0 [ 978.432352][ T746] ? aa_file_perm+0x50e/0x15e0 [ 978.432383][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 978.432420][ T746] ? aa_file_perm+0x192/0x15e0 [ 978.432456][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 978.432490][ T746] ? preempt_schedule_common+0x82/0xd0 [ 978.432527][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 978.432593][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 978.432627][ T746] ? tun_get+0x1c/0x2f0 [ 978.432664][ T746] ? tun_get+0x1c/0x2f0 [ 978.432697][ T746] ? tun_get+0x1c/0x2f0 [ 978.432734][ T746] tun_chr_write_iter+0x113/0x200 [ 978.432771][ T746] vfs_write+0x61d/0xb90 [ 978.432805][ T746] ? __pfx_vfs_write+0x10/0x10 [ 978.432842][ T746] ? __fget_files+0x2a/0x420 [ 978.432887][ T746] ksys_write+0x150/0x270 [ 978.432914][ T746] ? __pfx_ksys_write+0x10/0x10 [ 978.432951][ T746] do_syscall_64+0x14d/0xf80 [ 978.432973][ T746] ? trace_irq_disable+0x3b/0x150 [ 978.433006][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.433030][ T746] ? clear_bhb_loop+0x40/0x90 [ 978.433077][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.433101][ T746] RIP: 0033:0x7ff11735cfce [ 978.433124][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 978.433145][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 978.433170][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 978.433188][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 978.433204][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 978.433219][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.433233][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 978.433270][ T746] [ 978.433280][ T746] Disabling lock debugging due to kernel taint [ 978.708882][ T746] BUG: Bad page state in process syz.4.6983 pfn:21286 [ 978.715827][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021286000 pfn:0x21286 [ 978.725976][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 978.733222][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 978.741892][ T746] raw: ffff888021286000 0000000000000001 00000000ffffffff 0000000000000000 [ 978.750508][ T746] page dumped because: page_pool leak [ 978.755970][ T746] page_owner tracks the page as allocated [ 978.761750][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978240006398, free_ts 978208259861 [ 978.778676][ T746] post_alloc_hook+0x231/0x280 [ 978.783534][ T746] get_page_from_freelist+0x24dc/0x2580 [ 978.789135][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 978.795039][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 978.800560][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 978.806738][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 978.811668][ T746] do_xdp_generic+0x76b/0x12e0 [ 978.816472][ T746] tun_get_user+0x247d/0x3dd0 [ 978.821241][ T746] tun_chr_write_iter+0x113/0x200 [ 978.827367][ T746] vfs_write+0x61d/0xb90 [ 978.831694][ T746] ksys_write+0x150/0x270 [ 978.836066][ T746] do_syscall_64+0x14d/0xf80 [ 978.840886][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.846873][ T746] page last free pid 23 tgid 23 stack trace: [ 978.852917][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 978.858075][ T746] tlb_remove_table_rcu+0x85/0x100 [ 978.863295][ T746] rcu_core+0x7cd/0x1070 [ 978.867610][ T746] handle_softirqs+0x22a/0x870 [ 978.872478][ T746] run_ksoftirqd+0x36/0x60 [ 978.876959][ T746] smpboot_thread_fn+0x541/0xa50 [ 978.881988][ T746] kthread+0x388/0x470 [ 978.886096][ T746] ret_from_fork+0x51e/0xb90 [ 978.890735][ T746] ret_from_fork_asm+0x1a/0x30 [ 978.895602][ T746] Modules linked in: [ 978.899543][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 978.899580][ T746] Tainted: [B]=BAD_PAGE [ 978.899589][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.899605][ T746] Call Trace: [ 978.899614][ T746] [ 978.899624][ T746] dump_stack_lvl+0xe8/0x150 [ 978.899660][ T746] bad_page+0x17f/0x1c0 [ 978.899695][ T746] __free_frozen_pages+0xd62/0xdb0 [ 978.899727][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 978.899764][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 978.899802][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 978.899823][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 978.899865][ T746] do_xdp_generic+0xac5/0x12e0 [ 978.899897][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 978.899939][ T746] ? tun_get_user+0x2354/0x3dd0 [ 978.899971][ T746] tun_get_user+0x247d/0x3dd0 [ 978.900010][ T746] ? aa_file_perm+0x192/0x15e0 [ 978.900044][ T746] ? aa_file_perm+0x50e/0x15e0 [ 978.900075][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 978.900105][ T746] ? aa_file_perm+0x192/0x15e0 [ 978.900140][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 978.900171][ T746] ? preempt_schedule_common+0x82/0xd0 [ 978.900208][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 978.900241][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 978.900275][ T746] ? tun_get+0x1c/0x2f0 [ 978.900309][ T746] ? tun_get+0x1c/0x2f0 [ 978.900340][ T746] ? tun_get+0x1c/0x2f0 [ 978.900381][ T746] tun_chr_write_iter+0x113/0x200 [ 978.900416][ T746] vfs_write+0x61d/0xb90 [ 978.900444][ T746] ? __pfx_vfs_write+0x10/0x10 [ 978.900474][ T746] ? __fget_files+0x2a/0x420 [ 978.900513][ T746] ksys_write+0x150/0x270 [ 978.900538][ T746] ? __pfx_ksys_write+0x10/0x10 [ 978.900568][ T746] do_syscall_64+0x14d/0xf80 [ 978.900589][ T746] ? trace_irq_disable+0x3b/0x150 [ 978.900623][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.900646][ T746] ? clear_bhb_loop+0x40/0x90 [ 978.900673][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.900696][ T746] RIP: 0033:0x7ff11735cfce [ 978.900716][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 978.900738][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 978.900764][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 978.900782][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 978.900798][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 978.900813][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.900828][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 978.900855][ T746] [ 978.900868][ T746] BUG: Bad page state in process syz.4.6983 pfn:38c8a [ 979.178766][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888038c8adc0 pfn:0x38c8a [ 979.188910][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.196112][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 979.204772][ T746] raw: ffff888038c8adc0 0000000000000001 00000000ffffffff 0000000000000000 [ 979.213511][ T746] page dumped because: page_pool leak [ 979.218937][ T746] page_owner tracks the page as allocated [ 979.224715][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239988648, free_ts 978208286054 [ 979.241669][ T746] post_alloc_hook+0x231/0x280 [ 979.246585][ T746] get_page_from_freelist+0x24dc/0x2580 [ 979.252255][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 979.258116][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 979.263694][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 979.269801][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 979.274760][ T746] do_xdp_generic+0x76b/0x12e0 [ 979.279580][ T746] tun_get_user+0x247d/0x3dd0 [ 979.284380][ T746] tun_chr_write_iter+0x113/0x200 [ 979.289448][ T746] vfs_write+0x61d/0xb90 [ 979.293762][ T746] ksys_write+0x150/0x270 [ 979.298388][ T746] do_syscall_64+0x14d/0xf80 [ 979.303048][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.308980][ T746] page last free pid 23 tgid 23 stack trace: [ 979.315034][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 979.320221][ T746] tlb_remove_table_rcu+0x85/0x100 [ 979.325423][ T746] rcu_core+0x7cd/0x1070 [ 979.329707][ T746] handle_softirqs+0x22a/0x870 [ 979.334550][ T746] run_ksoftirqd+0x36/0x60 [ 979.339004][ T746] smpboot_thread_fn+0x541/0xa50 [ 979.344042][ T746] kthread+0x388/0x470 [ 979.348164][ T746] ret_from_fork+0x51e/0xb90 [ 979.352839][ T746] ret_from_fork_asm+0x1a/0x30 [ 979.357662][ T746] Modules linked in: [ 979.361648][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 979.361679][ T746] Tainted: [B]=BAD_PAGE [ 979.361687][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 979.361700][ T746] Call Trace: [ 979.361709][ T746] [ 979.361717][ T746] dump_stack_lvl+0xe8/0x150 [ 979.361751][ T746] bad_page+0x17f/0x1c0 [ 979.361784][ T746] __free_frozen_pages+0xd62/0xdb0 [ 979.361815][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 979.361854][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 979.361894][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 979.361914][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 979.361956][ T746] do_xdp_generic+0xac5/0x12e0 [ 979.361988][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 979.362030][ T746] ? tun_get_user+0x2354/0x3dd0 [ 979.362064][ T746] tun_get_user+0x247d/0x3dd0 [ 979.362104][ T746] ? aa_file_perm+0x192/0x15e0 [ 979.362139][ T746] ? aa_file_perm+0x50e/0x15e0 [ 979.362170][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 979.362202][ T746] ? aa_file_perm+0x192/0x15e0 [ 979.362237][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 979.362270][ T746] ? preempt_schedule_common+0x82/0xd0 [ 979.362308][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 979.362341][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 979.362376][ T746] ? tun_get+0x1c/0x2f0 [ 979.362438][ T746] ? tun_get+0x1c/0x2f0 [ 979.362468][ T746] ? tun_get+0x1c/0x2f0 [ 979.362501][ T746] tun_chr_write_iter+0x113/0x200 [ 979.362535][ T746] vfs_write+0x61d/0xb90 [ 979.362564][ T746] ? __pfx_vfs_write+0x10/0x10 [ 979.362594][ T746] ? __fget_files+0x2a/0x420 [ 979.362633][ T746] ksys_write+0x150/0x270 [ 979.362659][ T746] ? __pfx_ksys_write+0x10/0x10 [ 979.362689][ T746] do_syscall_64+0x14d/0xf80 [ 979.362710][ T746] ? trace_irq_disable+0x3b/0x150 [ 979.362746][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.362770][ T746] ? clear_bhb_loop+0x40/0x90 [ 979.362797][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.362821][ T746] RIP: 0033:0x7ff11735cfce [ 979.362842][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 979.362865][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 979.362890][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 979.362908][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 979.362924][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 979.362940][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.362955][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 979.362983][ T746] [ 979.362996][ T746] BUG: Bad page state in process syz.4.6983 pfn:5f3f8 [ 979.642052][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f3f8dc0 pfn:0x5f3f8 [ 979.652193][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 979.659369][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 979.668067][ T746] raw: ffff88805f3f8dc0 0000000000000001 00000000ffffffff 0000000000000000 [ 979.676723][ T746] page dumped because: page_pool leak [ 979.682177][ T746] page_owner tracks the page as allocated [ 979.687932][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239970862, free_ts 978208311341 [ 979.704878][ T746] post_alloc_hook+0x231/0x280 [ 979.709705][ T746] get_page_from_freelist+0x24dc/0x2580 [ 979.715369][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 979.721349][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 979.726857][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 979.732992][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 979.737886][ T746] do_xdp_generic+0x76b/0x12e0 [ 979.742710][ T746] tun_get_user+0x247d/0x3dd0 [ 979.747424][ T746] tun_chr_write_iter+0x113/0x200 [ 979.752562][ T746] vfs_write+0x61d/0xb90 [ 979.756835][ T746] ksys_write+0x150/0x270 [ 979.761214][ T746] do_syscall_64+0x14d/0xf80 [ 979.765840][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.771793][ T746] page last free pid 23 tgid 23 stack trace: [ 979.777796][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 979.782974][ T746] tlb_remove_table_rcu+0x85/0x100 [ 979.788146][ T746] rcu_core+0x7cd/0x1070 [ 979.792480][ T746] handle_softirqs+0x22a/0x870 [ 979.797373][ T746] run_ksoftirqd+0x36/0x60 [ 979.801876][ T746] smpboot_thread_fn+0x541/0xa50 [ 979.807029][ T746] kthread+0x388/0x470 [ 979.811152][ T746] ret_from_fork+0x51e/0xb90 [ 979.815788][ T746] ret_from_fork_asm+0x1a/0x30 [ 979.820585][ T746] Modules linked in: [ 979.824578][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 979.824610][ T746] Tainted: [B]=BAD_PAGE [ 979.824618][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 979.824632][ T746] Call Trace: [ 979.824640][ T746] [ 979.824649][ T746] dump_stack_lvl+0xe8/0x150 [ 979.824682][ T746] bad_page+0x17f/0x1c0 [ 979.824715][ T746] __free_frozen_pages+0xd62/0xdb0 [ 979.824747][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 979.824785][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 979.824823][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 979.824846][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 979.824888][ T746] do_xdp_generic+0xac5/0x12e0 [ 979.824921][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 979.824962][ T746] ? tun_get_user+0x2354/0x3dd0 [ 979.824997][ T746] tun_get_user+0x247d/0x3dd0 [ 979.825036][ T746] ? aa_file_perm+0x192/0x15e0 [ 979.825071][ T746] ? aa_file_perm+0x50e/0x15e0 [ 979.825101][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 979.825131][ T746] ? aa_file_perm+0x192/0x15e0 [ 979.825167][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 979.825205][ T746] ? preempt_schedule_common+0x82/0xd0 [ 979.825244][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 979.825277][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 979.825311][ T746] ? tun_get+0x1c/0x2f0 [ 979.825346][ T746] ? tun_get+0x1c/0x2f0 [ 979.825376][ T746] ? tun_get+0x1c/0x2f0 [ 979.825410][ T746] tun_chr_write_iter+0x113/0x200 [ 979.825444][ T746] vfs_write+0x61d/0xb90 [ 979.825480][ T746] ? __pfx_vfs_write+0x10/0x10 [ 979.825510][ T746] ? __fget_files+0x2a/0x420 [ 979.825554][ T746] ksys_write+0x150/0x270 [ 979.825580][ T746] ? __pfx_ksys_write+0x10/0x10 [ 979.825611][ T746] do_syscall_64+0x14d/0xf80 [ 979.825632][ T746] ? trace_irq_disable+0x3b/0x150 [ 979.825667][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.825690][ T746] ? clear_bhb_loop+0x40/0x90 [ 979.825717][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.825740][ T746] RIP: 0033:0x7ff11735cfce [ 979.825762][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 979.825784][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 979.825810][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 979.825829][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 979.825846][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 979.825861][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 979.825880][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 979.825906][ T746] [ 979.825919][ T746] BUG: Bad page state in process syz.4.6983 pfn:5e371 [ 980.106580][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e371000 pfn:0x5e371 [ 980.116704][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 980.123872][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 980.132521][ T746] raw: ffff88805e371000 0000000000000001 00000000ffffffff 0000000000000000 [ 980.141420][ T746] page dumped because: page_pool leak [ 980.146921][ T746] page_owner tracks the page as allocated [ 980.152710][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239953323, free_ts 978208340933 [ 980.169710][ T746] post_alloc_hook+0x231/0x280 [ 980.174548][ T746] get_page_from_freelist+0x24dc/0x2580 [ 980.180246][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 980.186146][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 980.191682][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 980.197799][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 980.202743][ T746] do_xdp_generic+0x76b/0x12e0 [ 980.207630][ T746] tun_get_user+0x247d/0x3dd0 [ 980.212375][ T746] tun_chr_write_iter+0x113/0x200 [ 980.217449][ T746] vfs_write+0x61d/0xb90 [ 980.221779][ T746] ksys_write+0x150/0x270 [ 980.226140][ T746] do_syscall_64+0x14d/0xf80 [ 980.230736][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.236697][ T746] page last free pid 23 tgid 23 stack trace: [ 980.242748][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 980.248003][ T746] tlb_remove_table_rcu+0x85/0x100 [ 980.253194][ T746] rcu_core+0x7cd/0x1070 [ 980.257473][ T746] handle_softirqs+0x22a/0x870 [ 980.262295][ T746] run_ksoftirqd+0x36/0x60 [ 980.266760][ T746] smpboot_thread_fn+0x541/0xa50 [ 980.271761][ T746] kthread+0x388/0x470 [ 980.275855][ T746] ret_from_fork+0x51e/0xb90 [ 980.280452][ T746] ret_from_fork_asm+0x1a/0x30 [ 980.285303][ T746] Modules linked in: [ 980.289254][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 980.289278][ T746] Tainted: [B]=BAD_PAGE [ 980.289284][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.289294][ T746] Call Trace: [ 980.289300][ T746] [ 980.289307][ T746] dump_stack_lvl+0xe8/0x150 [ 980.289332][ T746] bad_page+0x17f/0x1c0 [ 980.289355][ T746] __free_frozen_pages+0xd62/0xdb0 [ 980.289377][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 980.289403][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 980.289442][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 980.289458][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 980.289488][ T746] do_xdp_generic+0xac5/0x12e0 [ 980.289510][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 980.289539][ T746] ? tun_get_user+0x2354/0x3dd0 [ 980.289562][ T746] tun_get_user+0x247d/0x3dd0 [ 980.289588][ T746] ? aa_file_perm+0x192/0x15e0 [ 980.289612][ T746] ? aa_file_perm+0x50e/0x15e0 [ 980.289633][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 980.289653][ T746] ? aa_file_perm+0x192/0x15e0 [ 980.289677][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 980.289699][ T746] ? preempt_schedule_common+0x82/0xd0 [ 980.289725][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 980.289748][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 980.289771][ T746] ? tun_get+0x1c/0x2f0 [ 980.289794][ T746] ? tun_get+0x1c/0x2f0 [ 980.289814][ T746] ? tun_get+0x1c/0x2f0 [ 980.289837][ T746] tun_chr_write_iter+0x113/0x200 [ 980.289860][ T746] vfs_write+0x61d/0xb90 [ 980.289879][ T746] ? __pfx_vfs_write+0x10/0x10 [ 980.289899][ T746] ? __fget_files+0x2a/0x420 [ 980.289925][ T746] ksys_write+0x150/0x270 [ 980.289943][ T746] ? __pfx_ksys_write+0x10/0x10 [ 980.289963][ T746] do_syscall_64+0x14d/0xf80 [ 980.289977][ T746] ? trace_irq_disable+0x3b/0x150 [ 980.290001][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.290017][ T746] ? clear_bhb_loop+0x40/0x90 [ 980.290035][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.290051][ T746] RIP: 0033:0x7ff11735cfce [ 980.290065][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.290080][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 980.290097][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 980.290109][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 980.290120][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 980.290130][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.290140][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 980.290158][ T746] [ 980.290168][ T746] BUG: Bad page state in process syz.4.6983 pfn:a1367 [ 980.569457][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa1367 [ 980.578293][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 980.585479][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 980.594140][ T746] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 980.602950][ T746] page dumped because: page_pool leak [ 980.608328][ T746] page_owner tracks the page as allocated [ 980.614109][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239935505, free_ts 978208366365 [ 980.631026][ T746] post_alloc_hook+0x231/0x280 [ 980.635909][ T746] get_page_from_freelist+0x24dc/0x2580 [ 980.641530][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 980.647386][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 980.653030][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 980.659321][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 980.664296][ T746] do_xdp_generic+0x76b/0x12e0 [ 980.669320][ T746] tun_get_user+0x247d/0x3dd0 [ 980.674220][ T746] tun_chr_write_iter+0x113/0x200 [ 980.679348][ T746] vfs_write+0x61d/0xb90 [ 980.683685][ T746] ksys_write+0x150/0x270 [ 980.688057][ T746] do_syscall_64+0x14d/0xf80 [ 980.692726][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.698676][ T746] page last free pid 23 tgid 23 stack trace: [ 980.704831][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 980.710071][ T746] tlb_remove_table_rcu+0x85/0x100 [ 980.715300][ T746] rcu_core+0x7cd/0x1070 [ 980.719598][ T746] handle_softirqs+0x22a/0x870 [ 980.725053][ T746] run_ksoftirqd+0x36/0x60 [ 980.729520][ T746] smpboot_thread_fn+0x541/0xa50 [ 980.734826][ T746] kthread+0x388/0x470 [ 980.738959][ T746] ret_from_fork+0x51e/0xb90 [ 980.743715][ T746] ret_from_fork_asm+0x1a/0x30 [ 980.748554][ T746] Modules linked in: [ 980.752527][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 980.752566][ T746] Tainted: [B]=BAD_PAGE [ 980.752576][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.752591][ T746] Call Trace: [ 980.752600][ T746] [ 980.752610][ T746] dump_stack_lvl+0xe8/0x150 [ 980.752646][ T746] bad_page+0x17f/0x1c0 [ 980.752681][ T746] __free_frozen_pages+0xd62/0xdb0 [ 980.752711][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 980.752749][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 980.752787][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 980.752807][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 980.752849][ T746] do_xdp_generic+0xac5/0x12e0 [ 980.752881][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 980.752922][ T746] ? tun_get_user+0x2354/0x3dd0 [ 980.752955][ T746] tun_get_user+0x247d/0x3dd0 [ 980.752994][ T746] ? aa_file_perm+0x192/0x15e0 [ 980.753028][ T746] ? aa_file_perm+0x50e/0x15e0 [ 980.753059][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 980.753089][ T746] ? aa_file_perm+0x192/0x15e0 [ 980.753120][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 980.753151][ T746] ? preempt_schedule_common+0x82/0xd0 [ 980.753186][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 980.753216][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 980.753246][ T746] ? tun_get+0x1c/0x2f0 [ 980.753289][ T746] ? tun_get+0x1c/0x2f0 [ 980.753319][ T746] ? tun_get+0x1c/0x2f0 [ 980.753353][ T746] tun_chr_write_iter+0x113/0x200 [ 980.753387][ T746] vfs_write+0x61d/0xb90 [ 980.753417][ T746] ? __pfx_vfs_write+0x10/0x10 [ 980.753444][ T746] ? __fget_files+0x2a/0x420 [ 980.753481][ T746] ksys_write+0x150/0x270 [ 980.753506][ T746] ? __pfx_ksys_write+0x10/0x10 [ 980.753538][ T746] do_syscall_64+0x14d/0xf80 [ 980.753560][ T746] ? trace_irq_disable+0x3b/0x150 [ 980.753595][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.753618][ T746] ? clear_bhb_loop+0x40/0x90 [ 980.753645][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.753664][ T746] RIP: 0033:0x7ff11735cfce [ 980.753683][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.753702][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 980.753726][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 980.753744][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 980.753760][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 980.753775][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.753790][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 980.753818][ T746] [ 980.753832][ T746] BUG: Bad page state in process syz.4.6983 pfn:5a68d [ 981.031251][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a68d000 pfn:0x5a68d [ 981.041398][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 981.048566][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 981.057973][ T746] raw: ffff88805a68d000 0000000000000001 00000000ffffffff 0000000000000000 [ 981.066632][ T746] page dumped because: page_pool leak [ 981.072691][ T746] page_owner tracks the page as allocated [ 981.078487][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239917572, free_ts 978208392658 [ 981.095875][ T746] post_alloc_hook+0x231/0x280 [ 981.100700][ T746] get_page_from_freelist+0x24dc/0x2580 [ 981.106338][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 981.112868][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 981.118468][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 981.124614][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 981.129520][ T746] do_xdp_generic+0x76b/0x12e0 [ 981.134381][ T746] tun_get_user+0x247d/0x3dd0 [ 981.139105][ T746] tun_chr_write_iter+0x113/0x200 [ 981.144207][ T746] vfs_write+0x61d/0xb90 [ 981.148503][ T746] ksys_write+0x150/0x270 [ 981.152894][ T746] do_syscall_64+0x14d/0xf80 [ 981.157525][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.163534][ T746] page last free pid 23 tgid 23 stack trace: [ 981.169539][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 981.174736][ T746] tlb_remove_table_rcu+0x85/0x100 [ 981.179888][ T746] rcu_core+0x7cd/0x1070 [ 981.184213][ T746] handle_softirqs+0x22a/0x870 [ 981.189020][ T746] run_ksoftirqd+0x36/0x60 [ 981.193514][ T746] smpboot_thread_fn+0x541/0xa50 [ 981.198538][ T746] kthread+0x388/0x470 [ 981.202688][ T746] ret_from_fork+0x51e/0xb90 [ 981.207326][ T746] ret_from_fork_asm+0x1a/0x30 [ 981.212252][ T746] Modules linked in: [ 981.216206][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 981.216240][ T746] Tainted: [B]=BAD_PAGE [ 981.216249][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.216265][ T746] Call Trace: [ 981.216274][ T746] [ 981.216283][ T746] dump_stack_lvl+0xe8/0x150 [ 981.216316][ T746] bad_page+0x17f/0x1c0 [ 981.216348][ T746] __free_frozen_pages+0xd62/0xdb0 [ 981.216378][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 981.216421][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 981.216459][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 981.216487][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 981.216518][ T746] do_xdp_generic+0xac5/0x12e0 [ 981.216540][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 981.216569][ T746] ? tun_get_user+0x2354/0x3dd0 [ 981.216590][ T746] tun_get_user+0x247d/0x3dd0 [ 981.216617][ T746] ? aa_file_perm+0x192/0x15e0 [ 981.216641][ T746] ? aa_file_perm+0x50e/0x15e0 [ 981.216664][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 981.216686][ T746] ? aa_file_perm+0x192/0x15e0 [ 981.216709][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 981.216731][ T746] ? preempt_schedule_common+0x82/0xd0 [ 981.216757][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 981.216780][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 981.216803][ T746] ? tun_get+0x1c/0x2f0 [ 981.216826][ T746] ? tun_get+0x1c/0x2f0 [ 981.216847][ T746] ? tun_get+0x1c/0x2f0 [ 981.216869][ T746] tun_chr_write_iter+0x113/0x200 [ 981.216894][ T746] vfs_write+0x61d/0xb90 [ 981.216914][ T746] ? __pfx_vfs_write+0x10/0x10 [ 981.216935][ T746] ? __fget_files+0x2a/0x420 [ 981.216961][ T746] ksys_write+0x150/0x270 [ 981.216978][ T746] ? __pfx_ksys_write+0x10/0x10 [ 981.216998][ T746] do_syscall_64+0x14d/0xf80 [ 981.217013][ T746] ? trace_irq_disable+0x3b/0x150 [ 981.217036][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.217052][ T746] ? clear_bhb_loop+0x40/0x90 [ 981.217070][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.217086][ T746] RIP: 0033:0x7ff11735cfce [ 981.217100][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 981.217115][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 981.217132][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 981.217144][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 981.217155][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 981.217165][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.217175][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 981.217194][ T746] [ 981.217203][ T746] BUG: Bad page state in process syz.4.6983 pfn:a1366 [ 981.496400][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa1366 [ 981.505267][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 981.512468][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 981.521154][ T746] raw: 0000000000000000 0000000000000001 00000000ffffffff 0000000000000000 [ 981.529768][ T746] page dumped because: page_pool leak [ 981.535217][ T746] page_owner tracks the page as allocated [ 981.540959][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239899657, free_ts 978208418227 [ 981.557902][ T746] post_alloc_hook+0x231/0x280 [ 981.562738][ T746] get_page_from_freelist+0x24dc/0x2580 [ 981.568689][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 981.574588][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 981.580533][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 981.586900][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 981.591849][ T746] do_xdp_generic+0x76b/0x12e0 [ 981.596767][ T746] tun_get_user+0x247d/0x3dd0 [ 981.601516][ T746] tun_chr_write_iter+0x113/0x200 [ 981.606596][ T746] vfs_write+0x61d/0xb90 [ 981.610857][ T746] ksys_write+0x150/0x270 [ 981.615264][ T746] do_syscall_64+0x14d/0xf80 [ 981.619886][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.626026][ T746] page last free pid 23 tgid 23 stack trace: [ 981.632155][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 981.637540][ T746] tlb_remove_table_rcu+0x85/0x100 [ 981.643266][ T746] rcu_core+0x7cd/0x1070 [ 981.647574][ T746] handle_softirqs+0x22a/0x870 [ 981.652436][ T746] run_ksoftirqd+0x36/0x60 [ 981.657007][ T746] smpboot_thread_fn+0x541/0xa50 [ 981.662038][ T746] kthread+0x388/0x470 [ 981.666153][ T746] ret_from_fork+0x51e/0xb90 [ 981.670765][ T746] ret_from_fork_asm+0x1a/0x30 [ 981.675623][ T746] Modules linked in: [ 981.679821][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 981.679848][ T746] Tainted: [B]=BAD_PAGE [ 981.679855][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.679867][ T746] Call Trace: [ 981.679874][ T746] [ 981.679881][ T746] dump_stack_lvl+0xe8/0x150 [ 981.679909][ T746] bad_page+0x17f/0x1c0 [ 981.679936][ T746] __free_frozen_pages+0xd62/0xdb0 [ 981.679960][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 981.679989][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 981.680018][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 981.680034][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 981.680066][ T746] do_xdp_generic+0xac5/0x12e0 [ 981.680091][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 981.680123][ T746] ? tun_get_user+0x2354/0x3dd0 [ 981.680148][ T746] tun_get_user+0x247d/0x3dd0 [ 981.680178][ T746] ? aa_file_perm+0x192/0x15e0 [ 981.680204][ T746] ? aa_file_perm+0x50e/0x15e0 [ 981.680228][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 981.680251][ T746] ? aa_file_perm+0x192/0x15e0 [ 981.680282][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 981.680307][ T746] ? preempt_schedule_common+0x82/0xd0 [ 981.680336][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 981.680361][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 981.680387][ T746] ? tun_get+0x1c/0x2f0 [ 981.680413][ T746] ? tun_get+0x1c/0x2f0 [ 981.680436][ T746] ? tun_get+0x1c/0x2f0 [ 981.680462][ T746] tun_chr_write_iter+0x113/0x200 [ 981.680487][ T746] vfs_write+0x61d/0xb90 [ 981.680510][ T746] ? __pfx_vfs_write+0x10/0x10 [ 981.680532][ T746] ? __fget_files+0x2a/0x420 [ 981.680563][ T746] ksys_write+0x150/0x270 [ 981.680581][ T746] ? __pfx_ksys_write+0x10/0x10 [ 981.680605][ T746] do_syscall_64+0x14d/0xf80 [ 981.680621][ T746] ? trace_irq_disable+0x3b/0x150 [ 981.680648][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.680665][ T746] ? clear_bhb_loop+0x40/0x90 [ 981.680685][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.680703][ T746] RIP: 0033:0x7ff11735cfce [ 981.680720][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 981.680735][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 981.680755][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 981.680768][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 981.680781][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 981.680792][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.680803][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 981.680824][ T746] [ 981.680834][ T746] BUG: Bad page state in process syz.4.6983 pfn:55880 [ 981.959408][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055880690 pfn:0x55880 [ 981.969553][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 981.976813][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 981.985471][ T746] raw: ffff888055880690 0000000000000001 00000000ffffffff 0000000000000000 [ 981.994106][ T746] page dumped because: page_pool leak [ 981.999512][ T746] page_owner tracks the page as allocated [ 982.005343][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239882034, free_ts 978208444493 [ 982.022268][ T746] post_alloc_hook+0x231/0x280 [ 982.027074][ T746] get_page_from_freelist+0x24dc/0x2580 [ 982.032685][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 982.038551][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 982.044089][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 982.050285][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 982.055422][ T746] do_xdp_generic+0x76b/0x12e0 [ 982.060259][ T746] tun_get_user+0x247d/0x3dd0 [ 982.065839][ T746] tun_chr_write_iter+0x113/0x200 [ 982.071207][ T746] vfs_write+0x61d/0xb90 [ 982.075494][ T746] ksys_write+0x150/0x270 [ 982.079837][ T746] do_syscall_64+0x14d/0xf80 [ 982.084672][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.090629][ T746] page last free pid 23 tgid 23 stack trace: [ 982.096730][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 982.102535][ T746] tlb_remove_table_rcu+0x85/0x100 [ 982.107688][ T746] rcu_core+0x7cd/0x1070 [ 982.111988][ T746] handle_softirqs+0x22a/0x870 [ 982.116797][ T746] run_ksoftirqd+0x36/0x60 [ 982.121294][ T746] smpboot_thread_fn+0x541/0xa50 [ 982.126315][ T746] kthread+0x388/0x470 [ 982.130394][ T746] ret_from_fork+0x51e/0xb90 [ 982.135049][ T746] ret_from_fork_asm+0x1a/0x30 [ 982.139870][ T746] Modules linked in: [ 982.143878][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 982.143909][ T746] Tainted: [B]=BAD_PAGE [ 982.143917][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.143931][ T746] Call Trace: [ 982.143939][ T746] [ 982.143948][ T746] dump_stack_lvl+0xe8/0x150 [ 982.143983][ T746] bad_page+0x17f/0x1c0 [ 982.144019][ T746] __free_frozen_pages+0xd62/0xdb0 [ 982.144051][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 982.144089][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 982.144125][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 982.144158][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 982.144201][ T746] do_xdp_generic+0xac5/0x12e0 [ 982.144234][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 982.144282][ T746] ? tun_get_user+0x2354/0x3dd0 [ 982.144317][ T746] tun_get_user+0x247d/0x3dd0 [ 982.144357][ T746] ? aa_file_perm+0x192/0x15e0 [ 982.144392][ T746] ? aa_file_perm+0x50e/0x15e0 [ 982.144424][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 982.144455][ T746] ? aa_file_perm+0x192/0x15e0 [ 982.144489][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 982.144519][ T746] ? preempt_schedule_common+0x82/0xd0 [ 982.144555][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 982.144589][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 982.144622][ T746] ? tun_get+0x1c/0x2f0 [ 982.144657][ T746] ? tun_get+0x1c/0x2f0 [ 982.144687][ T746] ? tun_get+0x1c/0x2f0 [ 982.144721][ T746] tun_chr_write_iter+0x113/0x200 [ 982.144755][ T746] vfs_write+0x61d/0xb90 [ 982.144792][ T746] ? __pfx_vfs_write+0x10/0x10 [ 982.144822][ T746] ? __fget_files+0x2a/0x420 [ 982.144858][ T746] ksys_write+0x150/0x270 [ 982.144881][ T746] ? __pfx_ksys_write+0x10/0x10 [ 982.144908][ T746] do_syscall_64+0x14d/0xf80 [ 982.144928][ T746] ? trace_irq_disable+0x3b/0x150 [ 982.144959][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.144980][ T746] ? clear_bhb_loop+0x40/0x90 [ 982.145005][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.145026][ T746] RIP: 0033:0x7ff11735cfce [ 982.145045][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 982.145065][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 982.145090][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 982.145106][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 982.145121][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 982.145135][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.145147][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 982.145172][ T746] [ 982.145183][ T746] BUG: Bad page state in process syz.4.6983 pfn:38566 [ 982.424100][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888038566000 pfn:0x38566 [ 982.434322][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 982.441506][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 982.450127][ T746] raw: ffff888038566000 0000000000000001 00000000ffffffff 0000000000000000 [ 982.458791][ T746] page dumped because: page_pool leak [ 982.464304][ T746] page_owner tracks the page as allocated [ 982.470058][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239864286, free_ts 978208469320 [ 982.487081][ T746] post_alloc_hook+0x231/0x280 [ 982.492362][ T746] get_page_from_freelist+0x24dc/0x2580 [ 982.498621][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 982.504500][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 982.510004][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 982.516146][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 982.521037][ T746] do_xdp_generic+0x76b/0x12e0 [ 982.525890][ T746] tun_get_user+0x247d/0x3dd0 [ 982.530604][ T746] tun_chr_write_iter+0x113/0x200 [ 982.535691][ T746] vfs_write+0x61d/0xb90 [ 982.540048][ T746] ksys_write+0x150/0x270 [ 982.544532][ T746] do_syscall_64+0x14d/0xf80 [ 982.549148][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.555195][ T746] page last free pid 23 tgid 23 stack trace: [ 982.561619][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 982.566767][ T746] tlb_remove_table_rcu+0x85/0x100 [ 982.571949][ T746] rcu_core+0x7cd/0x1070 [ 982.576238][ T746] handle_softirqs+0x22a/0x870 [ 982.581175][ T746] run_ksoftirqd+0x36/0x60 [ 982.585641][ T746] smpboot_thread_fn+0x541/0xa50 [ 982.590770][ T746] kthread+0x388/0x470 [ 982.594923][ T746] ret_from_fork+0x51e/0xb90 [ 982.599842][ T746] ret_from_fork_asm+0x1a/0x30 [ 982.604684][ T746] Modules linked in: [ 982.608609][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 982.608632][ T746] Tainted: [B]=BAD_PAGE [ 982.608638][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.608648][ T746] Call Trace: [ 982.608655][ T746] [ 982.608661][ T746] dump_stack_lvl+0xe8/0x150 [ 982.608686][ T746] bad_page+0x17f/0x1c0 [ 982.608710][ T746] __free_frozen_pages+0xd62/0xdb0 [ 982.608731][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 982.608757][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 982.608783][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 982.608798][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 982.608827][ T746] do_xdp_generic+0xac5/0x12e0 [ 982.608849][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 982.608878][ T746] ? tun_get_user+0x2354/0x3dd0 [ 982.608900][ T746] tun_get_user+0x247d/0x3dd0 [ 982.608927][ T746] ? aa_file_perm+0x192/0x15e0 [ 982.608950][ T746] ? aa_file_perm+0x50e/0x15e0 [ 982.608971][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 982.608991][ T746] ? aa_file_perm+0x192/0x15e0 [ 982.609015][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 982.609037][ T746] ? preempt_schedule_common+0x82/0xd0 [ 982.609063][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 982.609085][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 982.609108][ T746] ? tun_get+0x1c/0x2f0 [ 982.609131][ T746] ? tun_get+0x1c/0x2f0 [ 982.609152][ T746] ? tun_get+0x1c/0x2f0 [ 982.609175][ T746] tun_chr_write_iter+0x113/0x200 [ 982.609197][ T746] vfs_write+0x61d/0xb90 [ 982.609217][ T746] ? __pfx_vfs_write+0x10/0x10 [ 982.609241][ T746] ? __fget_files+0x2a/0x420 [ 982.609268][ T746] ksys_write+0x150/0x270 [ 982.609286][ T746] ? __pfx_ksys_write+0x10/0x10 [ 982.609306][ T746] do_syscall_64+0x14d/0xf80 [ 982.609321][ T746] ? trace_irq_disable+0x3b/0x150 [ 982.609345][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.609361][ T746] ? clear_bhb_loop+0x40/0x90 [ 982.609379][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.609395][ T746] RIP: 0033:0x7ff11735cfce [ 982.609409][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 982.609423][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 982.609440][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 982.609452][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 982.609463][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 982.609473][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.609483][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 982.609501][ T746] [ 982.609511][ T746] BUG: Bad page state in process syz.4.6983 pfn:50f85 [ 982.888134][ T746] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888050f85000 pfn:0x50f85 [ 982.898284][ T746] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 982.905464][ T746] raw: 00fff00000000000 dead000000000040 ffff888022af4000 0000000000000000 [ 982.914109][ T746] raw: ffff888050f85000 0000000000000001 00000000ffffffff 0000000000000000 [ 982.922848][ T746] page dumped because: page_pool leak [ 982.928323][ T746] page_owner tracks the page as allocated [ 982.934114][ T746] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2820(GFP_ATOMIC|__GFP_NOWARN), pid 746, tgid 744 (syz.4.6983), ts 978239846722, free_ts 978208495675 [ 982.951567][ T746] post_alloc_hook+0x231/0x280 [ 982.956377][ T746] get_page_from_freelist+0x24dc/0x2580 [ 982.961992][ T746] __alloc_frozen_pages_noprof+0x18d/0x380 [ 982.967924][ T746] alloc_pages_bulk_noprof+0x558/0x700 [ 982.973457][ T746] __page_pool_alloc_netmems_slow+0x14c/0x710 [ 982.979559][ T746] skb_pp_cow_data+0xcea/0x1bb0 [ 982.984649][ T746] do_xdp_generic+0x76b/0x12e0 [ 982.989456][ T746] tun_get_user+0x247d/0x3dd0 [ 982.994253][ T746] tun_chr_write_iter+0x113/0x200 [ 982.999608][ T746] vfs_write+0x61d/0xb90 [ 983.004362][ T746] ksys_write+0x150/0x270 [ 983.008822][ T746] do_syscall_64+0x14d/0xf80 [ 983.013483][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.019425][ T746] page last free pid 23 tgid 23 stack trace: [ 983.025487][ T746] __free_frozen_pages+0xc2b/0xdb0 [ 983.030645][ T746] tlb_remove_table_rcu+0x85/0x100 [ 983.035878][ T746] rcu_core+0x7cd/0x1070 [ 983.040220][ T746] handle_softirqs+0x22a/0x870 [ 983.045069][ T746] run_ksoftirqd+0x36/0x60 [ 983.049530][ T746] smpboot_thread_fn+0x541/0xa50 [ 983.054599][ T746] kthread+0x388/0x470 [ 983.058713][ T746] ret_from_fork+0x51e/0xb90 [ 983.063382][ T746] ret_from_fork_asm+0x1a/0x30 [ 983.068190][ T746] Modules linked in: [ 983.072953][ T746] CPU: 1 UID: 0 PID: 746 Comm: syz.4.6983 Tainted: G B syzkaller #0 PREEMPT(full) [ 983.072992][ T746] Tainted: [B]=BAD_PAGE [ 983.073002][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 983.073017][ T746] Call Trace: [ 983.073026][ T746] [ 983.073036][ T746] dump_stack_lvl+0xe8/0x150 [ 983.073072][ T746] bad_page+0x17f/0x1c0 [ 983.073105][ T746] __free_frozen_pages+0xd62/0xdb0 [ 983.073133][ T746] bpf_xdp_frags_shrink_tail+0x4da/0x7d0 [ 983.073176][ T746] bpf_xdp_adjust_tail+0x1d6/0x220 [ 983.073212][ T746] bpf_prog_5d7dc57dfd7f985a+0x1e/0x24 [ 983.073234][ T746] bpf_prog_run_generic_xdp+0x603/0x1490 [ 983.073274][ T746] do_xdp_generic+0xac5/0x12e0 [ 983.073302][ T746] ? __pfx_do_xdp_generic+0x10/0x10 [ 983.073341][ T746] ? tun_get_user+0x2354/0x3dd0 [ 983.073373][ T746] tun_get_user+0x247d/0x3dd0 [ 983.073412][ T746] ? aa_file_perm+0x192/0x15e0 [ 983.073445][ T746] ? aa_file_perm+0x50e/0x15e0 [ 983.073475][ T746] ? __pfx_tun_get_user+0x10/0x10 [ 983.073507][ T746] ? aa_file_perm+0x192/0x15e0 [ 983.073541][ T746] ? __lock_acquire+0x6b5/0x2cf0 [ 983.073574][ T746] ? preempt_schedule_common+0x82/0xd0 [ 983.073612][ T746] ? ref_tracker_alloc+0x35c/0x4c0 [ 983.073644][ T746] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 983.073682][ T746] ? tun_get+0x1c/0x2f0 [ 983.073715][ T746] ? tun_get+0x1c/0x2f0 [ 983.073745][ T746] ? tun_get+0x1c/0x2f0 [ 983.073778][ T746] tun_chr_write_iter+0x113/0x200 [ 983.073811][ T746] vfs_write+0x61d/0xb90 [ 983.073840][ T746] ? __pfx_vfs_write+0x10/0x10 [ 983.073869][ T746] ? __fget_files+0x2a/0x420 [ 983.073907][ T746] ksys_write+0x150/0x270 [ 983.073932][ T746] ? __pfx_ksys_write+0x10/0x10 [ 983.073961][ T746] do_syscall_64+0x14d/0xf80 [ 983.073982][ T746] ? trace_irq_disable+0x3b/0x150 [ 983.074017][ T746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.074039][ T746] ? clear_bhb_loop+0x40/0x90 [ 983.074066][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.074089][ T746] RIP: 0033:0x7ff11735cfce [ 983.074110][ T746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 983.074130][ T746] RSP: 002b:00007ff1181abfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 983.074156][ T746] RAX: ffffffffffffffda RBX: 00007ff1181ac6c0 RCX: 00007ff11735cfce [ 983.074181][ T746] RDX: 000000000000fcf0 RSI: 0000200000000340 RDI: 00000000000000c8 [ 983.074198][ T746] RBP: 00007ff117432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 983.074213][ T746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.074227][ T746] R13: 00007ff117616128 R14: 00007ff117616090 R15: 00007ffc1e07f718 [ 983.074255][ T746] [ 983.074767][T21203] net_ratelimit: 55 callbacks suppressed [ 983.074784][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.404733][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.431519][T21202] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.456532][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.465897][T21203] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 983.581348][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.589256][T21203] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 983.701574][T21211] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 983.709556][T21211] bond19: (slave ip6gretap1): failed to get link speed/duplex [ 983.821729][T21206] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 988.114001][T21203] net_ratelimit: 77 callbacks suppressed [ 988.114027][T21203] bond19: (slave ip6gretap1): link status up, enabling it in 0 ms [ 988.128138][T21203] bond19: (slave ip6gretap1): failed to get link speed/duplex